Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0w4_uv5MOPyuYxDtLExQ7QhNnJs.cer
File:                     0w4_uv5MOPyuYxDtLExQ7QhNnJs.cer (raw, json)
Hash identifier:          13pY+81LG2jotcQ/jurx+B4LsWU0njBwKYfKdzkz8ec=
Subject key identifier:   D3:0E:3F:BA:FE:4C:38:FC:AE:63:10:ED:2C:4C:50:ED:08:4D:9C:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AD295E6462
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/61216c-4f13-429a-96a9-93277b069e87/1/0w4_uv5MOPyuYxDtLExQ7QhNnJs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/61216c-4f13-429a-96a9-93277b069e87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Feb 2022 13:25:15 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 213200

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743723394146 (0xad295e6462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  9 13:25:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d30e3fbafe4c38fcae6310ed2c4c50ed084d9c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:d5:31:bb:a3:a0:7f:55:6e:db:12:59:72:
                    b1:71:97:9c:88:8b:fd:2d:ed:f4:31:f7:19:28:31:
                    ff:ef:27:ad:14:86:5b:3d:5f:96:ee:8e:b2:66:33:
                    87:e3:4d:7d:8c:00:7b:7d:d1:7c:15:f7:66:27:70:
                    3e:31:b6:16:5e:cf:09:ea:cb:4c:fc:8f:41:38:9d:
                    87:8f:14:f2:80:65:58:35:41:4f:d8:9d:47:38:47:
                    b4:8e:3f:47:0d:50:ba:f1:f1:47:6d:6a:61:27:d6:
                    20:9f:b7:54:40:44:74:9f:a9:be:34:6c:12:3a:8d:
                    da:f7:98:99:c7:94:f5:6a:cf:37:2d:12:59:99:87:
                    8c:1c:7f:d0:89:5f:33:7c:55:9f:00:6c:0d:65:e6:
                    2b:53:fb:a4:b4:1b:1a:81:c7:84:6b:32:70:53:8e:
                    ed:fb:a8:07:71:c5:6d:5d:55:b5:55:10:0e:0d:ac:
                    81:b9:7d:e4:14:ce:09:6f:d3:4c:36:cb:3b:f2:4c:
                    e5:66:2b:92:0b:ea:85:d8:20:6b:95:b5:92:23:e8:
                    c6:54:38:4a:32:0e:58:dd:e8:18:1a:c3:87:71:07:
                    43:3f:45:45:44:84:aa:94:c9:c7:02:9b:59:47:10:
                    22:9d:69:06:44:fb:5c:d6:8c:a0:df:47:61:d0:17:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:3F:BA:FE:4C:38:FC:AE:63:10:ED:2C:4C:50:ED:08:4D:9C:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/61216c-4f13-429a-96a9-93277b069e87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/61216c-4f13-429a-96a9-93277b069e87/1/0w4_uv5MOPyuYxDtLExQ7QhNnJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213200

    Signature Algorithm: sha256WithRSAEncryption
         af:14:8f:a1:8e:0f:73:60:4d:98:6b:29:f6:3a:b8:f4:1e:41:
         2d:41:24:2a:0d:86:ab:d0:0c:27:31:10:2b:63:95:1b:a4:a0:
         42:bf:c4:0f:3d:2d:13:d8:36:1c:e5:79:c0:57:83:90:bd:ea:
         bc:2d:39:0c:c8:e9:56:a9:6f:07:a7:7a:a3:16:1a:83:71:b2:
         60:f4:47:83:5d:5f:a6:d4:b9:45:64:00:4b:39:c8:8a:84:e2:
         64:d7:2a:37:23:a3:31:ba:ad:32:77:9c:ad:53:e6:84:ec:49:
         ae:4f:c1:80:79:d9:87:1b:e0:3a:14:df:8d:eb:80:0a:0a:6e:
         4e:14:53:d1:17:a3:af:2c:f3:8d:57:92:0d:27:31:30:6e:6f:
         96:49:c7:6b:29:b0:34:88:fd:9b:56:9f:87:52:9a:7e:7b:b9:
         05:4d:2a:2e:27:35:66:4f:63:e6:77:1a:61:b8:3e:f3:6d:8e:
         9e:9d:1a:f3:4b:d0:ed:5a:a2:fa:19:2c:d7:3f:66:44:82:de:
         56:ec:18:a9:12:67:b2:e7:62:32:9e:e2:0a:05:3e:f9:4b:9b:
         bd:f9:84:d5:bc:b7:1d:c7:50:1a:db:78:1c:3d:f0:af:16:d6:
         a1:a4:43:a5:7b:4b:43:33:95:13:3f:65:e8:7b:ea:38:da:4c:
         d1:6a:e1:48
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAK0pXmRiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MjA5MTMyNTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMzBlM2ZiYWZl
NGMzOGZjYWU2MzEwZWQyYzRjNTBlZDA4NGQ5YzliMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwHXVMbujoH9VbtsSWXKxcZeciIv9Le30MfcZKDH/7yet
FIZbPV+W7o6yZjOH4019jAB7fdF8FfdmJ3A+MbYWXs8J6stM/I9BOJ2HjxTygGVY
NUFP2J1HOEe0jj9HDVC68fFHbWphJ9Ygn7dUQER0n6m+NGwSOo3a95iZx5T1as83
LRJZmYeMHH/QiV8zfFWfAGwNZeYrU/uktBsagceEazJwU47t+6gHccVtXVW1VRAO
DayBuX3kFM4Jb9NMNss78kzlZiuSC+qF2CBrlbWSI+jGVDhKMg5Y3egYGsOHcQdD
P0VFRISqlMnHAptZRxAinWkGRPtc1oyg30dh0BerhwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFNMOP7r+TDj8rmMQ7SxMUO0ITZybMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzYxMjE2Yy00ZjEzLTQyOWEt
OTZhOS05MzI3N2IwNjllODcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNjEyMTZjLTRmMTMtNDI5YS05
NmE5LTkzMjc3YjA2OWU4Ny8xLzB3NF91djVNT1B5dVl4RHRMRXhRN1FoTm5Kcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNA0DANBgkqhkiG9w0BAQsFAAOCAQEArxSPoY4Pc2BNmGsp9jq49B5BLUEk
Kg2Gq9AMJzEQK2OVG6SgQr/EDz0tE9g2HOV5wFeDkL3qvC05DMjpVqlvB6d6oxYa
g3GyYPRHg11fptS5RWQASznIioTiZNcqNyOjMbqtMnecrVPmhOxJrk/BgHnZhxvg
OhTfjeuACgpuThRT0RejryzzjVeSDScxMG5vlknHaymwNIj9m1afh1Kafnu5BU0q
Lic1Zk9j5ncaYbg+822Onp0a80vQ7Vqi+hks1z9mRILeVuwYqRJnsudiMp7iCgU+
+UubvfmE1by3HcdQGtt4HD3wrxbWoaRDpXtLQzOVEz9l6HvqONpM0WrhSA==
-----END CERTIFICATE-----