Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XwAjgOXNClAp8f_VPHgYdH9Hjnc.cer
File:                     XwAjgOXNClAp8f_VPHgYdH9Hjnc.cer (raw, json)
Hash identifier:          QPP6lO7w5d8h4FXqcHyXuj3/z/fu+LBCtPeJErAuxiU=
Subject key identifier:   5F:00:23:80:E5:CD:0A:50:29:F1:FF:D5:3C:78:18:74:7F:47:8E:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       751D9448EC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123743/0/5F002380E5CD0A5029F1FFD53C7818747F478E77.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123743/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:15 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2.58.172.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503007430892 (0x751d9448ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5f002380e5cd0a5029f1ffd53c7818747f478e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:56:f8:19:a9:8c:c6:77:97:b4:fc:e9:40:
                    af:62:32:de:b8:b7:d4:bf:3f:86:a5:42:4a:c7:73:
                    84:24:e7:cf:4e:dc:a3:53:97:40:ca:a2:ec:36:5e:
                    9c:07:c8:71:63:e5:12:af:b0:0f:82:bc:88:4b:30:
                    48:f5:19:87:8e:b6:0f:aa:27:56:79:00:f0:1d:61:
                    bb:9f:a6:11:ca:c5:6b:18:5b:9d:f3:1b:8e:9e:8e:
                    84:0c:65:38:0e:68:23:bd:c7:c5:6a:b8:ee:72:b3:
                    ca:58:61:17:3b:80:49:d5:8e:09:e3:9a:4f:ae:bb:
                    3d:b6:40:0b:12:df:bb:42:ab:e8:7c:27:99:bb:37:
                    1b:96:b8:82:5a:a2:73:fc:6d:fc:09:a8:85:ac:17:
                    68:14:9d:76:b9:33:9b:73:70:dc:38:a4:16:1e:1f:
                    86:9c:ec:86:0c:14:f3:e9:36:ba:a2:3a:b6:3b:97:
                    c6:c0:c2:ed:f0:b0:49:2c:d5:17:c8:2a:ad:0c:45:
                    98:f4:7f:77:78:4d:df:b5:ae:16:b2:d7:15:69:5f:
                    dd:7a:14:72:f3:17:57:a3:2b:9e:a8:f2:12:36:ed:
                    ba:a3:93:b1:1d:a3:02:5c:98:34:65:dc:99:3c:e3:
                    d3:90:62:52:9b:aa:a3:5f:a8:9d:41:15:b5:13:0b:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:23:80:E5:CD:0A:50:29:F1:FF:D5:3C:78:18:74:7F:47:8E:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123743/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123743/0/5F002380E5CD0A5029F1FFD53C7818747F478E77.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:ee:ec:39:96:d4:c4:c2:7a:2a:a6:91:c0:cd:a7:9a:50:
         31:bf:22:1c:a3:06:ca:d3:26:fa:17:b1:a1:78:3a:09:2b:3b:
         73:bb:c7:e3:2b:47:aa:5c:d0:fa:29:b9:06:9c:42:78:f9:99:
         70:a9:ef:82:b7:e2:29:71:5f:79:57:cd:bc:73:67:0f:5b:84:
         d5:ea:76:a3:8e:f1:89:76:8e:63:b2:3d:b5:f5:62:77:2a:e6:
         c0:78:c0:35:36:96:db:f1:15:a0:96:19:b7:33:b8:3d:cf:48:
         e5:d4:5c:38:8f:98:50:18:16:51:e4:ed:ce:35:66:f9:ef:37:
         d6:0e:9c:31:01:37:fb:6e:6e:a2:79:83:ec:70:43:dd:f5:a1:
         87:ac:fa:57:c2:2f:7e:e4:7d:d3:ea:4f:94:e9:7d:dd:68:84:
         f9:84:3b:d3:78:7b:ff:54:6b:9a:39:68:0d:99:45:dc:62:1b:
         e2:23:be:a5:0d:9b:d3:28:73:3c:7b:ff:31:1a:58:cb:4c:f9:
         d8:19:09:73:33:5d:39:53:81:09:7a:91:62:01:c8:12:56:43:
         40:90:4d:d3:d3:4f:29:ff:75:fe:6d:74:03:c1:f6:f3:70:85:
         c5:f3:63:d1:cb:1f:0b:72:8a:22:52:6b:12:1d:5a:07:57:55:
         da:74:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----