Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6YgNy0fQRHqKeNK9gevBmnk4Bz8.cer
File:                     6YgNy0fQRHqKeNK9gevBmnk4Bz8.cer (raw, json)
Hash identifier:          DROdGipnhD9BwxGZneLrJXvUrEOBBu8vz3tvwmXOgz0=
Subject key identifier:   E9:88:0D:CB:47:D0:44:7A:8A:78:D2:BD:81:EB:C1:9A:79:38:07:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7853F9D265
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/97/E9880DCB47D0447A8A78D2BD81EBC19A7938073F.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/97/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:11:11 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.181.204.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516804956773 (0x7853f9d265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:11:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e9880dcb47d0447a8a78d2bd81ebc19a7938073f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:8e:a4:e1:1a:63:03:04:ca:26:81:55:1d:
                    1e:fa:a8:f1:79:2d:46:cc:ca:de:34:5e:a2:84:85:
                    b4:02:62:b7:80:97:a5:b7:96:8b:15:e0:e9:4b:ec:
                    f4:5d:a8:95:23:b6:03:a6:ba:15:95:33:d3:0f:31:
                    25:81:48:83:49:2c:be:e4:e4:e7:a7:9b:15:81:59:
                    b5:37:9e:b6:ea:76:10:b6:71:8a:1f:4b:e4:ab:98:
                    2e:a6:32:82:3f:e8:99:cc:59:75:6f:84:c4:05:a4:
                    7a:f7:a4:88:22:7e:1a:95:2d:2a:24:68:69:5e:fc:
                    27:91:59:79:e1:7b:bd:c2:d4:f5:41:c5:e0:39:3f:
                    ad:41:4d:b6:fb:94:c8:e0:df:41:dd:ce:f7:61:0c:
                    34:eb:e1:b5:21:70:3b:76:a9:1e:6f:81:3a:33:ec:
                    94:40:a8:03:f5:79:73:f3:81:14:9d:91:89:d9:42:
                    b4:76:55:61:0a:1f:d3:f8:11:a0:8a:42:64:3b:21:
                    9a:af:94:cb:00:8d:81:a1:ae:7d:7a:13:de:99:35:
                    cb:f3:7c:86:e7:b9:41:52:bf:4e:a1:a6:e9:76:6f:
                    fd:f5:11:e7:11:9e:ad:c8:c0:dd:12:0a:26:5f:5e:
                    e5:c2:50:b2:f6:bc:0f:40:d5:12:40:99:6e:76:86:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:88:0D:CB:47:D0:44:7A:8A:78:D2:BD:81:EB:C1:9A:79:38:07:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/97/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/97/E9880DCB47D0447A8A78D2BD81EBC19A7938073F.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:4a:6b:88:7e:69:ee:92:f0:71:f2:6b:78:1d:cc:e3:fc:0a:
         66:2e:f8:9c:5d:fa:2f:5e:09:f9:59:83:a2:d1:3d:7c:02:5f:
         99:28:fe:ca:c7:20:0a:b1:10:76:a9:35:93:c9:54:8e:02:80:
         da:5a:ba:3e:84:fb:7f:a3:88:b3:37:24:6f:e3:36:a1:c9:67:
         a4:30:c0:d8:e6:23:af:6d:f0:53:6b:6f:ab:be:d4:18:20:33:
         46:7c:d2:69:dc:22:74:23:e6:45:99:e2:33:a9:0f:de:0e:47:
         bc:a4:13:6a:8a:b7:70:70:8d:74:12:4a:16:4e:12:f0:4b:d8:
         62:dd:4b:5f:bd:66:22:ba:7e:4c:7b:7d:bb:28:51:cd:bb:c2:
         aa:e5:43:cd:e5:d8:21:fe:54:df:ba:7e:72:95:0a:67:b4:90:
         ae:ad:7f:44:4e:61:f6:b1:ae:87:de:b7:fc:e0:9b:49:d1:7d:
         f3:bf:63:9e:31:9c:84:0e:f6:ee:d9:8f:fd:52:2b:13:29:d6:
         3c:ef:b5:6c:db:e6:a5:95:9b:06:2a:ed:85:67:18:c7:cc:f6:
         e5:66:aa:a2:49:33:53:c0:4b:b9:f5:81:c0:de:3d:cf:79:02:
         db:ed:dd:d0:e6:02:56:9c:7c:c0:77:63:8e:b0:3d:8d:cc:51:
         68:f9:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net