Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.cer
File:                     1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.cer (raw, json)
Hash identifier:          h5Ns3Xm3Hq8uACqS1KNVot7tlelpuGiFQojqdAGscoI=
Subject key identifier:   FA:54:59:76:A7:6F:0D:87:6E:D9:0F:D8:74:83:7F:55:D0:3A:F5:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A88A49EFE3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:00:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 5.253.68.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723874607075 (0xa88a49efe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:00:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa545976a76f0d876ed90fd874837f55d03af534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:96:b4:cb:0a:f4:20:ec:46:91:c3:a4:61:
                    e3:41:07:a8:3a:fa:50:b5:36:82:46:71:c7:72:96:
                    97:43:a4:fe:ea:96:b2:ca:5c:f0:7d:1b:23:fc:67:
                    21:8d:45:d9:78:08:07:28:24:4d:0d:09:30:1f:5d:
                    39:28:79:01:65:63:57:a9:e3:39:52:91:64:3b:55:
                    12:ff:cf:b6:6e:cd:93:81:b1:3b:e7:79:f1:4f:23:
                    99:b8:b1:e3:75:b3:6b:96:e4:90:5f:ae:17:17:23:
                    c0:38:0e:ed:06:e4:a9:28:a5:49:0f:76:24:a2:d1:
                    79:1e:96:b3:60:8b:a1:7c:c1:cc:0a:1a:cb:01:a4:
                    35:8e:c1:15:cd:4e:8c:41:ce:b8:76:4e:e1:80:1c:
                    d5:da:88:cf:10:58:35:01:d7:64:b9:63:4a:f0:83:
                    e2:3d:0a:b0:00:6e:13:5f:7f:a6:64:ef:75:09:92:
                    62:cf:52:74:6d:44:a0:85:a4:a7:3e:45:46:29:f2:
                    75:c5:43:85:97:4f:a7:8f:f2:d3:ac:bd:af:38:75:
                    1c:3c:ae:18:15:9b:48:13:4a:60:43:ec:04:92:64:
                    d2:ca:92:53:d6:a3:42:1d:73:e6:18:92:8d:e1:93:
                    1c:a1:ac:c9:56:f5:ec:1b:f9:32:a1:cf:d4:43:0e:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:59:76:A7:6F:0D:87:6E:D9:0F:D8:74:83:7F:55:D0:3A:F5:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:de:29:36:44:ea:9d:f5:bf:fb:52:a4:eb:e6:6d:d9:83:
         0b:54:a9:55:13:45:12:04:a6:f7:67:66:23:e4:c0:53:39:be:
         66:a2:ce:d1:3c:9e:4c:73:0d:53:9f:53:7e:ff:0e:76:7e:33:
         c9:e9:b7:27:e1:7f:f2:1b:5c:ff:d7:be:f2:62:34:bd:c1:e4:
         86:ee:0d:c0:fe:b6:dd:a4:ef:71:fb:c8:b1:86:74:e6:6b:e9:
         11:56:1e:d5:52:72:04:ed:91:82:25:22:e3:26:38:b4:6c:c2:
         08:1b:28:23:6e:eb:ec:e8:3a:12:b9:41:65:2d:c2:5a:f0:0d:
         e9:17:1a:84:9d:b3:f2:5b:bb:5c:cd:76:6a:91:b3:9b:cf:05:
         d2:94:d0:ac:61:d4:2f:bb:c7:a1:1f:80:0f:bd:ec:db:40:b6:
         cc:4c:09:9b:8f:ba:8c:65:03:42:82:56:7f:34:d0:86:2d:8d:
         10:b4:a9:33:80:7a:85:75:82:a6:62:46:b5:54:59:19:1a:7b:
         26:03:76:a2:28:77:ee:aa:57:fa:6b:30:08:a5:77:fe:33:af:
         0b:1f:7c:67:55:d1:b3:88:b7:60:30:d8:f7:49:90:59:9d:44:
         88:b5:ce:90:f2:01:2e:82:e5:ed:4f:5f:be:aa:aa:c5:7f:f3:
         ac:70:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----