Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-fGP-PwolnbAzXnvglZwXQQvMaQ.cer
File:                     1-fGP-PwolnbAzXnvglZwXQQvMaQ.cer (raw, json)
Hash identifier:          qrn/9gGaf2e+FboaoYFgJew+cteyZPdd1BlDLtfdsko=
Subject key identifier:   F9:F1:8F:F8:FC:28:96:76:C0:CD:79:EF:82:56:70:5D:04:2F:31:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5BDA9B5F50
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/6f3c40-cda3-4b34-b9ab-155f34f44bf3/1/1-fGP-PwolnbAzXnvglZwXQQvMaQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/6f3c40-cda3-4b34-b9ab-155f34f44bf3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:56:23 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.218.184.0/22
                          IP: 2a0d:4f80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394509639504 (0x5bda9b5f50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:56:23 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f9f18ff8fc289676c0cd79ef8256705d042f31a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:c8:9a:c5:aa:e0:6f:ac:ed:86:d4:f1:00:
                    0f:f5:49:17:5a:14:5a:93:f4:68:cd:1d:96:07:9f:
                    91:9b:7b:85:c5:cb:c8:cc:d5:b9:80:83:ed:37:f0:
                    6c:77:02:a8:b6:c8:0f:65:d5:60:68:f9:52:01:8b:
                    da:ab:44:8d:c9:a3:a1:96:c2:9e:f9:6f:33:07:ae:
                    a3:29:ea:91:ae:66:1d:f5:c9:fc:5e:ef:94:c6:58:
                    ea:73:56:a7:82:05:09:c4:21:89:ec:c0:aa:6f:99:
                    71:fc:b4:58:2b:27:d9:01:dd:a3:01:01:a6:68:4f:
                    84:63:b8:9e:38:b3:04:db:58:20:85:f9:fb:ec:63:
                    01:1b:5e:ee:22:c8:4d:9e:9e:69:00:95:6f:c7:fd:
                    36:85:a4:f2:9a:69:d3:5f:00:9a:dc:d0:93:fe:e8:
                    db:70:8e:b2:58:25:40:c9:de:cd:5f:44:7b:d1:86:
                    83:4d:ac:65:92:9d:2f:1f:94:7f:8d:0d:35:06:6f:
                    dd:eb:5a:84:6f:f2:21:d6:2a:21:be:6d:0c:a4:6a:
                    84:52:72:f5:e0:a0:e8:2d:5a:c1:c2:f1:7d:ae:77:
                    90:d0:39:ef:3b:62:60:c5:31:e0:02:1b:dd:4f:6a:
                    42:36:e8:fb:51:4f:6c:39:67:ba:63:b3:4f:ea:c1:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:8F:F8:FC:28:96:76:C0:CD:79:EF:82:56:70:5D:04:2F:31:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6f3c40-cda3-4b34-b9ab-155f34f44bf3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6f3c40-cda3-4b34-b9ab-155f34f44bf3/1/1-fGP-PwolnbAzXnvglZwXQQvMaQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.184.0/22
                IPv6:
                  2a0d:4f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         ad:5d:e2:a0:c3:cd:9b:e8:23:04:87:5c:7d:57:c5:55:fc:27:
         ee:48:bf:02:6d:fd:d4:8d:1d:f5:c5:e7:21:38:ca:35:1c:db:
         5a:02:66:ad:85:df:68:f0:81:94:31:bd:cf:f4:24:04:dd:aa:
         21:4b:09:d3:c4:b5:d0:4f:86:91:25:2d:83:1c:fd:b5:e9:f9:
         ff:c0:fe:91:62:d3:ca:3b:db:4a:f1:d0:68:36:aa:01:e5:a4:
         36:0c:24:a2:26:2a:a0:b9:38:26:b6:55:fb:2c:c1:0d:f4:a8:
         01:22:b1:a0:05:ea:53:52:a6:fa:4e:8d:29:ca:44:90:c4:e1:
         43:ee:fc:9f:4a:61:00:76:16:d1:cb:ff:8d:9e:3b:dc:17:89:
         74:fa:82:13:56:87:19:6e:db:8e:71:81:32:07:0f:7d:e6:b5:
         65:a9:3b:c5:fd:8f:9c:98:c5:4e:fa:dd:1c:79:3d:41:3b:5e:
         e1:c6:d6:1f:31:e2:f3:ea:6e:06:85:f4:2e:de:5a:06:46:e8:
         78:3a:b4:99:77:a9:7f:c4:93:86:5d:45:88:f2:61:ba:8a:bf:
         d0:66:00:e0:c9:22:8c:93:bb:1d:a3:92:2a:5d:bb:f4:df:44:
         7f:cf:f9:0f:e6:db:f5:e6:3c:f0:c1:31:d5:71:ce:a9:91:95:
         99:dd:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----