Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UWSv-0VshuDBVa4wopzt0oVw2Ao.cer
File:                     UWSv-0VshuDBVa4wopzt0oVw2Ao.cer (raw, json)
Hash identifier:          uw3bpGwgv5Z2va4ophAokNDYRBBkDF998Ut7WPaHuEA=
Subject key identifier:   51:64:AF:FB:45:6C:86:E0:C1:55:AE:30:A2:9C:ED:D2:85:70:D8:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75E082D3D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/80/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:15:36 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.89.204.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506277843927 (0x75e082d3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:15:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5164affb456c86e0c155ae30a29cedd28570d80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:b9:4e:d6:b3:ec:96:13:4b:bc:e1:64:94:
                    b9:6d:8c:8b:7b:99:71:53:26:3f:95:1f:95:59:a0:
                    d8:6b:61:0d:5e:31:66:83:dd:b6:db:41:36:86:5b:
                    98:15:00:af:35:00:70:3a:71:1f:f9:c1:a7:0d:2d:
                    ad:b0:26:01:ad:e1:f0:a4:98:d8:44:1b:d0:d8:c2:
                    41:ab:05:03:d7:21:2c:1a:ab:de:4b:6c:d9:63:62:
                    f5:3a:e0:cf:8e:15:5b:4f:d0:22:ba:cb:9e:03:66:
                    5a:87:b2:e5:0b:1e:23:b4:14:8e:9c:3b:f8:32:29:
                    5b:6a:ce:e8:3a:db:67:01:5a:f3:ee:fe:90:ae:f3:
                    95:42:30:2e:e0:3b:38:3d:0b:16:bc:89:4d:f9:39:
                    fc:e7:3a:3d:2d:0a:93:b4:60:2d:fe:da:39:24:f5:
                    2c:cd:d9:8a:1c:46:23:ca:61:3f:b2:a1:a5:8f:3a:
                    57:d2:2d:d2:f5:9d:7c:d5:4b:53:17:02:02:8a:c9:
                    a6:8a:a5:fb:f4:54:0f:2a:9c:eb:e0:ca:5b:ad:58:
                    d8:5b:e4:eb:a4:15:94:85:f4:18:70:e6:d5:ad:08:
                    c0:eb:d7:80:e1:28:7c:cf:5d:b1:f5:b3:ed:d8:f3:
                    e9:30:87:0a:04:1a:06:04:24:e1:d0:eb:49:5e:7f:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:64:AF:FB:45:6C:86:E0:C1:55:AE:30:A2:9C:ED:D2:85:70:D8:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/80/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:55:01:23:5a:67:6c:33:61:b7:27:6b:b0:c8:6c:7e:bf:
         ed:29:ef:37:31:8e:40:6d:3c:a6:26:51:ef:0f:a1:09:38:73:
         f7:63:e2:c7:31:61:84:af:78:34:08:19:7e:65:24:56:5c:d6:
         63:2b:1f:0f:5a:a1:a4:c9:5e:4b:e4:81:e3:64:cc:ab:5c:d4:
         a6:4a:5d:25:cd:26:02:79:40:ae:cb:61:43:50:28:00:88:59:
         a6:ac:18:a8:41:fd:45:d9:82:79:0a:b6:0d:bc:ef:9e:3b:78:
         02:27:23:b1:65:2a:37:6c:5e:99:63:ba:ca:a1:ed:a5:a0:d7:
         49:83:00:84:7f:4c:00:f7:3a:86:97:3f:46:ba:d7:47:80:88:
         26:e9:8b:57:46:f1:99:c7:f7:7a:8b:47:35:03:0b:fa:54:f7:
         ec:6b:c1:e7:58:70:7d:26:80:17:4a:f8:c3:32:9e:70:03:e2:
         4d:ef:83:0f:41:30:18:52:41:97:bf:24:90:3a:2d:1b:db:27:
         35:25:0f:b7:49:73:7a:c1:55:de:15:7a:ef:86:ac:01:97:d8:
         4a:6d:27:e2:02:6a:ad:37:e5:34:e7:1f:fc:60:bb:2c:9b:75:
         c4:56:78:a9:ba:a7:77:d0:45:63:c8:30:b3:d4:56:a6:7d:3e:
         9f:bb:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:51 2023 by rpki-client on console.sobornost.net