Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-f1s1JLczGZ3BZZlRjMtPYDzACY.cer
File:                     1-f1s1JLczGZ3BZZlRjMtPYDzACY.cer (raw, json)
Hash identifier:          xwtvtGT9+3IUpqaKvXcZScIO6bvGujwY/O/6c1QvXTw=
Subject key identifier:   F9:FD:6C:D4:92:DC:CC:66:77:05:96:65:46:33:2D:3D:80:F3:00:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8434E29096
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/1a2675-2116-4424-8622-27ea4486be8f/1/1-f1s1JLczGZ3BZZlRjMtPYDzACY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/1a2675-2116-4424-8622-27ea4486be8f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:41:27 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.128.204.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567822946454 (0x8434e29096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:41:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f9fd6cd492dccc667705966546332d3d80f30026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:d7:7d:b2:7a:55:38:0d:6d:4c:9e:fa:fe:
                    ca:b4:56:6a:fb:f9:7b:c2:fc:ed:f6:6d:c5:5f:f0:
                    dd:26:ba:be:31:58:5b:46:64:56:b1:e4:08:7c:94:
                    3a:ff:14:31:76:a6:c8:c7:07:2f:4f:c1:50:47:6b:
                    6f:c1:02:e4:7a:a9:a2:f6:fd:1e:fd:75:71:c0:e2:
                    09:2a:37:b7:06:38:63:98:e9:44:9b:c7:f8:ef:72:
                    b5:f7:7a:38:7d:f5:58:36:c7:bd:e9:c1:ea:25:70:
                    9c:d0:f6:97:1a:6b:41:49:c4:34:df:22:93:c2:60:
                    f2:34:68:6d:80:58:c1:30:5f:2b:0a:91:e6:23:a9:
                    2c:95:b3:e3:54:23:6d:24:93:25:12:33:58:f3:1f:
                    08:5b:c8:16:aa:41:9a:62:ae:97:dd:38:64:c8:e9:
                    fd:a3:b2:83:26:50:73:bc:47:b6:fd:cd:7f:cb:4d:
                    24:f2:d4:60:c8:ff:86:65:21:67:2a:12:2f:44:0c:
                    97:d3:e1:bc:4b:90:9a:e3:c2:54:dc:19:fa:3e:83:
                    04:5a:a6:24:91:81:77:ca:99:e6:bf:24:b6:33:08:
                    a2:95:31:7f:16:43:f6:3b:46:a8:27:ff:72:e6:87:
                    9f:02:31:43:0c:2c:b8:8d:d8:28:b7:d3:2c:78:92:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:6C:D4:92:DC:CC:66:77:05:96:65:46:33:2D:3D:80:F3:00:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1a2675-2116-4424-8622-27ea4486be8f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1a2675-2116-4424-8622-27ea4486be8f/1/1-f1s1JLczGZ3BZZlRjMtPYDzACY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:bf:43:76:bc:79:2c:f3:a4:ca:3f:3b:1c:1a:d6:fe:ca:
         bf:ca:25:c9:69:36:07:73:d8:54:79:16:fb:4b:34:5d:83:03:
         62:7a:28:67:8a:e2:dc:a7:13:11:29:2e:67:a6:51:59:ad:c3:
         99:d9:cb:5c:dd:f7:7f:23:15:34:b3:fc:26:e5:50:13:09:40:
         da:0f:12:59:e5:ae:be:e3:b0:62:a3:3e:72:51:f9:7b:cb:fe:
         b7:35:09:da:45:6f:90:08:c4:47:00:2b:e1:57:fe:40:5d:da:
         59:bd:15:bc:92:70:02:39:25:62:18:bc:33:db:8d:6f:93:ca:
         2c:75:3e:b4:6f:bf:a0:33:86:a9:00:c9:fd:0b:5f:89:c4:99:
         95:a3:e3:df:a8:05:89:55:20:49:57:ff:2e:89:37:93:35:89:
         a1:32:3b:c9:aa:2e:ce:66:9a:84:d5:f4:48:eb:34:90:8e:ba:
         c7:5c:4e:9b:bd:76:42:9f:f8:55:54:67:45:81:9f:e3:49:85:
         7d:8a:f3:3d:4b:5b:8d:5e:f7:7c:e9:70:64:4e:6c:6c:a2:b2:
         8b:23:42:3f:7b:df:03:c0:c4:bd:fa:db:7e:d6:2f:c1:cf:e4:
         e6:05:04:a2:5e:cd:64:a1:0d:21:93:22:1d:52:fb:52:68:bb:
         54:a9:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----