Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3iqU-YYuzfhqm2RoBNqOiKgBFwM.cer
File:                     3iqU-YYuzfhqm2RoBNqOiKgBFwM.cer (raw, json)
Hash identifier:          SP1EgKj5Mh4JteVwfSFCW2vOzO4BIuEDjgS/KeJvm6Y=
Subject key identifier:   DE:2A:94:F9:86:2E:CD:F8:6A:9B:64:68:04:DA:8E:88:A8:01:17:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8301060E0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/55ddfb-a6b7-4d20-ae5e-507fc444baec/1/3iqU-YYuzfhqm2RoBNqOiKgBFwM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/55ddfb-a6b7-4d20-ae5e-507fc444baec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:57:25 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 79.142.180.0/22
                          IP: 2a06:680::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562657889806 (0x8301060e0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:57:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=de2a94f9862ecdf86a9b646804da8e88a8011703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:82:2a:3b:73:82:17:dc:21:18:40:ca:c0:
                    d0:a3:43:a0:cd:3a:0e:f1:e6:aa:0c:a0:c0:ee:07:
                    cc:f3:75:0a:1c:43:ac:37:d1:a8:5d:9c:ac:0c:f8:
                    b5:cc:3d:40:e5:d9:d3:ca:0a:09:4d:2c:ae:23:00:
                    46:ea:80:41:2b:78:49:b4:ad:5d:29:f6:76:01:4c:
                    da:70:9d:16:6d:31:be:cb:d2:74:b5:8a:56:8c:07:
                    41:14:a4:bf:22:e3:1e:30:77:4d:82:dc:3b:c3:31:
                    6b:24:29:d7:7b:1b:00:53:77:3b:ff:89:db:c3:dc:
                    c5:2d:b7:66:35:d0:19:46:7e:f6:24:5a:ee:c9:c2:
                    da:96:5b:14:42:1c:93:27:c3:bf:fc:52:be:b8:d0:
                    b9:a7:5a:cf:fb:42:c7:82:0b:1f:2e:a7:26:0d:29:
                    f6:f7:b2:0f:32:79:2e:b6:bb:be:f7:c9:99:3d:d4:
                    f6:fc:98:4f:d7:b0:d0:72:95:da:6f:b8:00:fe:bf:
                    0c:27:89:92:df:1e:4e:a5:b4:6c:9c:5f:95:49:ac:
                    79:db:08:cd:71:30:0a:6e:29:11:29:95:24:31:7f:
                    54:4c:3c:55:0a:13:fd:38:69:91:bc:8c:30:da:31:
                    06:90:03:ea:a1:96:cc:b6:55:3a:ec:e6:08:fd:bb:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:94:F9:86:2E:CD:F8:6A:9B:64:68:04:DA:8E:88:A8:01:17:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/55ddfb-a6b7-4d20-ae5e-507fc444baec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/55ddfb-a6b7-4d20-ae5e-507fc444baec/1/3iqU-YYuzfhqm2RoBNqOiKgBFwM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.142.180.0/22
                IPv6:
                  2a06:680::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:45:38:84:0d:85:c2:e4:e2:f8:44:92:d2:cc:9b:3d:b9:
         05:ae:84:c2:ee:b1:3d:ca:49:e9:4c:4f:95:7d:fa:63:7f:bd:
         81:16:3d:51:88:85:86:b8:17:b6:92:df:bf:df:38:8c:8a:d5:
         75:a7:0b:49:35:12:9f:bb:e4:bf:63:4a:2c:99:8a:68:ee:0e:
         c4:4b:d1:9d:34:dc:53:e6:80:35:d2:6f:94:8c:14:c7:05:42:
         82:cb:24:fd:6c:16:b4:e1:df:28:74:3f:ad:ba:2e:30:42:89:
         73:5a:7d:02:aa:f2:40:c4:ec:11:c1:84:ab:63:a9:35:a7:3d:
         e0:35:da:35:0b:45:e9:4e:eb:91:5b:44:15:ba:d8:cd:4f:9b:
         7b:fb:a6:13:f1:fa:d1:4b:44:27:8c:1a:b5:20:26:3b:a8:40:
         7e:b3:e8:83:bc:4e:75:28:a7:35:2b:0f:7a:8b:32:03:06:b0:
         16:45:10:93:02:2a:b4:dc:50:de:75:39:33:7a:28:4c:f8:0e:
         fa:6e:6a:fc:9f:43:5a:79:bf:e7:de:24:75:8d:5e:75:82:f4:
         1e:07:d9:9f:f6:6a:91:e4:1e:ed:8e:16:69:c4:a6:46:d9:31:
         c3:15:0d:6d:36:67:9a:e8:4e:72:5f:a5:4b:84:d7:6b:ea:1c:
         28:86:e2:50
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAIMBBg4OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDY1NzI1WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkZTJhOTRmOTg2
MmVjZGY4NmE5YjY0NjgwNGRhOGU4OGE4MDExNzAzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsl+CKjtzghfcIRhAysDQo0OgzToO8eaqDKDA7gfM83UK
HEOsN9GoXZysDPi1zD1A5dnTygoJTSyuIwBG6oBBK3hJtK1dKfZ2AUzacJ0WbTG+
y9J0tYpWjAdBFKS/IuMeMHdNgtw7wzFrJCnXexsAU3c7/4nbw9zFLbdmNdAZRn72
JFruycLallsUQhyTJ8O//FK+uNC5p1rP+0LHggsfLqcmDSn297IPMnkutru+98mZ
PdT2/JhP17DQcpXab7gA/r8MJ4mS3x5OpbRsnF+VSax52wjNcTAKbikRKZUkMX9U
TDxVChP9OGmRvIww2jEGkAPqoZbMtlU67OYI/buohwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFN4qlPmGLs34aptkaATajoioARcDMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzU1ZGRmYi1hNmI3LTRkMjAt
YWU1ZS01MDdmYzQ0NGJhZWMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNTVkZGZiLWE2YjctNGQyMC1h
ZTVlLTUwN2ZjNDQ0YmFlYy8xLzNpcVUtWVl1emZocW0yUm9CTnFPaUtnQkZ3TS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCT460MA0EAgACMAcDBQMqBgaAMA0GCSqGSIb3DQEBCwUAA4IBAQAP
f0U4hA2FwuTi+ESS0sybPbkFroTC7rE9yknpTE+Vffpjf72BFj1RiIWGuBe2kt+/
3ziMitV1pwtJNRKfu+S/Y0osmYpo7g7ES9GdNNxT5oA10m+UjBTHBUKCyyT9bBa0
4d8odD+tui4wQolzWn0CqvJAxOwRwYSrY6k1pz3gNdo1C0XpTuuRW0QVutjNT5t7
+6YT8frRS0QnjBq1ICY7qEB+s+iDvE51KKc1Kw96izIDBrAWRRCTAiq03FDedTkz
eihM+A76bmr8n0Naeb/n3iR1jV51gvQeB9mf9mqR5B7tjhZpxKZG2THDFQ1tNmea
6E5yX6VLhNdr6hwohuJQ
-----END CERTIFICATE-----