Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BYy2ePkhbilnnDHKx39Y2VGCUVc.cer
File:                     BYy2ePkhbilnnDHKx39Y2VGCUVc.cer (raw, json)
Hash identifier:          YgrvgnIs4Wf9EuZRzUd33UzyIqGNMdudwH6iVkrHbmQ=
Subject key identifier:   05:8C:B6:78:F9:21:6E:29:67:9C:31:CA:C7:7F:58:D9:51:82:51:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7837054E55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/46/058CB678F9216E29679C31CAC77F58D951825157.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/46/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:08:42 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 92.118.56.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516319170133 (0x7837054e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:08:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=058cb678f9216e29679c31cac77f58d951825157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:be:38:2a:f1:dd:33:30:d9:fb:ef:27:79:
                    35:d3:02:a9:86:62:45:8d:73:0f:a5:00:44:55:0d:
                    9c:6a:78:3d:02:3d:ff:92:e6:ae:c6:08:17:bd:d9:
                    67:8d:94:8c:5f:d1:23:e4:23:72:d6:37:3a:04:6f:
                    eb:5c:37:e0:fd:1d:a6:2c:dc:62:3e:bd:93:a3:dc:
                    e8:24:ef:8d:cd:d4:4b:82:46:f5:f7:c2:d8:14:42:
                    8e:c5:1d:0f:79:4c:54:ed:a1:18:cc:fe:f2:7e:56:
                    8f:0e:98:91:f8:23:19:e9:6a:77:02:9f:dc:96:d8:
                    fb:72:61:24:8b:29:98:06:6b:bb:30:9b:fa:6e:74:
                    8c:a1:d0:3e:39:c5:e7:53:9b:1e:56:d4:0d:bd:15:
                    29:f1:39:62:e9:ba:fe:96:58:32:e9:28:93:53:39:
                    b8:c1:59:04:81:ed:c6:c5:79:f5:86:1e:6c:65:3a:
                    3d:b7:50:51:8e:17:49:58:9b:96:c1:cb:59:4f:ff:
                    e1:e4:20:34:f4:a0:0d:4d:31:26:ba:ad:5f:70:db:
                    d5:99:05:77:9f:8a:dd:f9:c9:ba:6a:10:c4:a0:66:
                    a3:f8:58:1b:de:b4:93:4a:34:08:ae:73:b2:ef:91:
                    86:b6:58:cc:ed:d2:c7:e4:10:7d:a4:ac:64:08:7b:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:B6:78:F9:21:6E:29:67:9C:31:CA:C7:7F:58:D9:51:82:51:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/46/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/46/058CB678F9216E29679C31CAC77F58D951825157.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:9d:92:8d:61:77:cd:20:07:9c:9e:9c:79:ba:6f:57:ce:
         14:b0:18:bb:1a:71:7d:92:fb:63:b2:9a:cf:3d:79:74:17:22:
         1b:39:3c:05:00:f2:57:3c:8f:51:63:c7:b9:88:66:72:6f:ad:
         a1:e5:72:38:dd:d0:9f:29:af:ae:b9:f2:e1:89:85:6e:79:09:
         da:4c:0c:db:f5:91:4e:cc:fb:1b:26:d1:6e:0c:94:35:dd:e7:
         ec:62:d5:50:15:d3:83:20:a8:85:09:63:93:d0:fd:3d:ff:96:
         ee:10:c2:c7:50:f5:1e:a2:f3:7b:55:64:9d:46:88:9d:26:a8:
         c3:00:bb:72:dc:cd:e2:25:c2:72:6b:c8:a0:e8:ed:d4:1e:2a:
         74:dc:b7:82:eb:52:e6:3c:95:3e:e2:4a:50:b5:1e:8f:47:dc:
         d4:3c:73:c3:c0:b4:a7:75:d0:5e:4e:2b:0f:03:36:f8:92:72:
         b5:a0:c6:07:70:72:b3:70:f7:aa:35:80:ac:bb:ae:46:8e:24:
         a0:cc:73:b1:92:ea:de:ee:d3:0b:d7:6a:64:39:1b:a7:4f:0c:
         61:14:c1:57:fc:66:a8:7e:da:fb:16:37:b3:12:f5:32:54:0c:
         fb:7f:32:13:46:50:e5:f9:85:6f:c7:9a:3f:ee:bd:75:36:10:
         2f:62:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net