Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10JGqLn_lLD7X3umAVvXebYwlNM.cer
File:                     10JGqLn_lLD7X3umAVvXebYwlNM.cer (raw, json)
Hash identifier:          OXxTUI/tVfUj7dt/55goH9Qsld2v8Ti38pNomoCdyzk=
Subject key identifier:   D7:42:46:A8:B9:FF:94:B0:FB:5F:7B:A6:01:5B:D7:79:B6:30:94:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AD310DA5A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/10JGqLn_lLD7X3umAVvXebYwlNM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Feb 2022 07:58:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.49.68.0/22
                          IP: 2a01:9260::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743852320169 (0xad310da5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 10 07:58:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d74246a8b9ff94b0fb5f7ba6015bd779b63094d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:1f:e6:39:81:85:b9:9d:26:bf:e3:fa:ba:
                    18:ca:ae:68:7d:96:6d:d2:d6:4c:37:ff:67:b7:79:
                    5d:f7:eb:4d:be:cb:cb:0d:b6:81:32:76:09:37:69:
                    53:e4:e9:8c:e7:ce:98:ee:9c:09:09:70:f6:5c:63:
                    d0:ea:b4:80:3a:fb:85:26:c6:5a:10:5f:fb:27:9e:
                    53:a1:46:22:a6:6e:ff:f1:b2:62:79:7f:dc:19:1c:
                    e2:18:7c:aa:99:80:33:61:a9:6e:0b:70:f8:08:57:
                    5b:78:7a:ac:3f:13:0f:66:ad:e7:62:df:4a:b5:57:
                    03:af:72:45:55:b0:12:83:15:62:2f:29:8e:40:3c:
                    2f:8f:f3:bb:6d:94:82:8d:13:03:53:60:54:2a:4e:
                    70:5c:38:ee:47:f9:47:80:84:57:66:54:b2:cf:91:
                    72:c4:ee:3a:2f:66:63:b3:aa:6b:f0:ba:32:f3:1e:
                    b2:c5:b0:b7:40:b8:c1:92:82:be:68:7d:46:0b:78:
                    b8:c7:c9:d5:70:c4:75:d2:bb:b4:e5:2b:82:8f:a7:
                    2c:73:b0:53:66:eb:d4:c1:24:5c:71:70:2a:0c:31:
                    cd:35:b7:56:24:80:53:c4:62:cb:e8:ca:e1:16:d3:
                    a4:bd:2f:9d:78:42:28:3a:1a:30:4e:58:a0:69:8d:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:46:A8:B9:FF:94:B0:FB:5F:7B:A6:01:5B:D7:79:B6:30:94:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/947984-8821-40ba-a0c2-9d0641045b9a/1/10JGqLn_lLD7X3umAVvXebYwlNM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.68.0/22
                IPv6:
                  2a01:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:78:04:90:a2:80:e4:d2:25:4d:dc:1f:60:3b:a1:10:54:
         c6:a0:fc:40:cc:5c:09:75:90:58:63:13:e7:29:ac:01:fb:7a:
         c3:5e:5d:5e:fc:eb:ff:ef:72:ef:22:6e:ce:b0:b8:ec:ca:37:
         e1:ad:56:f1:ec:f6:8e:2e:4e:a1:d7:29:0f:8a:bf:d9:1c:8c:
         ff:9d:c2:74:63:44:b4:9d:19:18:dd:f2:c2:cc:8d:c8:e0:a5:
         34:28:3d:e9:7a:03:6c:d4:5b:c1:3e:7f:ad:91:4e:d2:1d:bd:
         b4:83:de:1d:f9:48:78:94:51:a8:ac:e8:8d:4c:6b:f0:51:cb:
         f8:2f:1b:95:1b:b6:89:1b:20:7f:35:f5:6c:5a:1a:2d:81:b7:
         9b:68:7f:48:de:71:32:0f:60:88:31:25:6f:66:86:b7:1e:e4:
         67:3e:d6:62:b7:aa:73:91:a6:7b:b1:bc:f5:7c:5d:5a:dd:5b:
         89:f2:a7:67:37:97:61:dc:45:74:a1:31:0e:1c:b2:44:56:10:
         47:18:ad:78:c3:39:f2:a3:8c:65:91:8a:58:e8:5f:dd:f0:3c:
         17:6c:c1:76:0a:89:d5:2e:66:b5:5d:96:d6:85:98:b9:f0:ff:
         a1:99:1b:3f:5c:69:5d:bb:55:0c:21:31:d1:8a:32:ac:ed:09:
         d1:d9:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----