Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/U8zVFQTmfNv7Pu_YTCt1YovgiR4.cer
File:                     U8zVFQTmfNv7Pu_YTCt1YovgiR4.cer (raw, json)
Hash identifier:          vyT7XRR9RdJlMlOgMF8T/XKB/6hiMANocsiKa76q4Pg=
Subject key identifier:   53:CC:D5:15:04:E6:7C:DB:FB:3E:EF:D8:4C:2B:75:62:8B:E0:89:1E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       89E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 19 Jul 2022 01:24:26 +0000
Certificate not after:    Wed 19 Jul 2023 01:20:03 +0000
Subordinate resources:    AS: 63691

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35305 (0x89e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jul 19 01:24:26 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=53CCD51504E67CDBFB3EEFD84C2B75628BE0891E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:88:a1:18:31:d5:6b:c0:8b:d2:a5:58:cf:40:
                    82:9d:91:ee:07:eb:dd:a5:84:df:f3:28:a8:74:ab:
                    8c:96:68:0e:34:71:0d:36:f7:8c:90:61:16:79:d0:
                    ce:32:2c:46:f7:0a:f6:8a:5d:46:23:ee:90:dc:f0:
                    52:dc:8b:63:be:0c:6c:ee:3b:1b:c9:ce:df:79:a2:
                    48:1a:39:98:68:96:e5:cc:c6:ee:31:61:08:8d:5d:
                    c6:81:58:c7:a7:90:79:9e:47:37:e2:2a:21:d6:2d:
                    da:61:e8:f1:51:b0:87:21:02:c7:80:72:d2:b6:59:
                    de:fc:69:8a:85:09:2d:12:dc:50:49:d1:10:e4:f0:
                    83:e2:b9:0a:08:05:c4:4e:62:4f:40:7b:1c:0a:26:
                    25:db:a4:df:4a:63:eb:0c:f1:8d:7e:16:6f:ad:3e:
                    64:52:3b:e6:ab:33:a5:af:ab:aa:5e:13:ec:fe:c9:
                    f3:70:20:c2:6a:80:eb:d4:28:50:3b:1a:15:d1:42:
                    3c:a5:93:14:93:63:00:da:bf:ed:18:71:db:9b:6e:
                    d6:d2:a5:00:01:f2:07:30:14:ef:19:a5:b4:62:a1:
                    a8:35:25:f9:3a:54:43:11:6e:e7:59:55:d5:34:ed:
                    f3:da:fb:af:4a:28:e0:e4:93:5d:37:45:79:a7:75:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:D5:15:04:E6:7C:DB:FB:3E:EF:D8:4C:2B:75:62:8B:E0:89:1E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/U8zVFQTmfNv7Pu_YTCt1YovgiR4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63691

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:ca:5a:b1:24:e3:ec:0a:b9:66:5d:73:2b:50:96:53:87:
         7c:68:02:a7:0e:31:43:02:8a:db:6f:69:06:ae:98:6b:95:be:
         73:18:6e:b2:e1:70:96:8d:5b:e3:03:ae:25:b8:6b:51:60:6a:
         82:45:5e:8c:84:20:00:75:bc:e0:1b:0f:38:93:1d:63:de:0e:
         16:dd:31:b2:6b:42:45:2c:c7:9e:ac:fe:cc:37:19:6b:70:f7:
         1c:55:2b:6f:c4:8c:6d:92:fd:35:ec:ee:4b:1f:4b:9f:56:1c:
         20:d4:d4:6f:69:85:d7:37:6f:b4:f6:3a:49:8b:c4:bc:58:2e:
         52:58:7e:22:ec:ce:13:ae:3b:ae:92:4d:99:1b:56:0d:6c:e4:
         7e:c4:fc:59:94:59:e6:2f:5d:e9:cd:25:e5:99:a5:9f:39:e2:
         ad:1f:58:74:e1:64:bb:96:93:69:65:36:d7:fc:9f:6a:90:5c:
         b7:2e:13:1e:0e:89:9b:f7:17:fd:3a:68:ae:17:a5:b6:1b:59:
         3a:c3:50:d3:7f:71:0b:f0:c2:04:a5:fe:9f:96:c8:f7:83:40:
         1b:fe:bc:24:05:eb:43:4d:aa:6d:ab:94:46:81:d7:d1:8a:0f:
         94:d2:43:4c:95:be:2d:74:fa:39:ea:6d:ca:92:87:a1:00:26:
         72:53:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----