Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer
File:                     3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer (raw, json)
Hash identifier:          LjHr5Z7M+2b/toL/gEVyd8Zleg9wvbGAZvbUWzysfgY=
Subject key identifier:   DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A26B9F8C35
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/3z8pXGX7zyAfb2HqqMQ23fP2SdU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:54:36 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.92.224.0/22
                          IP: 2a0a:4980::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697590320181 (0xa26b9f8c35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:54:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df3f295c65fbcf201f6f61eaa8c436ddf3f649d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:71:f2:56:17:dd:2a:10:b0:72:29:6e:e0:
                    4e:4b:6d:62:92:c4:1c:76:82:21:52:47:a3:ac:8f:
                    74:b0:ff:b1:1a:55:18:7d:c6:03:35:65:e6:1f:92:
                    e6:43:f0:4a:84:de:fe:8f:f3:b8:cb:4a:17:39:5e:
                    50:4d:36:a9:4d:fc:56:15:ee:f4:4b:6f:03:b4:db:
                    39:35:11:98:ae:b9:51:ba:34:0a:65:4a:35:a9:f3:
                    93:80:03:e2:49:96:8b:8b:63:eb:8e:7e:4c:6a:6f:
                    6d:4c:11:2d:f3:f8:3e:0f:bf:4b:79:3f:f0:60:ca:
                    c3:22:f5:00:8a:36:7d:d6:60:5b:ca:a4:ed:5e:a1:
                    5f:34:bb:99:49:b1:b8:f0:68:02:81:51:8c:80:fa:
                    b8:82:2f:3c:9b:6d:c8:9e:51:54:09:5a:ae:cd:16:
                    ca:c8:18:9a:2e:03:cf:eb:48:d0:bd:3e:ff:b9:55:
                    73:f1:73:a9:2a:11:c7:e4:21:60:84:17:ba:9b:5f:
                    10:ff:dd:33:df:eb:eb:5a:8a:b7:86:0f:fe:07:17:
                    dc:62:10:ff:f4:bd:af:4f:3d:ac:dd:b1:f4:44:7d:
                    b9:5a:8c:c8:c1:8d:04:d4:45:e8:df:ab:6b:b3:bd:
                    b0:43:17:3c:a2:95:f3:27:11:a0:67:d0:e8:cb:62:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/3z8pXGX7zyAfb2HqqMQ23fP2SdU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.224.0/22
                IPv6:
                  2a0a:4980::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:da:e2:ef:1f:be:39:85:ce:56:53:29:3f:0f:42:af:dd:de:
         66:c9:47:dd:c5:34:d2:34:ee:5e:91:14:36:0c:2b:6d:e1:0d:
         23:04:e1:3d:49:6f:21:8f:aa:6d:66:7e:c6:3d:d0:7f:fb:17:
         6e:33:8e:d1:4f:73:7e:ff:4d:74:02:29:6e:58:c9:dc:be:c4:
         26:8d:64:a1:7e:bd:42:55:a3:79:7e:f7:de:f6:9b:58:a5:99:
         f1:f3:64:26:1f:d5:71:db:9e:fe:a5:96:94:36:c2:ca:c1:8e:
         64:c6:d2:2f:9a:ff:4f:38:67:19:67:51:34:ae:70:c0:fc:af:
         3e:f3:c7:7d:3a:0d:32:ed:bb:f7:27:e8:5e:89:0a:fd:f5:6e:
         ff:44:db:7d:ae:87:6b:6f:fc:63:e4:21:0d:38:1b:9f:f1:96:
         78:41:eb:f4:ea:3c:d1:5f:29:81:f5:59:47:cd:83:4a:d3:6f:
         0d:6b:ce:ab:37:d1:7d:97:52:df:53:33:70:57:c8:dd:e5:72:
         1e:1f:f9:44:4b:f6:e2:26:e7:d5:4d:21:b5:d5:7f:d4:ee:9b:
         fc:4d:aa:b3:70:27:37:53:cc:ce:cf:62:06:ed:1e:03:50:b5:
         a0:15:e7:12:df:98:a8:d2:4b:f3:a5:ad:54:d3:04:7b:d7:5c:
         16:b3:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----