Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25i5nRXlBcNFte1faOuMW7_if5o.cer
File:                     25i5nRXlBcNFte1faOuMW7_if5o.cer (raw, json)
Hash identifier:          goWjDanCZeQ9Iqg2No0kv5uYf9bpbb9J5eP07HV8FYA=
Subject key identifier:   DB:98:B9:9D:15:E5:05:C3:45:B5:ED:5F:68:EB:8C:5B:BF:E2:7F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018281E75D6C1065B019161C740D07114983
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Aug 2022 09:19:59 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205705

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:e7:5d:6c:10:65:b0:19:16:1c:74:0d:07:11:49:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  9 09:19:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db98b99d15e505c345b5ed5f68eb8c5bbfe27f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:53:ce:1a:f0:0f:20:c4:b7:ab:8a:21:ba:
                    fa:a9:ef:e4:cc:c1:a1:ae:55:82:3f:c3:2c:ae:35:
                    02:01:a4:d0:84:71:b7:74:f6:bb:bc:9b:64:7b:77:
                    40:a9:a5:56:87:fd:ab:63:61:47:f4:3a:31:dc:68:
                    b4:e8:38:f6:e8:c5:1f:28:e3:ed:5f:a0:e1:f5:22:
                    55:8f:80:30:88:29:60:28:6b:f7:ca:75:97:32:fd:
                    64:aa:c4:c4:52:44:7c:d6:ee:12:11:92:cb:4a:3d:
                    33:90:41:2b:3d:76:47:f6:80:fc:17:20:c3:6d:9c:
                    aa:ad:94:7c:53:2b:76:e5:59:9b:0d:b2:37:2f:53:
                    fa:d7:f3:ce:f9:3b:cb:38:27:6c:21:e2:18:f3:40:
                    70:23:4f:37:b2:64:9d:8a:6b:96:e7:f9:43:fb:5c:
                    ec:d0:88:65:d4:a0:e6:19:22:59:ae:bb:eb:7d:9f:
                    ff:c9:66:8b:54:45:76:7b:ee:a1:79:13:50:55:72:
                    a6:b4:08:07:ce:86:a7:ea:5e:e4:a2:70:8a:36:3d:
                    c7:99:80:04:38:5a:34:dc:ac:06:ec:53:3d:46:bf:
                    c4:55:1e:54:58:af:28:bf:3e:34:cf:20:fc:75:64:
                    70:c2:d9:a2:1c:37:9f:8e:da:1e:e3:97:63:e6:c3:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:98:B9:9D:15:E5:05:C3:45:B5:ED:5F:68:EB:8C:5B:BF:E2:7F:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205705

    Signature Algorithm: sha256WithRSAEncryption
         87:42:22:36:b5:23:cc:40:e5:23:ab:4a:2c:0c:15:6b:44:52:
         00:14:29:80:e1:a6:61:34:30:7a:26:a4:4a:e7:45:b5:26:13:
         cc:b3:8d:94:1d:ba:76:97:82:13:9d:4b:30:68:83:ac:23:7d:
         f8:d6:e8:fd:63:36:2f:f8:73:3d:14:53:d8:0e:2a:84:81:0e:
         f1:17:b0:07:f3:c2:c3:b8:8d:47:04:4f:29:af:fb:82:d9:85:
         69:70:be:50:d8:92:14:6d:59:52:a6:5e:c0:aa:74:b3:25:44:
         27:1a:8f:e2:2d:20:4f:13:99:43:d1:42:2e:4f:ac:20:a3:12:
         4a:43:0c:53:b9:70:24:40:6d:9b:e8:6e:fb:33:0d:48:7a:3d:
         3a:2c:80:13:8e:10:b9:ba:f3:aa:9f:3d:ac:2f:ea:72:bf:28:
         a6:73:ce:55:b9:18:41:fa:eb:b5:b2:6b:d1:b7:13:45:6b:92:
         86:fe:b6:26:d4:74:27:0c:73:66:7f:fa:b0:75:9a:05:77:59:
         67:bb:43:35:53:34:c3:d8:54:87:f3:83:9c:f3:35:08:af:12:
         b2:c3:f8:54:5a:15:54:c4:0b:c4:d5:af:84:38:c6:ee:51:32:
         28:ef:3e:bb:ff:66:5d:42:7d:27:a1:9b:7c:21:24:6d:48:47:
         12:df:52:28
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYKB511sEGWwGRYcdA0HEUmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwODA5MDkxOTU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjk4Yjk5ZDE1ZTUwNWMzNDViNWVkNWY2OGViOGM1YmJmZTI3ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+lTzhrwDyDEt6uKIbr6qe/kzMGh
rlWCP8MsrjUCAaTQhHG3dPa7vJtke3dAqaVWh/2rY2FH9Dox3Gi06Dj26MUfKOPt
X6Dh9SJVj4AwiClgKGv3ynWXMv1kqsTEUkR81u4SEZLLSj0zkEErPXZH9oD8FyDD
bZyqrZR8Uyt25VmbDbI3L1P61/PO+TvLOCdsIeIY80BwI083smSdimuW5/lD+1zs
0Ihl1KDmGSJZrrvrfZ//yWaLVEV2e+6heRNQVXKmtAgHzoan6l7konCKNj3HmYAE
OFo03KwG7FM9Rr/EVR5UWK8ovz40zyD8dWRwwtmiHDefjtoe45dj5sMNIQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNuYuZ0V5QXDRbXtX2jrjFu/4n+aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RhNzgy
NS0yYWJiLTQ2NDAtYTc4Mi1iNDgzZThlYzE3MzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGE3ODI1
LTJhYmItNDY0MC1hNzgyLWI0ODNlOGVjMTczNC8xLzI1aTVuUlhsQmNORnRlMWZh
T3VNVzdfaWY1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMjiTANBgkqhkiG9w0BAQsFAAOCAQEAh0IiNrUjzEDl
I6tKLAwVa0RSABQpgOGmYTQweiakSudFtSYTzLONlB26dpeCE51LMGiDrCN9+Nbo
/WM2L/hzPRRT2A4qhIEO8RewB/PCw7iNRwRPKa/7gtmFaXC+UNiSFG1ZUqZewKp0
syVEJxqP4i0gTxOZQ9FCLk+sIKMSSkMMU7lwJEBtm+hu+zMNSHo9OiyAE44Qubrz
qp89rC/qcr8opnPOVbkYQfrrtbJr0bcTRWuShv62JtR0JwxzZn/6sHWaBXdZZ7tD
NVM0w9hUh/ODnPM1CK8SssP4VFoVVMQLxNWvhDjG7lEyKO8+u/9mXUJ9J6GbfCEk
bUhHEt9SKA==
-----END CERTIFICATE-----