Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1UlDX-xik4oYSfp32OHby77gdu0.cer
File:                     1UlDX-xik4oYSfp32OHby77gdu0.cer (raw, json)
Hash identifier:          Lw86xGLSCz2v/3i0KWEyHw/I/oNz4CY3EVLw2u17c+s=
Subject key identifier:   D5:49:43:5F:EC:62:93:8A:18:49:FA:77:D8:E1:DB:CB:BE:E0:76:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       821BB9B7C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/7e7599-8bc8-41a0-89c3-4e241c54eed4/1/1UlDX-xik4oYSfp32OHby77gdu0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/7e7599-8bc8-41a0-89c3-4e241c54eed4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:52:35 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.138.124.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558810904514 (0x821bb9b7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:52:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d549435fec62938a1849fa77d8e1dbcbbee076ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:58:14:55:5a:90:11:ec:8c:e7:a4:1e:88:dd:
                    b5:d5:68:a1:ab:7b:0d:da:78:f6:f2:92:49:aa:24:
                    c8:0c:56:7b:f8:2e:19:c2:e5:1e:98:a9:96:05:6f:
                    ff:68:07:75:a3:2f:fe:d1:12:06:52:46:53:a0:96:
                    88:bb:f1:fa:3a:2c:3e:16:a7:b2:9f:3b:1e:03:38:
                    94:30:5f:04:ca:bd:80:46:4f:76:f4:33:34:40:95:
                    79:2f:8f:49:91:3c:5e:8b:36:3f:7b:a1:3e:b5:dc:
                    7c:82:3f:ed:d9:9c:30:d8:a1:24:09:19:4c:dc:11:
                    cd:53:e0:8a:3c:82:ef:c9:c4:3a:7f:4b:8a:17:f8:
                    1c:26:70:24:1f:2b:7c:8d:11:63:3d:b2:de:6f:c3:
                    e8:5d:e8:2d:63:94:74:e9:dd:97:5f:53:e8:74:86:
                    05:bb:82:be:96:85:d3:70:a8:89:6f:ff:dd:9c:ba:
                    76:78:32:d1:50:fe:7d:e0:e7:05:57:2e:66:dd:90:
                    f6:d5:da:1c:a5:1b:3d:c3:97:87:e2:18:a5:2f:8d:
                    7d:85:ac:da:1f:23:df:39:a2:8a:04:ac:01:33:25:
                    ba:6e:59:9a:da:67:ff:fb:42:cf:1b:23:10:1c:2c:
                    c1:1d:9f:e1:83:03:22:a0:44:6e:60:86:6b:04:68:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:43:5F:EC:62:93:8A:18:49:FA:77:D8:E1:DB:CB:BE:E0:76:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7e7599-8bc8-41a0-89c3-4e241c54eed4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7e7599-8bc8-41a0-89c3-4e241c54eed4/1/1UlDX-xik4oYSfp32OHby77gdu0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:b9:9d:c8:07:0d:53:08:27:e0:7f:83:b0:0c:e3:48:2c:
         01:70:20:ad:2e:af:61:da:57:dc:2a:16:a2:ab:1e:56:8b:1d:
         a3:b5:99:a5:d7:9f:22:95:ac:7c:4d:48:5a:ca:4b:c6:db:87:
         dd:39:d3:57:82:a3:78:cd:57:df:c3:74:ce:f0:59:f0:f3:a1:
         e2:81:3a:50:66:b0:10:8d:dc:75:e7:d5:92:c2:93:c5:ac:56:
         6c:20:1d:14:d6:fc:fe:85:ce:d4:d6:c0:35:84:53:05:e5:23:
         ef:50:3d:84:a0:df:dc:d5:e1:af:c5:69:20:67:ee:73:7c:d8:
         e1:22:b4:fa:63:e2:d6:ea:8c:5b:1c:3f:ea:9b:d1:4b:b1:21:
         cd:82:72:f3:ec:fb:5a:2a:64:01:24:dd:31:43:ab:fd:42:c6:
         dc:67:d3:e3:73:27:4b:26:f3:0b:87:a8:a9:f5:ed:e9:46:78:
         7b:4e:ea:47:84:7a:e4:43:eb:37:ea:d0:c0:ef:a6:37:d7:2b:
         6e:99:07:13:67:0c:c0:c8:a7:73:9b:bd:30:33:3c:ee:ca:89:
         8f:3f:24:bb:cb:ca:7c:19:1e:0f:82:55:d3:b8:18:5c:3a:94:
         95:eb:ce:37:38:5a:71:fc:0d:54:dc:aa:48:29:07:25:73:57:
         14:f7:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----