Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4YjhXygic4mNbzZG4uX7UYGxkq8.cer
File:                     4YjhXygic4mNbzZG4uX7UYGxkq8.cer (raw, json)
Hash identifier:          55MlwSpKc1K39kTgvEU6yDEeF86dHuQepETYjOgM3u0=
Subject key identifier:   E1:88:E1:5F:28:22:73:89:8D:6F:36:46:E2:E5:FB:51:81:B1:92:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A31529ED33
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/c086e5-a126-46c5-9b0c-d7b1f8b962ff/1/4YjhXygic4mNbzZG4uX7UYGxkq8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/c086e5-a126-46c5-9b0c-d7b1f8b962ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 09:02:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 213039

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700434738483 (0xa31529ed33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:02:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e188e15f282273898d6f3646e2e5fb5181b192af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:0f:a1:c4:0d:04:a6:4e:98:1f:2e:9d:cc:
                    02:bf:7c:b2:d0:69:a2:8e:7f:1e:89:58:e7:bf:5f:
                    5b:1b:2a:ac:e6:05:9a:b4:04:f1:95:d3:2c:31:7f:
                    7c:19:24:26:66:87:f2:0b:d4:75:ff:3d:63:de:f9:
                    a3:d7:c2:52:e2:04:e0:41:7e:c2:5a:b1:d3:ba:14:
                    b8:4a:e1:d2:13:01:8e:ff:12:22:17:65:29:51:c3:
                    4a:b1:f1:a1:0f:f6:c4:17:d9:b1:fa:42:05:a6:e5:
                    87:44:e4:6c:2a:da:36:5c:74:4f:fc:61:a5:bd:dc:
                    f0:58:6a:e6:5a:ef:a3:5c:1d:9a:ae:4f:fe:b0:a9:
                    c3:e9:0a:cf:cd:0a:ab:48:4a:98:47:8c:4f:70:ae:
                    38:fb:e5:b0:18:3e:fb:ab:78:2e:93:66:9d:92:62:
                    99:9e:16:71:3f:2e:3a:bc:7c:b4:9b:f8:42:fd:9c:
                    31:da:21:17:80:f5:7f:c6:b2:65:c0:be:4d:2d:77:
                    f5:41:a3:c4:2e:c0:2c:e1:f7:18:94:af:8c:0f:55:
                    8c:b0:d0:0a:43:a5:fd:45:97:9b:5d:52:50:42:48:
                    06:fe:be:4a:56:cc:06:87:62:64:22:44:5e:b2:f8:
                    5b:5a:09:14:51:e6:e2:56:78:f9:6e:e9:45:bd:48:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:E1:5F:28:22:73:89:8D:6F:36:46:E2:E5:FB:51:81:B1:92:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c086e5-a126-46c5-9b0c-d7b1f8b962ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c086e5-a126-46c5-9b0c-d7b1f8b962ff/1/4YjhXygic4mNbzZG4uX7UYGxkq8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213039

    Signature Algorithm: sha256WithRSAEncryption
         af:2d:96:ce:c6:61:8e:3a:7e:d6:6f:d6:57:f4:99:db:73:5d:
         a2:27:22:ac:37:c6:3f:75:0a:8b:e5:59:43:a5:62:0b:46:4f:
         59:3f:fa:86:7d:78:8b:f3:d1:82:70:32:ed:9f:36:bd:39:a3:
         ad:10:16:4c:b2:1c:4f:82:91:c5:fd:53:b5:fb:31:5e:9f:53:
         60:f8:21:fb:f7:23:61:d4:c6:70:73:f9:10:d2:20:18:48:a3:
         bd:5f:a8:9b:da:5a:4c:99:e0:3a:69:8d:f9:08:ca:07:cf:ba:
         d7:00:45:7f:4e:a3:3b:8e:42:5c:9d:78:b6:3d:6e:fe:b2:91:
         c0:73:25:22:da:9d:45:63:24:94:92:4b:13:5f:62:a0:43:e9:
         80:24:33:e3:38:8d:7a:b1:2c:78:41:0c:9b:10:ce:5f:31:73:
         67:e3:4b:16:d7:83:95:d3:4e:59:ee:a1:bc:3e:86:bc:ec:55:
         85:54:b8:26:ad:1a:53:7c:8d:75:e7:e7:67:83:1c:54:8e:12:
         2f:fc:95:ae:8f:e1:16:9c:60:f4:5a:3c:37:ff:9e:76:0b:d7:
         8c:d1:9a:e0:d6:60:ec:01:53:e0:48:fd:50:4e:06:ce:9b:b4:
         52:1c:53:9c:04:46:7f:3b:e9:31:20:50:44:58:5a:ee:ea:bf:
         0f:8e:7d:9f
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAKMVKe0zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDkwMjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMTg4ZTE1ZjI4
MjI3Mzg5OGQ2ZjM2NDZlMmU1ZmI1MTgxYjE5MmFmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsyAPocQNBKZOmB8uncwCv3yy0Gmijn8eiVjnv19bGyqs
5gWatATxldMsMX98GSQmZofyC9R1/z1j3vmj18JS4gTgQX7CWrHTuhS4SuHSEwGO
/xIiF2UpUcNKsfGhD/bEF9mx+kIFpuWHRORsKto2XHRP/GGlvdzwWGrmWu+jXB2a
rk/+sKnD6QrPzQqrSEqYR4xPcK44++WwGD77q3guk2adkmKZnhZxPy46vHy0m/hC
/Zwx2iEXgPV/xrJlwL5NLXf1QaPELsAs4fcYlK+MD1WMsNAKQ6X9RZebXVJQQkgG
/r5KVswGh2JkIkResvhbWgkUUebiVnj5bulFvUjIuwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFOGI4V8oInOJjW82RuLl+1GBsZKvMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2MwODZlNS1hMTI2LTQ2YzUt
OWIwYy1kN2IxZjhiOTYyZmYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYzA4NmU1LWExMjYtNDZjNS05
YjBjLWQ3YjFmOGI5NjJmZi8xLzRZamhYeWdpYzRtTmJ6Wkc0dVg3VVlHeGtxOC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNALzANBgkqhkiG9w0BAQsFAAOCAQEAry2WzsZhjjp+1m/WV/SZ23Ndoici
rDfGP3UKi+VZQ6ViC0ZPWT/6hn14i/PRgnAy7Z82vTmjrRAWTLIcT4KRxf1Ttfsx
Xp9TYPgh+/cjYdTGcHP5ENIgGEijvV+om9paTJngOmmN+QjKB8+61wBFf06jO45C
XJ14tj1u/rKRwHMlItqdRWMklJJLE19ioEPpgCQz4ziNerEseEEMmxDOXzFzZ+NL
FteDldNOWe6hvD6GvOxVhVS4Jq0aU3yNdefnZ4McVI4SL/yVro/hFpxg9Fo8N/+e
dgvXjNGa4NZg7AFT4Ej9UE4Gzpu0UhxTnARGfzvpMSBQRFha7uq/D459nw==
-----END CERTIFICATE-----