Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1L0EP8vKcdFlty7GVmsyvI-DWxA.cer
File:                     1L0EP8vKcdFlty7GVmsyvI-DWxA.cer (raw, json)
Hash identifier:          Fk45I8lKGk712BnR0XMOnaMAnF9P3VwiJ7z4woZGLPw=
Subject key identifier:   D4:BD:04:3F:CB:CA:71:D1:65:B7:2E:C6:56:6B:32:BC:8F:83:5B:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7859235A4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/86/D4BD043FCBCA71D165B72EC6566B32BC8F835B10.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/86/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:11:26 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.141.220.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516891564623 (0x7859235a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:11:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d4bd043fcbca71d165b72ec6566b32bc8f835b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1f:78:f2:bf:fe:d2:0c:50:ed:0a:d0:1c:c5:
                    97:75:dd:9a:c6:b5:86:27:4a:52:32:e2:a3:e9:51:
                    8d:fc:6b:9e:ee:2d:78:c0:9f:74:35:b7:b1:51:31:
                    fe:63:8e:68:3f:58:04:e9:c3:3c:e4:13:9a:54:43:
                    b2:b1:7e:49:2c:21:60:68:05:f6:cd:6c:8f:7c:62:
                    75:4f:91:58:ac:e9:b5:c9:5d:1c:a8:6d:85:ae:26:
                    53:bf:b5:9c:98:3e:7f:dc:25:89:14:fc:f5:ce:14:
                    e3:f3:f8:5d:a6:06:08:9e:ed:61:4a:6d:fe:04:53:
                    14:42:d2:5b:29:d0:bf:fb:ce:c1:26:5c:77:af:04:
                    e9:b7:d9:62:19:06:ad:79:87:77:32:9b:bd:a9:d5:
                    ed:f1:a6:82:14:77:de:0e:3f:b6:90:9e:7d:82:c3:
                    be:d5:6c:57:5e:9e:40:06:a5:03:9a:e7:51:52:ac:
                    00:cc:b1:9b:21:05:84:33:55:d7:de:e7:74:69:63:
                    1f:77:35:83:fe:02:27:a5:c8:81:d8:cf:91:48:aa:
                    5e:4f:ff:de:cf:91:b0:6c:e0:6b:04:56:19:ad:22:
                    b2:6d:37:59:9d:dd:8f:57:dc:47:67:26:b2:b2:df:
                    1f:ff:14:d4:2d:fe:f5:c9:ac:fd:c9:64:e8:a8:7c:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:04:3F:CB:CA:71:D1:65:B7:2E:C6:56:6B:32:BC:8F:83:5B:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/86/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/86/D4BD043FCBCA71D165B72EC6566B32BC8F835B10.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:69:7a:08:df:41:0c:99:4a:8f:29:fb:8d:f4:b4:0c:70:45:
         9f:93:6d:6f:8c:0d:a0:12:3a:77:f0:3a:53:e7:14:fd:05:91:
         28:73:99:d5:ca:95:11:c0:fc:26:a3:6a:d8:d7:0f:36:26:cb:
         57:0d:4f:75:d8:3d:b0:13:a3:19:e9:af:76:fd:66:b6:69:dd:
         de:46:b1:ae:8e:7e:92:e4:98:9d:23:0c:07:51:65:1e:4a:73:
         37:c9:cd:53:83:1a:4f:f6:2b:ec:97:b3:c8:4c:e8:09:30:63:
         11:8e:be:10:ba:a7:d8:46:ea:f2:02:c7:a5:5b:1a:69:af:89:
         b5:fc:74:e8:00:5c:ae:b3:01:8d:b6:7f:1a:91:0d:fc:53:a9:
         8b:e6:3c:d7:4a:14:bf:8d:20:d3:af:ac:84:00:fc:54:2c:05:
         3a:09:14:7a:9b:d9:6e:5e:72:6c:59:6e:36:66:f3:52:ad:14:
         99:ab:d2:8e:6c:f6:8e:e5:6e:d1:0c:96:f2:c8:e8:e9:c1:01:
         d7:b1:6f:ee:37:3e:0b:7a:03:0b:7b:89:c1:23:b9:a1:7a:c1:
         9e:db:d4:72:76:8c:e5:7b:1f:b4:f0:88:d8:8b:08:f9:b4:ac:
         06:a0:98:08:1d:02:03:65:6b:63:19:ff:d6:c5:42:fb:6e:75:
         22:f5:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net