Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zaMKSvJfTYoZZm5UJ_iLTuw3NEs.cer
File:                     zaMKSvJfTYoZZm5UJ_iLTuw3NEs.cer (raw, json)
Hash identifier:          JlPiS+brTeAFQj6zdCUJR2CheSp9UihMU1I30/niY1w=
Subject key identifier:   CD:A3:0A:4A:F2:5F:4D:8A:19:66:6E:54:27:F8:8B:4E:EC:37:34:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01830E0C2DAC22C35068738C463A6A49EF5E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/87f342-6604-45e9-8361-a55c5ee46175/1/zaMKSvJfTYoZZm5UJ_iLTuw3NEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/87f342-6604-45e9-8361-a55c5ee46175/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 05 Sep 2022 14:27:02 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203023

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0e:0c:2d:ac:22:c3:50:68:73:8c:46:3a:6a:49:ef:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  5 14:27:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cda30a4af25f4d8a19666e5427f88b4eec37344b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:a5:fc:2f:93:30:99:ec:2f:02:c1:46:4a:
                    4d:e2:81:6a:e5:a1:33:e5:5a:33:67:66:f8:2f:28:
                    e6:30:30:ae:4c:79:a4:42:78:b1:43:94:e4:60:39:
                    5c:bd:7e:aa:03:a2:43:73:d2:36:7c:39:4c:ba:23:
                    a7:53:b5:89:77:6c:ec:4c:86:c6:1f:11:a6:69:6a:
                    fc:0d:87:30:3f:03:60:bc:7e:24:cd:df:eb:f7:72:
                    b9:43:71:ae:0d:9d:5a:e0:15:ec:7e:0b:ee:b1:4f:
                    85:6e:bb:62:7b:3d:a3:65:28:cd:c8:5c:db:67:38:
                    cb:0f:8b:f1:1d:2f:eb:cb:83:d5:5c:b7:f3:30:32:
                    ce:4e:c2:41:ac:5c:16:5e:39:e3:b5:0c:4c:49:e4:
                    62:56:75:ff:1a:ce:41:ea:6a:2a:ea:03:9d:7a:4d:
                    4a:71:ab:aa:af:96:f8:de:bd:8b:4d:83:1c:b4:77:
                    ba:19:2b:ed:0b:7e:87:0c:c9:47:d0:b1:9f:dd:cf:
                    1e:a0:2b:54:1b:92:be:21:95:fc:ff:03:29:ae:1a:
                    1b:a5:4c:82:13:2c:6c:48:83:07:93:8e:a3:a0:3c:
                    ed:d2:c5:16:3f:29:e9:20:b6:67:de:12:74:47:10:
                    0c:e1:e2:03:dc:22:19:b3:bc:11:dc:4d:f1:64:b2:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A3:0A:4A:F2:5F:4D:8A:19:66:6E:54:27:F8:8B:4E:EC:37:34:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/87f342-6604-45e9-8361-a55c5ee46175/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/87f342-6604-45e9-8361-a55c5ee46175/1/zaMKSvJfTYoZZm5UJ_iLTuw3NEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203023

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:44:cd:65:57:13:3c:f6:c9:dc:ef:3d:1a:6f:5f:ef:d0:
         08:7a:aa:3d:b4:87:79:c0:4d:7c:02:23:f5:57:92:01:dd:ec:
         af:c6:80:c0:62:20:52:e6:a5:3e:97:2e:ac:5c:c7:83:4f:bc:
         e2:b0:8e:bc:ae:10:c2:e7:a2:f9:a2:6d:de:51:7d:49:7f:10:
         1e:44:d5:ee:62:c1:79:39:0e:2b:86:83:a4:a2:a8:ae:82:d3:
         11:7b:e0:08:6f:65:97:9c:55:ab:8d:08:ac:7e:3b:4e:f5:39:
         e8:f0:8a:84:32:21:0c:47:78:e0:c2:2e:b3:d9:68:70:37:73:
         65:1e:07:01:de:ee:4c:9b:48:d2:f1:a9:b5:79:15:0d:a3:f2:
         86:64:d9:d5:8a:99:74:eb:a4:8e:32:42:d8:4a:2c:bd:5c:84:
         92:47:f7:6f:b3:1f:2a:8b:7f:bd:86:e5:1f:e7:f5:59:e1:4f:
         05:da:c1:64:bd:aa:17:8b:97:c2:4e:aa:eb:2f:4e:f9:e8:f6:
         d7:3a:14:7e:94:31:b8:fa:b3:d7:ca:94:3e:a5:b9:66:7d:56:
         2c:dd:e9:45:93:30:98:16:e5:b5:81:4e:3c:de:8c:6a:a1:90:
         27:fc:17:ee:61:62:74:ea:af:78:e6:40:d0:63:ce:53:e2:5f:
         0a:79:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:19 2024 by rpki-client on console-fra.rpki-client.org