Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ayud8PclZMXSzzNhsjucdaBq_Ck.cer
File:                     ayud8PclZMXSzzNhsjucdaBq_Ck.cer (raw, json)
Hash identifier:          t5lr2KZqsYPyuAac6zpUfkJba/eYDOlTvxCCrTncJqc=
Subject key identifier:   6B:2B:9D:F0:F7:25:64:C5:D2:CF:33:61:B2:3B:9C:75:A0:6A:FC:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0181FD3A83E9FBF9A77DFD878A37BDBBB3AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/539daf-7175-41a7-9f01-807851fef3b7/1/ayud8PclZMXSzzNhsjucdaBq_Ck.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/539daf-7175-41a7-9f01-807851fef3b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 14 Jul 2022 15:01:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.165.52.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:3a:83:e9:fb:f9:a7:7d:fd:87:8a:37:bd:bb:b3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 14 15:01:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b2b9df0f72564c5d2cf3361b23b9c75a06afc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:39:b7:bb:2d:70:e0:6d:69:28:36:76:04:
                    ca:b8:0c:43:2a:96:14:98:37:56:34:59:14:43:06:
                    d6:06:6e:db:ef:af:5d:86:9c:7e:29:4f:86:7f:df:
                    6a:a7:a9:a7:96:49:a4:54:67:85:8c:62:fd:28:ee:
                    0e:be:b3:78:be:c8:24:56:6f:cb:a8:c5:a8:8b:81:
                    a2:ca:d2:6d:73:d2:6f:10:ac:97:f7:ef:41:4e:16:
                    c4:46:0c:48:39:56:51:9b:95:a0:3f:a0:1e:b4:ab:
                    61:04:7c:7b:fb:85:68:21:7d:dd:1d:97:aa:ea:a1:
                    37:be:d2:0d:01:69:b4:4f:dc:c6:ae:be:71:20:af:
                    f8:65:67:57:99:62:1c:68:7a:52:36:8e:ae:a2:b8:
                    18:fd:c0:b0:1c:bc:cc:88:1a:87:2c:a3:92:b1:4d:
                    89:4f:d0:df:a3:40:d3:6c:f6:64:24:73:bc:8a:18:
                    8c:dc:73:51:b1:e9:99:a7:46:f0:1a:00:5e:b6:43:
                    d0:3d:9b:37:eb:22:b4:01:f4:fa:6b:71:3a:61:2c:
                    97:c0:65:ee:a0:e7:11:0b:7d:67:bc:38:a3:85:d8:
                    8f:ba:f7:52:6d:a6:45:db:c1:92:6b:de:03:77:e5:
                    59:58:e5:af:49:6d:dc:81:f9:52:0d:a6:02:c8:7d:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:9D:F0:F7:25:64:C5:D2:CF:33:61:B2:3B:9C:75:A0:6A:FC:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/539daf-7175-41a7-9f01-807851fef3b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/539daf-7175-41a7-9f01-807851fef3b7/1/ayud8PclZMXSzzNhsjucdaBq_Ck.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.165.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:ad:a7:fe:76:fd:d8:24:b0:3e:40:36:0d:70:32:5a:1e:
         d5:6e:ea:8c:ce:ef:b9:91:02:0d:35:8f:7c:47:e3:8c:41:04:
         a3:7a:ce:fb:5a:56:ed:a3:00:64:1e:d6:ad:cf:86:17:90:e7:
         63:a4:b6:4e:3a:48:b5:ed:a6:da:fb:14:66:5c:f9:09:66:b5:
         15:8c:17:54:d0:f9:d3:f5:3e:6d:52:93:3b:29:69:a5:98:ae:
         9d:34:ae:97:b7:2e:a6:93:83:87:83:4a:6d:33:99:67:45:f8:
         17:da:54:21:04:41:ac:d5:bc:f8:4c:58:ac:21:b3:8a:bc:70:
         79:0e:e8:2b:a9:3e:d0:bc:76:4c:51:c2:7d:61:5a:b3:e8:ab:
         a7:42:57:25:c2:f8:3c:5c:ab:de:58:63:de:37:dc:80:3b:5d:
         63:12:0f:0e:65:f1:cb:3a:eb:e3:f5:13:f1:7e:cb:a6:f9:08:
         e7:2a:8c:6e:28:89:89:3b:da:b8:04:ba:bc:39:2c:0d:a0:6a:
         20:f1:ec:3e:35:44:5d:2e:2f:47:7b:c1:9f:91:2e:3f:d1:4c:
         a8:0d:c9:93:f7:8d:b2:36:56:fa:9b:f5:73:82:1a:12:97:78:
         a2:5e:d3:60:3e:85:55:f7:71:62:29:1c:a6:a7:ca:09:89:f7:
         30:e1:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net