Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oRHCDf01A0bcB_Tl7Kyw3DmOmA.cer
File:                     4oRHCDf01A0bcB_Tl7Kyw3DmOmA.cer (raw, json)
Hash identifier:          SVpacOnDqhvH82+yB5C4h7SxV+45hdRSwF8ECMdU9sE=
Subject key identifier:   E2:84:47:08:37:F4:D4:0D:1B:70:1F:D3:97:B2:B2:C3:70:E6:3A:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       774CEB3F46
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/4787e2-9573-48c8-b35c-ed35e4cf56e6/1/4oRHCDf01A0bcB_Tl7Kyw3DmOmA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/4787e2-9573-48c8-b35c-ed35e4cf56e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:47:48 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.159.148.0/22
                          IP: 2a0f:d640::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512391593798 (0x774ceb3f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:47:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e284470837f4d40d1b701fd397b2b2c370e63a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:59:02:fe:2e:5b:ea:5c:a7:1a:d7:ff:80:
                    e7:56:a6:da:0c:44:43:ef:2d:82:10:92:37:06:d0:
                    7d:a2:a7:05:91:21:b5:01:fd:7d:27:3f:9d:37:ad:
                    58:ce:e3:52:d2:8b:38:17:35:85:ca:cc:eb:b5:79:
                    b8:91:67:57:d4:a8:cc:f1:88:60:a7:19:4f:0d:c2:
                    c8:57:79:f4:28:8d:81:08:56:e4:67:5c:47:8b:86:
                    ec:ab:cc:9a:98:8b:3f:c7:ac:ca:56:1e:e6:10:57:
                    70:a2:b6:5e:2d:38:14:6b:fa:cf:77:79:05:fe:6d:
                    b9:1e:7c:20:b9:57:64:52:64:58:70:76:33:6a:36:
                    e4:4d:ce:89:d6:db:6d:0b:03:83:1c:c1:09:e7:c4:
                    1e:e9:e9:e9:f5:b8:e9:10:0a:04:c2:08:41:03:a2:
                    02:34:de:e2:49:41:ad:ae:59:46:cb:d7:0b:cd:69:
                    22:70:03:d2:a2:5a:60:4b:50:65:33:d2:c5:f8:be:
                    9c:09:6d:05:28:ff:3a:04:ab:e7:e0:d9:dd:6e:0b:
                    0d:ff:1c:ed:29:e9:6c:05:f2:61:29:45:d5:35:f3:
                    ac:36:3e:bd:17:42:3c:09:20:0c:f5:2a:2f:67:3a:
                    23:db:74:88:94:ce:3a:d0:01:d5:05:c9:fc:11:78:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:47:08:37:F4:D4:0D:1B:70:1F:D3:97:B2:B2:C3:70:E6:3A:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4787e2-9573-48c8-b35c-ed35e4cf56e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4787e2-9573-48c8-b35c-ed35e4cf56e6/1/4oRHCDf01A0bcB_Tl7Kyw3DmOmA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.148.0/22
                IPv6:
                  2a0f:d640::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:4a:18:12:f7:d4:0a:63:f1:8a:41:d5:cc:f4:83:d1:17:
         2a:4a:e4:10:c6:4c:60:a7:ac:b0:40:1a:ff:92:ed:dd:62:7d:
         a0:07:92:3b:9b:b9:9e:a6:fe:d4:db:e0:39:77:75:c8:02:cf:
         aa:b7:3e:2c:53:00:2a:e1:37:5b:be:ec:b4:fc:27:04:3b:7f:
         06:dd:a2:c4:ad:91:d1:81:b3:30:38:78:fa:86:17:e6:ef:f7:
         fb:d9:f6:4f:63:fc:19:79:56:bc:0c:42:50:3d:41:74:99:a7:
         34:7b:e5:e0:6b:25:2d:ea:17:f9:04:52:43:77:f1:7f:f3:85:
         6b:24:f8:d8:47:ee:ff:12:f7:da:c6:f2:69:a1:4b:54:48:a5:
         21:55:dd:61:9b:06:f1:39:28:d6:e0:3b:c0:90:2a:53:d0:fe:
         cc:bb:26:c6:1b:8b:8b:af:ca:34:45:ff:ef:f3:5d:e7:40:f8:
         ff:0d:82:e4:07:ad:56:e3:ee:87:d3:07:73:63:02:c6:04:a1:
         f6:e3:8c:a2:45:2f:d5:d8:71:60:9f:71:0d:fa:e8:2b:1e:4c:
         a2:c3:a8:34:72:1b:f3:7e:e0:e2:05:85:1c:70:fd:4a:83:04:
         8e:38:57:ff:d2:48:2c:08:3f:97:91:be:40:1b:1d:44:1b:47:
         c0:47:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----