Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
File:                     2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer (raw, json)
Hash identifier:          GrY+6DZ5UJ596gLrD0uHoB3DTM118ajPGFAp9BUOnkU=
Subject key identifier:   DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B1DBCF541D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 17 May 2022 17:30:45 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 141.98.112.0/22
                          IP: 2a05:b480::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763897009181 (0xb1dbcf541d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 17 17:30:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=da0558d734b16c0a798b90344570e5e5cc05399d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:fa:ea:92:2d:a0:4b:6f:e5:c3:59:97:59:
                    7e:9b:6f:36:b7:c2:04:e6:db:13:9b:f7:03:aa:5d:
                    2d:5d:a1:5b:91:c1:8d:22:12:18:15:35:98:18:01:
                    3a:d5:f3:da:d1:67:9f:a4:c0:55:46:a1:a7:93:ee:
                    9c:35:88:5d:83:ae:58:cc:7e:f5:3f:ed:ce:ee:6f:
                    e8:df:e2:11:44:b9:75:ec:d1:40:57:39:b6:69:c1:
                    89:46:ac:b6:30:66:ab:e6:17:ec:67:05:7b:44:9c:
                    c4:c7:6a:32:bc:be:84:d3:d3:41:11:e9:2f:fc:92:
                    a0:cc:f0:c1:45:b5:37:a3:36:75:95:67:93:38:dc:
                    78:f0:4a:95:61:8d:2b:b6:17:39:39:21:7d:a3:69:
                    83:99:85:d1:9e:03:95:06:f7:90:b3:a8:66:6a:30:
                    2e:5b:b4:7b:ab:02:9c:eb:b1:78:39:f9:64:96:27:
                    34:1c:91:fb:99:29:f3:0e:54:47:19:21:d2:98:b6:
                    c8:4f:44:8d:a4:4e:30:a0:3d:f2:bb:7a:a2:52:2a:
                    13:02:b6:e1:c2:c5:d3:ca:90:a6:a9:74:53:02:ab:
                    cb:31:8f:0e:3b:57:f6:3f:43:55:be:fa:b9:98:a6:
                    15:f6:7d:16:51:8f:11:3f:15:b5:1a:37:00:5e:f7:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.112.0/22
                IPv6:
                  2a05:b480::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:48:a6:28:5a:01:17:d0:35:05:49:74:60:4d:0d:e4:7c:
         79:fd:4b:8d:63:90:d5:db:ea:62:ca:cc:bc:f4:9f:9e:5d:55:
         a4:97:56:3c:e4:ba:3e:e0:d8:66:66:9a:d9:86:81:ed:dc:f3:
         ab:77:f0:35:a5:52:6b:4e:e3:3a:c8:84:88:83:54:68:05:62:
         fc:a0:9d:2f:4e:c4:4d:cd:c0:17:51:f2:9a:70:d3:95:2f:41:
         93:d9:e4:c1:c9:0b:32:24:0d:f7:0c:1e:7c:28:9b:fc:fe:96:
         c5:b9:f5:cf:fc:01:c7:6d:bf:72:8c:3e:19:c1:b1:5b:d6:04:
         9a:d7:5b:84:dd:0e:09:f8:7c:c1:63:29:ca:a1:ff:86:31:e3:
         99:4d:3a:51:b3:42:eb:28:91:3a:df:cf:4a:16:2e:2c:86:b0:
         fc:8e:dd:8a:36:6f:27:b8:31:bc:f3:40:98:cd:95:c8:f3:ff:
         3d:7d:e9:a0:81:ce:a0:b5:54:2e:8a:d0:57:d6:a6:16:44:6e:
         0c:d6:b6:81:b3:c9:83:93:80:86:46:61:ef:3f:6c:34:b0:da:
         ff:3c:2d:04:af:ef:f0:ff:17:11:f2:dc:ea:31:7d:35:bc:53:
         fe:b2:61:c6:10:40:e1:a9:3a:23:13:36:25:9d:4f:c1:61:79:
         e1:55:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----