Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OBYas8ePWaqTlT0kXweUk3KZ8Y.cer
File:                     1-OBYas8ePWaqTlT0kXweUk3KZ8Y.cer (raw, json)
Hash identifier:          SIxCSZqN4MAzD7t/OufjjYYnyQRk8etxeeM9gHBUxUU=
Subject key identifier:   F8:E0:58:6A:CF:1E:3D:66:AA:4E:54:F4:91:7C:1E:52:4D:CA:67:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA41A67D1D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/a8851c-5512-48eb-9a79-1b77066c471b/1/1-OBYas8ePWaqTlT0kXweUk3KZ8Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/a8851c-5512-48eb-9a79-1b77066c471b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:06:41 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a0b:8440::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731245870365 (0xaa41a67d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:06:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8e0586acf1e3d66aa4e54f4917c1e524dca67c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:90:5c:f4:76:51:6f:33:95:5d:cb:88:32:
                    82:0d:3f:6d:d5:05:21:db:b1:2f:28:ed:7a:46:0c:
                    75:38:47:17:d2:8b:45:55:c1:10:21:cf:3f:6a:14:
                    dd:0c:a5:7c:bd:1f:16:42:fe:aa:42:fa:7d:82:5e:
                    26:e8:5f:21:73:3c:5f:34:43:9c:29:80:51:67:5c:
                    c5:2d:d0:68:24:f4:60:0b:d2:ac:d0:26:0f:c6:d4:
                    03:9e:6e:45:12:0e:98:0b:eb:e4:35:49:68:91:f6:
                    09:6b:cc:41:76:48:4c:b6:2e:a1:48:62:30:90:c0:
                    4e:f4:79:34:64:ca:84:15:ac:96:86:cc:d9:a4:99:
                    e2:f0:2a:a2:dd:a5:d2:64:00:7e:b6:40:2f:78:16:
                    a3:48:1a:c2:4b:94:bb:7e:9d:58:fa:8d:15:16:cd:
                    ed:97:ea:0a:ed:6e:6e:38:f8:b7:0f:bb:b2:06:a1:
                    a9:10:37:78:e2:30:dc:66:29:c8:26:cd:11:00:5b:
                    ea:b1:36:58:01:a2:70:8a:04:e2:df:97:af:39:fb:
                    ea:c9:10:48:d4:61:1b:95:d3:0c:d0:08:39:3c:66:
                    52:9c:ba:b8:eb:e3:f9:4d:c5:34:b9:a0:e0:4b:9b:
                    cd:dc:b9:52:28:4a:0d:c4:2f:04:88:5d:45:17:98:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:58:6A:CF:1E:3D:66:AA:4E:54:F4:91:7C:1E:52:4D:CA:67:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a8851c-5512-48eb-9a79-1b77066c471b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a8851c-5512-48eb-9a79-1b77066c471b/1/1-OBYas8ePWaqTlT0kXweUk3KZ8Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:51:4e:15:48:3e:ec:66:f1:b0:8e:e7:97:5e:f6:82:6d:de:
         dd:da:f2:c2:50:93:11:ca:e2:dc:b1:e9:35:18:7b:a3:60:03:
         af:98:36:36:94:27:6b:8d:97:d9:22:1a:ae:5b:ca:1a:70:7d:
         b7:c5:d0:6b:82:3c:16:d1:75:c5:00:d2:26:1a:9d:03:bc:54:
         52:bf:68:ab:87:e8:ff:47:f2:99:c1:a7:93:99:b0:54:7f:de:
         37:d7:42:00:97:1c:7f:02:ae:db:14:02:9c:64:63:79:5d:0f:
         1b:68:65:14:ee:75:23:28:0e:61:f9:f4:e9:70:ee:bf:36:97:
         5e:c2:06:af:9e:a7:43:2e:2d:dd:82:46:a4:45:c8:6f:cc:40:
         9c:80:29:68:4f:1a:6d:62:af:7f:d6:be:e9:94:5e:cf:08:39:
         10:86:12:46:b8:03:a9:7a:ba:36:c4:86:bd:40:9e:25:43:0d:
         fc:96:7e:4c:73:f1:29:f7:ac:da:1b:95:cc:4d:0f:d4:bb:14:
         45:96:01:60:c6:38:9b:61:3a:56:6b:13:29:93:b3:26:88:72:
         4f:75:cd:f0:08:94:a8:83:9f:3b:74:43:17:47:87:bf:a3:3e:
         7b:65:b6:04:7b:53:b2:dc:32:98:2b:d0:1b:c3:41:71:f4:f8:
         18:8b:64:83
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIGAKpBpn0dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmOGUwNTg2YWNm
MWUzZDY2YWE0ZTU0ZjQ5MTdjMWU1MjRkY2E2N2M2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArJeQXPR2UW8zlV3LiDKCDT9t1QUh27EvKO16Rgx1OEcX
0otFVcEQIc8/ahTdDKV8vR8WQv6qQvp9gl4m6F8hczxfNEOcKYBRZ1zFLdBoJPRg
C9Ks0CYPxtQDnm5FEg6YC+vkNUlokfYJa8xBdkhMti6hSGIwkMBO9Hk0ZMqEFayW
hszZpJni8Cqi3aXSZAB+tkAveBajSBrCS5S7fp1Y+o0VFs3tl+oK7W5uOPi3D7uy
BqGpEDd44jDcZinIJs0RAFvqsTZYAaJwigTi35evOfvqyRBI1GEbldMM0Ag5PGZS
nLq46+P5TcU0uaDgS5vN3LlSKEoNxC8EiF1FF5g20wIDAQABo4IChjCCAoIwHQYD
VR0OBBYEFPjgWGrPHj1mqk5U9JF8HlJNymfGMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2E4ODUxYy01NTEyLTQ4ZWIt
OWE3OS0xYjc3MDY2YzQ3MWIvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYTg4NTFjLTU1MTItNDhlYi05
YTc5LTFiNzcwNjZjNDcxYi8xLzEtT0JZYXM4ZVBXYXFUbFQwa1h3ZVVrM0taOFku
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACoLhEAwDQYJKoZIhvcNAQELBQADggEBAHpRThVIPuxm8bCO55de
9oJt3t3a8sJQkxHK4tyx6TUYe6NgA6+YNjaUJ2uNl9kiGq5byhpwfbfF0GuCPBbR
dcUA0iYanQO8VFK/aKuH6P9H8pnBp5OZsFR/3jfXQgCXHH8CrtsUApxkY3ldDxto
ZRTudSMoDmH59Olw7r82l17CBq+ep0MuLd2CRqRFyG/MQJyAKWhPGm1ir3/WvumU
Xs8IORCGEka4A6l6ujbEhr1AniVDDfyWfkxz8Sn3rNoblcxND9S7FEWWAWDGOJth
OlZrEymTsyaIck91zfAIlKiDnzt0QxdHh7+jPntltgR7U7LcMpgr0BvDQXH0+BiL
ZIM=
-----END CERTIFICATE-----