Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANWjrZdiCi58BdqN8mse-w25Cvw.cer
File:                     ANWjrZdiCi58BdqN8mse-w25Cvw.cer (raw, json)
Hash identifier:          VlfZjVLRVmDuRIZPdchMjtvwDgO4nlH9gwsrpQ7Mq+4=
Subject key identifier:   00:D5:A3:AD:97:62:0A:2E:7C:05:DA:8D:F2:6B:1E:FB:0D:B9:0A:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75AC8445D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/51/00D5A3AD97620A2E7C05DA8DF26B1EFB0DB90AFC.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/51/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:10:23 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.253.236.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505405523414 (0x75ac8445d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:10:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=00d5a3ad97620a2e7c05da8df26b1efb0db90afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:72:5a:25:5d:40:e0:16:07:c8:46:1e:77:
                    07:8a:c4:75:93:15:a7:8d:52:a3:37:f6:7c:ac:db:
                    33:0e:96:a3:80:ad:5b:15:d2:17:55:e7:f1:b9:b1:
                    7d:ed:14:82:15:26:23:87:71:0e:eb:7f:28:40:80:
                    09:8f:a1:85:31:15:0b:ca:cb:2e:01:b6:d0:6e:b8:
                    43:2d:26:d8:3a:81:79:8a:28:23:8a:53:ac:0b:4c:
                    5a:2e:d0:46:2c:b1:e2:b5:24:b3:c0:3a:d9:68:02:
                    28:d4:38:bf:dd:cb:c4:b6:3d:16:63:a6:a8:a1:ea:
                    c4:79:92:ac:60:78:07:88:66:f9:ab:f7:06:5e:54:
                    09:58:ba:18:1f:6c:a5:77:44:fe:29:e3:ee:61:3c:
                    13:67:f3:f6:1b:c5:29:e4:98:c3:a5:2b:64:55:f5:
                    a6:20:a2:55:c2:b2:e2:4d:62:bc:c3:04:20:e1:63:
                    b2:c8:72:64:f4:41:68:92:1e:2e:70:92:21:01:91:
                    9b:90:dc:4e:c3:4b:8e:47:21:a7:59:af:e6:53:d1:
                    8d:c0:e5:09:36:30:3e:25:8e:73:e8:53:10:ad:7c:
                    8c:38:e7:4c:28:30:f1:2b:d8:f0:6d:24:f6:88:a7:
                    ce:8f:49:ba:75:c5:dd:76:94:15:77:d1:e7:71:c2:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D5:A3:AD:97:62:0A:2E:7C:05:DA:8D:F2:6B:1E:FB:0D:B9:0A:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/51/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/51/00D5A3AD97620A2E7C05DA8DF26B1EFB0DB90AFC.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:71:a5:f8:67:76:7e:0c:1f:16:dc:73:ae:02:ed:c1:17:d1:
         0d:25:9d:97:8c:6d:33:ec:c2:6b:49:82:c2:b9:a1:78:fe:23:
         43:09:30:83:fa:69:05:9a:b2:a7:c7:af:82:d9:2d:34:c9:98:
         d0:42:58:9f:60:96:8d:9c:b5:47:3a:46:66:31:3a:2b:8e:0a:
         9e:ae:91:c3:4d:43:fc:7a:08:7f:a0:2c:3f:21:02:ac:44:29:
         88:37:cc:3e:7a:f8:b3:96:52:6e:ab:e0:fe:05:29:14:4e:65:
         b1:63:3f:f1:cd:36:6c:c4:8d:55:f3:19:e2:21:c3:2d:0c:3b:
         e5:09:57:bd:86:2b:04:b5:b2:d6:23:8d:a4:84:83:bc:80:68:
         b2:e8:89:7e:93:c2:3a:59:34:ec:29:cf:9b:c1:2a:44:27:f3:
         ec:0e:c7:0a:97:59:4a:e0:c0:a4:ba:25:2f:1d:e3:c7:f8:6a:
         ae:dc:7d:ad:94:6c:39:22:0a:c2:59:58:28:09:42:3e:d7:3b:
         c7:cc:4e:41:48:76:38:64:cb:d2:de:64:33:ff:f0:f6:c7:13:
         c3:26:18:f6:16:7b:ea:c7:53:42:a1:f4:48:be:4c:7f:35:60:
         e3:62:a5:0b:d6:13:6e:f1:d0:8b:e5:f4:79:e1:2c:21:05:1d:
         7c:d4:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net