Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2g_XQJPAm01cIYqdnAdpumfQP0k.cer
File:                     2g_XQJPAm01cIYqdnAdpumfQP0k.cer (raw, json)
Hash identifier:          ExvEml90tZf4y46AZb+gwfEhZxOwA98UnS+Ee0f6aa0=
Subject key identifier:   DA:0F:D7:40:93:C0:9B:4D:5C:21:8A:9D:9C:07:69:BA:67:D0:3F:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7DB8B2E113
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4a/3ece67-0272-4695-9ce7-f971b912ef26/1/2g_XQJPAm01cIYqdnAdpumfQP0k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4a/3ece67-0272-4695-9ce7-f971b912ef26/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:33:52 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 42550
                          IP: 45.129.160.0/22
                          IP: 2a0e:4cc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539969642771 (0x7db8b2e113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:33:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=da0fd74093c09b4d5c218a9d9c0769ba67d03f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:c0:14:8a:e9:02:ee:a3:96:aa:f0:51:14:
                    f4:44:7c:12:08:2f:b4:60:93:37:bc:7a:dd:c5:d6:
                    69:c7:46:5e:58:dd:e3:59:24:64:6b:3a:83:8f:cd:
                    38:b2:15:d2:78:fc:d7:c9:10:c1:01:5e:f9:95:c6:
                    43:c4:fd:a8:1a:7e:78:e7:64:ea:11:40:56:ca:e3:
                    09:98:64:f9:e4:54:00:a9:d8:b4:6e:4d:02:0a:4c:
                    6a:8c:ac:d3:cb:7d:38:de:a4:2b:f5:44:d1:b4:59:
                    29:94:89:f8:61:da:b3:fc:78:ab:75:a7:a4:62:5b:
                    16:5a:fa:d5:5e:a9:d4:7a:6a:74:c4:91:9e:6f:70:
                    c6:da:2b:b1:d0:b6:98:54:70:8e:9a:44:97:e0:a3:
                    e3:85:f0:f8:2e:a6:62:f8:91:d7:4e:c7:89:5b:e1:
                    71:f7:58:84:ae:73:1a:64:29:28:bd:8a:d8:25:65:
                    e3:0f:2e:ef:4d:dd:a4:c2:31:41:0d:2b:6e:54:5a:
                    3b:f7:6f:0c:0e:09:36:d5:0c:8c:07:16:f9:9a:90:
                    94:63:e3:c5:52:0d:ae:2e:8f:7d:35:be:46:3c:84:
                    45:d4:6c:97:c8:eb:c6:13:6a:8d:c3:1b:af:80:dd:
                    2e:84:21:55:83:8c:47:7b:03:dd:2b:fd:ca:26:b0:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0F:D7:40:93:C0:9B:4D:5C:21:8A:9D:9C:07:69:BA:67:D0:3F:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3ece67-0272-4695-9ce7-f971b912ef26/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3ece67-0272-4695-9ce7-f971b912ef26/1/2g_XQJPAm01cIYqdnAdpumfQP0k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.160.0/22
                IPv6:
                  2a0e:4cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42550

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:94:73:4f:0d:c2:63:36:49:d7:43:fb:18:40:6c:a5:d5:
         fe:7e:1a:05:4c:b0:e8:b5:a0:da:80:6a:af:6f:15:c0:fd:5c:
         d8:23:22:f9:68:29:62:ad:8c:75:77:28:be:6c:99:80:2a:df:
         a2:f0:73:c2:fa:79:54:03:21:4d:7f:65:04:0c:dc:ac:78:66:
         70:ae:49:bd:b8:7d:aa:92:cf:87:30:41:ad:93:cc:01:d4:04:
         b0:eb:a6:54:8b:8e:ee:7b:e5:4c:6f:52:c2:79:6f:10:5c:f1:
         5c:85:30:3a:55:29:0c:fc:27:75:d3:07:bd:d7:6a:96:2b:75:
         3a:cf:3b:d8:30:3b:22:57:c4:7f:32:ad:81:6d:59:15:0f:2b:
         f6:02:cb:a3:a3:45:19:bf:c0:f0:70:57:8d:ba:fd:c4:ac:40:
         5b:54:da:f9:49:1b:26:d4:1a:ce:61:2e:0a:49:40:12:99:ca:
         7f:5a:5a:07:6b:4f:c2:91:37:ff:3d:bd:a5:ad:23:c8:dd:8b:
         4e:eb:12:d1:bd:b9:6d:ce:86:1b:69:ba:a4:66:12:3e:bc:43:
         33:b2:59:67:83:68:4c:c2:07:dc:fb:16:8d:71:0c:5b:13:27:
         a9:cf:62:82:f1:53:f0:28:a7:4e:3d:5d:01:65:60:fb:df:ab:
         d0:82:01:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIFfbiy4RMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzMzNTJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRhMGZkNzQwOTNj
MDliNGQ1YzIxOGE5ZDljMDc2OWJhNjdkMDNmNDkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDh/MAUiukC7qOWqvBRFPREfBIIL7Rgkze8et3F1mnHRl5Y
3eNZJGRrOoOPzTiyFdJ4/NfJEMEBXvmVxkPE/agafnjnZOoRQFbK4wmYZPnkVACp
2LRuTQIKTGqMrNPLfTjepCv1RNG0WSmUifhh2rP8eKt1p6RiWxZa+tVeqdR6anTE
kZ5vcMbaK7HQtphUcI6aRJfgo+OF8PgupmL4kddOx4lb4XH3WISucxpkKSi9itgl
ZeMPLu9N3aTCMUENK25UWjv3bwwOCTbVDIwHFvmakJRj48VSDa4uj301vkY8hEXU
bJfI68YTao3DG6+A3S6EIVWDjEd7A90r/comsMLdAgMBAAGjggKvMIICqzAdBgNV
HQ4EFgQU2g/XQJPAm01cIYqdnAdpumfQP0kwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvM2VjZTY3LTAyNzItNDY5NS05
Y2U3LWY5NzFiOTEyZWYyNi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zZWNlNjctMDI3Mi00Njk1LTlj
ZTctZjk3MWI5MTJlZjI2LzEvMmdfWFFKUEFtMDFjSVlxZG5BZHB1bWZRUDBrLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAItgaAwDQQCAAIwBwMFAyoOTMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAKY2MA0GCSqGSIb3DQEBCwUAA4IBAQBJL5RzTw3CYzZJ10P7GEBspdX+fhoF
TLDotaDagGqvbxXA/VzYIyL5aClirYx1dyi+bJmAKt+i8HPC+nlUAyFNf2UEDNys
eGZwrkm9uH2qks+HMEGtk8wB1ASw66ZUi47ue+VMb1LCeW8QXPFchTA6VSkM/Cd1
0we912qWK3U6zzvYMDsiV8R/Mq2BbVkVDyv2Asujo0UZv8DwcFeNuv3ErEBbVNr5
SRsm1BrOYS4KSUASmcp/WloHa0/CkTf/Pb2lrSPI3YtO6xLRvbltzoYbabqkZhI+
vEMzsllng2hMwgfc+xaNcQxbEyepz2KC8VPwKKdOPV0BZWD736vQggGX
-----END CERTIFICATE-----