Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3jrEEMLSqKazoyadictJuchxhYk.cer
File:                     3jrEEMLSqKazoyadictJuchxhYk.cer (raw, json)
Hash identifier:          h+sYggA3TJatrvhQGncaPjLVNW2hmqA/CVT85qejKVg=
Subject key identifier:   DE:3A:C4:10:C2:D2:A8:A6:B3:A3:26:9D:89:CB:49:B9:C8:71:85:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5A793658E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/5c5ada-a544-439e-89c5-9db76760508a/1/3jrEEMLSqKazoyadictJuchxhYk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/5c5ada-a544-439e-89c5-9db76760508a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:49:39 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 44364
                          IP: 88.218.92.0/22
                          IP: 2a09:a080::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388580661475 (0x5a793658e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:49:39 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=de3ac410c2d2a8a6b3a3269d89cb49b9c8718589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:2c:b9:dd:0b:8c:27:ce:80:36:6a:54:2b:
                    cc:04:fc:a8:14:8f:59:40:cc:97:18:a2:8a:d6:88:
                    87:b6:1f:88:ee:39:36:ff:e0:fb:46:af:f4:7d:43:
                    d7:01:bb:1c:44:be:5a:9b:8a:dd:36:c0:5a:c2:db:
                    96:a6:98:fe:db:07:11:66:fa:30:ef:1e:29:f5:48:
                    b6:2a:2a:48:06:c1:a5:04:0b:0f:3b:24:6d:c6:79:
                    82:a9:18:bc:1e:d8:1c:2b:2b:5e:79:62:74:e6:5e:
                    84:2a:ab:ad:15:8a:08:e8:44:17:83:b7:e5:81:4c:
                    6a:b1:74:3d:f8:b4:66:41:a5:d8:9a:4d:f9:94:0d:
                    d1:1c:40:32:c2:fa:f8:cf:02:6f:2d:ef:79:7c:7d:
                    66:e6:e3:1f:e1:f6:d2:55:0e:17:5b:8a:bc:21:bf:
                    24:af:5d:68:ab:46:85:0c:de:28:61:4b:c5:7b:01:
                    8a:22:a2:c9:de:62:3b:d7:88:9a:35:47:fd:e1:c9:
                    f4:47:b3:e7:9e:2f:c4:08:a9:0a:37:d1:1f:af:17:
                    a9:cf:68:48:2c:f6:4e:d7:75:5a:32:cd:c0:40:15:
                    bd:8a:18:67:83:d6:68:93:b5:40:19:3b:fa:2e:bf:
                    de:f4:0b:30:23:11:55:d9:3d:ef:e4:91:16:fc:29:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:C4:10:C2:D2:A8:A6:B3:A3:26:9D:89:CB:49:B9:C8:71:85:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5c5ada-a544-439e-89c5-9db76760508a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5c5ada-a544-439e-89c5-9db76760508a/1/3jrEEMLSqKazoyadictJuchxhYk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.92.0/22
                IPv6:
                  2a09:a080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44364

    Signature Algorithm: sha256WithRSAEncryption
         04:07:75:72:3c:7c:9b:33:d2:a4:a3:48:11:3f:a4:80:f3:f1:
         ca:11:b6:cb:0b:c8:24:c6:82:76:e0:c5:08:90:49:72:fc:ca:
         f2:b8:ff:cd:dc:e2:3d:3a:4e:73:33:ab:27:20:75:d5:c7:7b:
         09:94:92:1d:8b:29:db:39:b5:73:d0:25:80:b8:9c:27:ef:82:
         7f:25:53:70:c8:75:d9:6d:87:cb:22:2f:b5:d8:53:9f:87:f2:
         f1:22:7e:bf:c6:d2:2c:36:2b:cd:28:a6:fd:9e:23:bf:ab:82:
         39:28:c0:d3:62:77:6e:25:da:b2:75:bb:d7:dc:5d:1d:1c:73:
         16:76:7b:f1:1c:6a:8c:27:d4:ef:50:13:c1:b5:89:53:89:9d:
         bd:b0:e8:92:69:4b:07:6b:b5:54:8e:99:27:b4:d0:1f:8e:22:
         93:ab:8b:3d:ee:c9:c3:ac:db:c2:63:1d:56:5b:a5:87:f0:c6:
         dd:f6:79:61:48:80:b5:32:36:74:a6:76:03:97:9d:b0:9f:4b:
         a0:cf:0b:43:0d:c1:cc:bd:70:c4:09:fc:c3:df:fe:eb:fa:54:
         af:0e:81:d5:30:92:d4:cc:13:83:fd:7c:7f:44:bc:52:7a:29:
         be:91:38:6c:7d:f4:2d:f1:1b:24:67:7a:06:a9:f8:9c:0e:b3:
         33:dc:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----