Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FtyAhi7EADboo4hjT7Vzsu0q3_c.cer
File:                     FtyAhi7EADboo4hjT7Vzsu0q3_c.cer (raw, json)
Hash identifier:          E5TrmexKuYPDuBBcTFfvEHVSPxpubVYWDIFVDcr+yiA=
Subject key identifier:   16:DC:80:86:2E:C4:00:36:E8:A3:88:63:4F:B5:73:B2:ED:2A:DF:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9B2679CE3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/162/16DC80862EC40036E8A388634FB573B2ED2ADFF7.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/162/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Sat 01 Jan 2022 02:17:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 176.119.195.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666365447743 (0x9b2679ce3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16dc80862ec40036e8a388634fb573b2ed2adff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:0c:28:b7:86:d6:cd:a2:04:db:b3:cb:1f:
                    2a:08:e5:34:d3:bc:99:d1:29:cf:18:d0:fa:53:ed:
                    6a:97:0a:99:3c:47:78:53:28:ee:7f:03:a7:52:fe:
                    2a:2d:66:15:5c:07:3a:7f:ec:b0:c7:73:d0:6b:05:
                    77:ea:d3:08:41:a3:65:34:1d:45:19:e7:90:b2:2b:
                    47:56:5f:6d:4a:e6:44:b4:88:2c:ce:13:54:65:a9:
                    cc:2b:16:fa:59:19:fb:d1:b6:b6:f1:8c:76:14:b1:
                    d4:b1:eb:18:56:77:d1:92:07:06:a6:54:0c:3f:54:
                    c1:1e:ee:ce:1f:aa:64:01:2a:19:75:8e:e3:be:12:
                    df:b6:07:ff:15:3b:7f:01:1d:74:5a:08:38:4d:c6:
                    66:8d:22:1c:71:d9:19:91:d4:8e:f9:01:ce:e8:f6:
                    4a:39:6a:09:88:48:35:92:e5:12:33:57:d5:b7:f3:
                    15:77:6b:70:ac:b9:c7:ef:c6:08:5b:81:83:eb:e2:
                    f9:2f:fb:4b:1e:c1:4a:86:73:67:87:0b:7d:c9:ee:
                    94:49:e2:3c:a5:47:eb:80:93:9c:69:f1:0f:00:0c:
                    f6:bb:b8:75:31:c2:89:97:43:7c:b3:49:19:d7:7d:
                    58:ab:9c:cf:21:82:4b:19:cd:a0:35:d6:70:85:eb:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:80:86:2E:C4:00:36:E8:A3:88:63:4F:B5:73:B2:ED:2A:DF:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/162/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/162/16DC80862EC40036E8A388634FB573B2ED2ADFF7.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:93:3b:df:4f:0e:6f:7b:d1:4d:8e:59:61:bb:59:a3:32:
         e8:1f:ed:16:d8:e4:40:42:3b:92:50:71:42:9c:86:e7:96:40:
         bb:85:54:0e:1c:e1:47:48:1c:a3:22:a8:66:f8:8c:92:38:68:
         2f:3c:f6:23:e2:bd:4c:95:ca:39:f3:34:59:a2:24:94:d3:3e:
         6c:b6:54:21:21:2f:6a:c6:6a:79:e2:a9:da:5d:d6:ab:5f:f8:
         8b:f4:fc:3b:e1:2f:73:46:d2:e7:ff:ba:78:ad:58:b3:8b:c0:
         1c:ff:92:0a:6d:de:35:35:ff:b9:d5:8c:c3:9a:63:35:d5:7e:
         35:75:dd:c3:63:91:8c:74:f0:ef:4b:b9:94:71:49:6f:0d:82:
         fb:31:1a:6f:4e:d4:a8:68:f3:ef:ca:43:19:30:a1:fa:ce:79:
         f9:c9:bc:0c:56:80:55:0d:9a:58:26:b0:68:6c:70:13:f3:3f:
         7a:26:3d:40:a5:9b:df:f5:a1:5e:1c:71:d1:93:ca:eb:ae:84:
         05:38:67:93:92:d4:8f:df:36:bc:e6:f8:d1:94:02:84:9e:a6:
         78:e0:86:1c:67:77:e0:c1:74:10:af:01:1f:3f:83:5b:bc:5c:
         3c:3c:aa:6e:7c:27:6a:99:f8:d0:66:4c:32:f5:c8:ae:b0:6b:
         cf:aa:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net