Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yAuj4asyO7fZCq7hV6pgFYgeCA.cer
File:                     2yAuj4asyO7fZCq7hV6pgFYgeCA.cer (raw, json)
Hash identifier:          wDfylhXs/jT9NyPL7om+7lFZfK2CJF9GyyDQCmfwLU4=
Subject key identifier:   DB:20:2E:8F:86:AC:C8:EE:DF:64:2A:BB:85:5E:A9:80:56:20:78:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7844452B26
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/83/DB202E8F86ACC8EEDF642ABB855EA98056207820.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/83/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:09:30 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.93.124.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516541459238 (0x7844452b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:09:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=db202e8f86acc8eedf642abb855ea98056207820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:e3:bd:b8:7d:cb:8c:84:72:da:96:fc:c4:
                    bd:f9:96:5f:c1:ab:de:c1:8d:8b:6c:2f:c3:43:05:
                    05:f4:38:ce:47:12:b9:30:c7:ff:aa:d3:41:8b:97:
                    d0:c4:25:15:df:e3:0c:35:8a:1c:fd:9d:b4:d3:9f:
                    71:47:43:ef:7c:8d:1f:0d:3f:38:2e:4c:be:db:c4:
                    81:88:f3:d3:21:01:87:fd:39:cc:bf:b6:6d:69:ff:
                    9c:32:cb:7f:de:57:f2:45:18:f2:04:3f:a7:c0:f0:
                    46:a4:36:66:f4:ae:7d:72:82:36:fb:df:38:62:50:
                    65:8b:0b:a5:c4:6a:60:f6:5e:31:1a:09:b8:b6:05:
                    d7:6e:9c:3c:29:74:62:9e:e9:48:fc:e5:56:87:11:
                    17:26:8e:7e:d7:3e:cf:80:12:a1:fd:14:b3:84:9b:
                    5f:00:d8:4e:24:92:ff:90:20:39:f3:ea:f7:e2:46:
                    21:f0:69:be:1d:34:45:21:e9:1f:42:80:c9:e6:19:
                    2e:0a:f0:4a:8a:e9:53:0c:68:4a:66:38:7b:55:b3:
                    eb:26:52:d3:c8:e6:eb:0b:50:46:80:6e:50:9e:37:
                    60:5d:e7:12:4f:b9:c0:17:5d:dc:fc:1d:12:99:db:
                    02:74:ca:b2:63:2b:af:a1:40:87:fd:89:97:42:46:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:2E:8F:86:AC:C8:EE:DF:64:2A:BB:85:5E:A9:80:56:20:78:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/83/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/83/DB202E8F86ACC8EEDF642ABB855EA98056207820.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:cb:29:d4:f8:5d:25:7c:b4:be:8c:e6:92:0d:50:d0:fa:
         61:e1:8d:3b:93:ae:9c:ce:e6:d2:59:79:60:11:16:59:57:8f:
         5c:ed:07:60:78:e7:10:f6:70:c0:00:0b:09:cb:63:5b:6f:4c:
         10:24:43:2d:1c:15:23:01:f9:6f:94:21:90:96:4a:7b:b6:23:
         ef:ec:f1:da:ca:70:1c:c5:c8:2e:b8:6c:51:cd:5f:5a:3b:db:
         ea:0d:fc:91:2d:a6:01:68:97:10:cb:c2:2d:f4:2f:a6:f0:94:
         f2:07:af:16:b7:df:d8:5e:b6:46:c4:91:fb:bc:37:7e:a7:74:
         15:10:b3:27:e7:be:be:6d:b7:9a:8d:a1:ad:8c:94:05:37:66:
         52:06:99:82:08:6f:31:14:4e:0f:87:29:ae:ef:c5:8d:a0:8f:
         21:f6:0c:a9:91:75:a8:4c:e0:34:2a:65:37:49:d5:e2:40:5d:
         02:7c:b1:77:e2:31:78:96:e9:c7:90:98:fc:cd:b3:eb:54:e3:
         94:5a:e0:c0:fc:02:34:d8:33:01:b2:45:e8:e9:97:67:4a:61:
         fe:49:7e:4a:96:b0:cc:a2:df:dd:d4:2e:a2:db:4e:bd:e0:2d:
         67:f7:d0:1b:1e:f8:c9:35:e2:33:cd:5c:e0:d2:d6:24:3b:87:
         c8:c6:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:45 2023 by rpki-client on console.sobornost.net