Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vfA_Xecs2Q1gOak1hl3qv41WtiI.cer
File:                     vfA_Xecs2Q1gOak1hl3qv41WtiI.cer (raw, json)
Hash identifier:          XnWmI7iVbpiELPmmzggCxqyyIwsTDmCMQEsdqU8jZNk=
Subject key identifier:   BD:F0:3F:5D:E7:2C:D9:0D:60:39:A9:35:86:5D:EA:BF:8D:56:B6:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182DE51B2DFAAD985C4A4BCA40C578D2875
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/vfA_Xecs2Q1gOak1hl3qv41WtiI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 27 Aug 2022 08:01:12 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.143.100.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:de:51:b2:df:aa:d9:85:c4:a4:bc:a4:0c:57:8d:28:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 27 08:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bdf03f5de72cd90d6039a935865deabf8d56b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:8d:53:52:aa:87:31:fb:ea:7c:11:45:87:
                    b7:e5:ed:1c:75:a5:cb:f7:1a:6d:9c:0b:fc:01:75:
                    2b:e6:cd:6e:7e:f0:08:3d:6e:71:9a:40:11:7f:19:
                    06:5f:de:4b:63:bb:ca:10:fd:4d:fd:84:4a:97:99:
                    e2:54:cc:c7:89:35:fa:90:b6:8f:77:10:69:aa:f1:
                    bd:17:6b:74:e1:7f:49:e7:30:e7:53:81:e5:88:3b:
                    b2:96:8c:b5:42:0a:f4:57:6a:df:cf:93:0e:62:d4:
                    e2:69:b6:fa:dd:2a:7c:48:a4:8b:4a:d8:b7:0d:d8:
                    0f:5c:c4:60:e1:ab:4a:7e:ad:6f:9f:c2:0f:2f:84:
                    89:7e:14:46:37:9b:25:e2:77:b5:75:15:5e:88:20:
                    cc:3d:2c:dd:dd:9b:dc:b7:91:9e:b8:cd:f6:2a:29:
                    14:24:68:c0:24:a7:8f:a6:1e:b1:1b:d5:34:00:33:
                    3a:e6:b8:ab:fe:be:1f:0b:b2:ef:55:4b:40:62:9b:
                    b9:78:54:6e:ad:3c:ef:a5:4e:8c:e9:33:44:4d:52:
                    cb:e9:46:01:b7:b3:91:44:58:24:4d:5b:59:33:e3:
                    ac:22:b2:9e:ea:a0:35:20:75:fa:e8:63:e1:b6:18:
                    de:60:af:e0:ec:82:35:6f:59:d8:e7:95:ff:44:d0:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F0:3F:5D:E7:2C:D9:0D:60:39:A9:35:86:5D:EA:BF:8D:56:B6:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/vfA_Xecs2Q1gOak1hl3qv41WtiI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:34:b2:3c:57:88:29:f4:a2:ba:fe:75:5f:a2:c1:86:3a:85:
         6e:22:ea:c7:6e:79:c9:53:9f:82:13:56:de:62:7c:08:ae:f6:
         c7:e1:c1:47:9e:2a:fc:2d:23:96:8d:fb:57:5f:43:20:cd:d2:
         7e:49:b7:7f:d3:5e:94:34:85:18:ea:4f:f3:56:f0:89:1c:de:
         88:2b:4e:9f:ea:1a:9a:1b:a0:92:71:c2:fc:da:3c:0b:18:b0:
         be:72:da:46:38:85:fe:f3:1d:0d:55:a1:86:ec:05:6c:18:a4:
         bb:2c:ba:53:8f:f3:44:35:56:63:1d:8e:47:c0:5a:c8:44:8e:
         77:ed:4f:a3:4c:6d:de:20:8b:e5:d9:e3:90:1f:8d:e0:00:09:
         09:62:e6:91:6f:95:af:4e:15:b2:d2:16:08:43:bb:83:67:bd:
         ae:15:d4:37:9a:5a:ef:8d:9a:d5:28:b6:8d:b2:cc:a1:ed:b5:
         f6:5c:50:b7:fe:5d:03:e6:27:28:8e:47:06:2a:b8:96:51:ae:
         18:52:96:40:a9:a8:f9:a6:f7:5a:23:4e:a7:02:a6:c1:fb:5d:
         6f:fe:81:b0:95:6f:8a:3a:69:1c:a3:e7:c6:2a:dc:80:ee:b8:
         13:9d:65:36:a5:21:61:30:3d:c4:3e:d7:ab:05:82:3a:d0:23:
         22:22:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:43 2024 by rpki-client on console-fra.rpki-client.org