Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PDF6eAbJD--bQcUFxa-T44647gA.cer
File:                     PDF6eAbJD--bQcUFxa-T44647gA.cer (raw, json)
Hash identifier:          QcH1ummE9UKbQBGLxbLu9L2vnCETEZuKgjBRQYPvbGM=
Subject key identifier:   3C:31:7A:78:06:C9:0F:EF:9B:41:C5:05:C5:AF:93:E3:8E:B8:EE:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77968985E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/50/3C317A7806C90FEF9B41C505C5AF93E38EB8EE00.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/50/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:54:46 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.252.52.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513626703328 (0x77968985e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:54:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3c317a7806c90fef9b41c505c5af93e38eb8ee00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:7a:8a:f1:5e:8a:d1:e2:d8:59:15:e8:1b:
                    f9:00:eb:d7:6a:dc:9c:4d:65:b9:6e:b0:e7:c6:8c:
                    98:ad:35:66:1c:68:22:20:b3:05:2a:53:9a:d3:32:
                    95:f2:60:1c:a2:09:db:ab:e0:cd:3e:51:ec:41:16:
                    24:0c:4c:56:c7:79:17:2f:21:cc:5d:36:2d:e3:7c:
                    5b:54:e1:52:36:91:57:01:61:31:01:9b:b3:a2:dc:
                    19:07:ff:d8:34:40:4b:74:e1:fd:98:46:0e:53:fc:
                    ec:de:99:54:1f:9d:58:01:e4:fb:8c:ed:81:e9:d7:
                    27:fb:5d:ed:e2:bd:92:b1:0a:73:a6:23:fb:61:17:
                    1c:a8:f1:43:7e:84:cf:a0:0f:51:ba:10:6c:7b:c0:
                    7c:78:22:b7:39:38:eb:65:af:fb:f0:b7:a6:65:f2:
                    16:96:60:ec:3f:70:06:0c:0f:e2:43:f7:12:7e:4c:
                    9e:bb:7d:7d:1f:90:92:49:2c:3c:a0:d0:21:ae:cc:
                    94:a3:91:d4:b9:16:ab:b7:7c:a3:cf:7d:31:c0:81:
                    2f:86:26:c5:09:1d:bb:98:4c:52:1c:d1:a0:2b:68:
                    08:b6:40:ee:6d:ae:0b:d7:52:b7:42:dd:56:87:75:
                    06:35:d9:10:cb:7e:a4:ca:c3:0e:f5:a6:4a:51:07:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:31:7A:78:06:C9:0F:EF:9B:41:C5:05:C5:AF:93:E3:8E:B8:EE:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/50/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/50/3C317A7806C90FEF9B41C505C5AF93E38EB8EE00.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:b4:c0:c8:b7:8e:e8:df:44:c4:c6:24:97:8a:be:18:47:
         1d:a6:7f:39:58:2c:ec:90:f9:20:00:96:e5:d0:d9:51:b4:7b:
         d2:aa:39:41:3d:f1:02:65:e3:82:4c:08:c8:23:a8:59:4e:7f:
         be:71:a2:64:10:60:d7:dd:e9:8e:60:be:09:09:c7:3f:93:bc:
         1a:2c:d6:73:de:ba:0e:14:f7:ab:bf:ab:a1:ff:12:90:12:24:
         91:9a:57:fc:c7:48:0e:f0:f0:40:7b:d6:2a:c2:37:96:a3:cc:
         71:ce:85:a0:4e:bd:6b:e3:41:a7:a2:06:19:34:6f:dc:e2:5a:
         62:bd:c7:93:65:58:9b:ad:83:b6:52:be:ab:1c:8a:b1:e7:c1:
         91:7b:5d:75:11:51:fb:c1:4a:3e:cd:30:be:cb:21:89:93:f8:
         77:c4:ac:b8:71:1f:9a:31:23:e2:94:77:e4:d3:d7:72:1c:16:
         67:6a:2d:cc:70:26:cd:9e:84:4f:c0:e7:9a:05:4c:0b:c4:3e:
         be:36:f4:d8:5c:00:07:8b:43:1b:60:9e:d3:0c:06:14:d0:b4:
         56:84:dc:69:58:84:32:31:5c:cf:69:ea:cf:b7:3d:72:7e:e7:
         66:27:a3:04:20:ce:b2:eb:a0:fe:76:bc:a5:60:c6:68:48:d7:
         7d:fc:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:17 2023 by rpki-client on console.sobornost.net