Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ILCs22laQL08rp-hJlxYE3Wl9E.cer
File:                     0ILCs22laQL08rp-hJlxYE3Wl9E.cer (raw, json)
Hash identifier:          bUle3BsvAhDwPjzbzdlnjmKuv+NPq7A/r4O3umxZWJg=
Subject key identifier:   D0:82:C2:B3:6D:A5:69:02:F4:F2:BA:7E:84:99:71:60:4D:D6:97:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A745236CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/9f0ddc-78c3-4260-af16-69290b98d43f/1/0ILCs22laQL08rp-hJlxYE3Wl9E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/9f0ddc-78c3-4260-af16-69290b98d43f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:15:05 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.93.48.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525937555146 (0x7a745236ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:15:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d082c2b36da56902f4f2ba7e849971604dd697d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:6e:72:53:42:01:fc:e9:38:a7:18:7e:2f:
                    e6:aa:ab:92:66:fd:6c:3c:a8:e1:87:53:29:b5:0d:
                    17:9f:e4:f7:a3:d3:c2:ae:a6:73:1c:a6:d5:07:db:
                    df:26:fc:1d:75:d1:8e:13:4d:1f:dc:aa:84:ac:8f:
                    05:a4:db:ad:57:ef:72:e0:5c:47:6f:b7:94:0a:b3:
                    2f:f3:0b:ec:18:02:2f:74:38:fb:e5:86:ea:94:0d:
                    fe:b8:be:2d:49:d0:4c:26:96:1b:4a:2a:56:fe:9a:
                    71:79:13:ff:da:0f:d0:a0:1d:93:47:c8:dd:a6:bf:
                    e4:87:60:c9:0b:c4:9a:3a:16:13:5b:a3:bb:c8:c9:
                    b5:74:d5:06:b0:1d:a4:b8:10:95:e1:73:45:10:c9:
                    94:df:28:3a:c9:04:84:15:f5:4c:73:e6:92:27:1e:
                    1d:74:03:a2:8b:bd:f6:b0:65:23:56:c6:3d:22:a1:
                    3d:78:27:57:e7:ce:1c:0e:4b:d7:65:83:8a:e9:31:
                    c3:d1:ff:fb:72:55:c9:23:89:71:85:bf:ce:70:94:
                    4b:ed:98:13:fa:d4:bd:da:1c:f3:7d:c8:56:b1:84:
                    69:98:98:74:36:87:d7:f3:6d:d9:ec:4c:28:13:33:
                    ff:69:1f:b4:ff:0f:71:93:69:74:b8:3e:a9:76:6c:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:82:C2:B3:6D:A5:69:02:F4:F2:BA:7E:84:99:71:60:4D:D6:97:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9f0ddc-78c3-4260-af16-69290b98d43f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9f0ddc-78c3-4260-af16-69290b98d43f/1/0ILCs22laQL08rp-hJlxYE3Wl9E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:38:53:83:65:ee:ca:89:9c:81:9d:8a:bc:86:b7:69:d7:
         4a:c4:64:35:f0:fe:7d:50:af:4f:7e:7d:b4:0b:17:76:fc:79:
         1f:40:c8:28:7e:d8:8f:10:2d:fc:76:a7:8a:1c:60:ba:83:30:
         4f:e6:85:a4:7e:03:f0:d1:86:14:08:f8:b4:a6:d2:36:80:fa:
         a6:3f:68:cb:49:0e:ca:7c:28:39:fb:cd:7f:71:82:8f:c8:08:
         84:4a:8e:78:5c:c3:a8:f5:e4:d6:6e:e1:cf:01:d2:d2:06:3d:
         c7:c5:fc:d0:5b:b7:37:d3:54:dc:14:69:87:e3:c9:2e:0e:09:
         7e:8b:6a:a9:1f:5c:2b:43:e0:ce:cb:85:f2:c7:0f:f5:f2:c8:
         60:39:80:c5:c6:15:53:5b:8d:d1:1d:31:0d:b1:a5:b3:42:91:
         e5:e5:42:7d:c0:b7:0c:f4:10:f2:07:05:e5:dc:2d:b1:d2:03:
         f6:8a:c0:4f:0e:26:aa:b7:f4:cb:88:80:67:e3:cf:0b:e0:bc:
         7b:8c:f6:92:eb:ed:50:08:ab:24:13:02:1b:10:43:b1:47:67:
         1e:8d:5a:81:21:e7:05:9d:26:e6:39:95:48:b2:95:49:f8:09:
         8f:8c:e9:ca:a7:f4:48:86:90:bb:fd:48:aa:97:b6:6e:88:1b:
         b5:31:e1:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----