Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5YZmk7qN4KP2eLysX_AGI-z5moQ.cer
File:                     5YZmk7qN4KP2eLysX_AGI-z5moQ.cer (raw, json)
Hash identifier:          zh2SV19VpfnCvMCRezgWEr+llZ+t9groEVK4VF5z0qA=
Subject key identifier:   E5:86:66:93:BA:8D:E0:A3:F6:78:BC:AC:5F:F0:06:23:EC:F9:9A:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7220F37EE4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/19af51-1cbd-4a7c-bb98-1031333c3cd9/1/5YZmk7qN4KP2eLysX_AGI-z5moQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/19af51-1cbd-4a7c-bb98-1031333c3cd9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 13 Nov 2020 11:20:21 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 217.148.134.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490179100388 (0x7220f37ee4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 13 11:20:21 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e5866693ba8de0a3f678bcac5ff00623ecf99a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:79:52:b0:63:0a:c1:94:52:6a:48:a6:28:
                    b0:78:35:21:fa:e9:8d:2e:d9:55:ad:c8:2f:b7:e1:
                    7a:72:4a:fa:14:18:13:01:54:fc:67:d5:87:e4:f3:
                    ad:9d:e1:53:8e:a4:bd:5d:5b:96:44:2a:71:9d:2e:
                    72:23:9b:26:a9:93:aa:e6:fa:db:a5:f4:e4:1e:c8:
                    3c:ac:cf:33:30:96:e9:5c:ee:2d:6d:bf:0f:e6:74:
                    2c:83:9d:e3:68:78:0c:6c:57:d1:62:42:97:79:92:
                    0a:e9:f9:0c:c8:37:f2:cc:56:5a:74:1a:12:ff:00:
                    ba:3c:7e:26:0f:70:01:a3:e4:ea:d7:b0:fc:f2:a1:
                    85:6a:83:2c:f3:f0:67:47:64:96:e0:3d:5b:0e:1b:
                    41:c4:4b:3e:7d:aa:1e:bf:f2:3a:a3:22:48:bb:4b:
                    0c:e3:10:c0:c5:54:6e:c8:8a:4f:5a:9e:95:c0:e9:
                    df:46:63:1f:cc:c6:3e:eb:b7:fd:e8:a4:ce:ef:32:
                    f6:18:e4:99:1c:8b:78:d7:b8:3b:51:08:27:f5:6a:
                    ee:89:6b:c5:f8:8f:68:7b:a9:3d:c3:82:dc:57:0b:
                    dc:8a:4e:6f:7a:c8:49:4c:6f:7d:4b:e4:16:65:a5:
                    50:97:ca:7e:76:79:8c:57:e6:69:fa:83:2c:35:c5:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:66:93:BA:8D:E0:A3:F6:78:BC:AC:5F:F0:06:23:EC:F9:9A:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19af51-1cbd-4a7c-bb98-1031333c3cd9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19af51-1cbd-4a7c-bb98-1031333c3cd9/1/5YZmk7qN4KP2eLysX_AGI-z5moQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.148.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:0a:46:21:22:6a:65:8c:b8:7c:4c:48:10:30:49:4a:a0:
         a7:de:ad:b5:d6:06:d1:5a:2c:a5:89:a8:4a:da:fa:8d:ff:c8:
         98:e5:0d:aa:2a:42:ac:f5:17:c9:76:58:20:2e:1c:01:d5:e3:
         5a:9b:19:ad:0b:59:c0:6e:6b:90:1f:b2:13:e1:aa:70:b7:07:
         a9:a6:af:08:53:8f:04:ce:f5:fb:0f:6d:5a:77:72:71:71:7a:
         f0:74:e7:23:5d:23:0f:cd:2e:b5:f3:c8:46:db:a1:56:ba:8b:
         9a:87:8b:3c:4c:f5:ad:9c:9d:56:94:00:d1:76:17:60:c8:dd:
         87:73:df:a8:a4:58:38:4a:cb:bf:1e:f2:ee:5b:37:5c:61:da:
         dc:fd:fe:c5:cf:60:8d:69:c0:14:0f:0f:83:23:d0:8d:58:b2:
         57:f2:53:5e:ba:b7:13:8b:ec:5a:15:ce:fd:65:55:c2:35:13:
         70:ae:b3:01:87:ca:71:a1:47:39:81:57:d6:70:e1:9a:7e:ee:
         8b:21:0f:b1:57:14:cb:34:29:66:14:20:a6:73:8b:42:c8:13:
         24:b0:46:c2:62:09:5a:8c:5c:2d:e0:29:ed:b1:59:23:0f:50:
         40:c6:3c:20:f7:88:a9:f2:5a:49:23:8d:a4:a8:e0:1c:6b:52:
         53:ed:9f:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----