Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_25AmJY1fhnD6lF2zAHTjwbpBk.cer
File:                     5_25AmJY1fhnD6lF2zAHTjwbpBk.cer (raw, json)
Hash identifier:          58GbtL2uWHrnatS9O7rzWYnyoyt1/qHCbqnIkswoLYA=
Subject key identifier:   E7:FD:B9:02:62:58:D5:F8:67:0F:A9:45:DB:30:07:4E:3C:1B:A4:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       783AA5B8AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/b05724-3186-40e7-9ca2-fd3c51dabc0b/1/5_25AmJY1fhnD6lF2zAHTjwbpBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/b05724-3186-40e7-9ca2-fd3c51dabc0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:08:52 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 50788

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516380014766 (0x783aa5b8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:08:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e7fdb9026258d5f8670fa945db30074e3c1ba419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:dc:8f:2b:b2:f1:ee:5b:34:ec:33:37:68:
                    7d:0f:d4:22:4d:77:db:48:aa:2b:e5:3d:bd:5f:23:
                    0d:17:35:8f:ad:3e:18:c4:c6:56:86:53:0c:b1:a5:
                    f0:16:c1:a1:76:64:91:f1:e6:11:bc:93:c5:a4:9a:
                    eb:a9:bc:44:b0:c9:68:84:28:9e:2d:6f:ac:2c:65:
                    aa:ca:3f:de:b1:78:fc:4e:d0:b9:9b:e0:58:c8:21:
                    70:2a:de:b2:b7:51:23:b7:61:92:91:a6:fe:ff:59:
                    06:48:18:c5:39:d8:4c:90:8e:95:40:02:d7:b9:2e:
                    30:df:73:e5:80:67:4b:1f:bf:50:7e:a3:3e:8b:59:
                    fb:2c:2d:91:14:a0:29:ba:be:63:5a:44:66:0c:f3:
                    da:66:6a:e5:60:d9:55:2f:8b:cb:99:08:06:fc:f6:
                    26:65:f9:1d:07:e2:c3:95:7b:02:30:88:02:72:4b:
                    ce:a8:ec:9c:d7:4a:f0:37:a2:5d:3d:46:97:f9:cb:
                    c4:e4:76:6d:cd:dd:a7:45:b0:6f:fd:02:4c:2b:4b:
                    af:9b:58:6c:1c:ba:71:a9:f6:d3:c3:75:3f:5a:31:
                    d5:7d:5c:91:7a:08:92:4d:1d:50:62:8c:aa:6d:91:
                    66:99:71:bb:99:9b:6a:46:86:89:28:40:bc:7b:14:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:B9:02:62:58:D5:F8:67:0F:A9:45:DB:30:07:4E:3C:1B:A4:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b05724-3186-40e7-9ca2-fd3c51dabc0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b05724-3186-40e7-9ca2-fd3c51dabc0b/1/5_25AmJY1fhnD6lF2zAHTjwbpBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50788

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:5a:66:47:1a:57:19:fd:16:4a:4f:1e:ca:03:0c:a1:9c:
         12:b4:a1:9c:e6:e8:ca:a6:1a:3d:bf:e1:34:f0:54:9c:2d:24:
         04:eb:9e:fb:3d:16:47:78:4d:fa:e1:3d:74:26:51:99:19:fd:
         96:18:51:52:57:58:9e:a3:00:13:60:41:04:15:af:f0:66:3e:
         cc:22:c3:a3:c0:d7:8d:b2:6c:d1:3a:b6:8e:4a:23:cb:0b:e2:
         84:c9:75:b3:d2:59:5e:8a:9a:2a:99:ef:06:28:61:24:e7:44:
         80:ef:88:88:b7:46:09:36:aa:81:31:cd:d8:da:a8:cd:1a:17:
         33:7b:c9:d5:6a:39:b8:a2:36:a2:67:3c:4a:c3:d4:f1:2f:db:
         64:eb:e7:99:a6:67:26:6f:8d:32:9b:37:b1:21:3f:7e:ee:f8:
         7d:b4:7b:56:17:1e:55:cd:a9:ab:17:8a:dc:0c:3f:02:8a:00:
         29:9f:98:3f:a5:65:a7:cb:54:fa:da:08:ef:f0:ca:83:82:31:
         bd:99:e0:bf:1b:26:a4:93:79:48:be:8c:0d:04:6f:89:0d:2b:
         1f:bd:c6:80:1c:7e:68:55:b3:22:60:ae:bd:6f:a4:53:e8:f5:
         b2:24:13:5d:5d:9e:ab:b8:f5:67:1b:0c:de:49:11:33:12:b3:
         a8:44:9e:0a
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIFeDqluK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTA4NTJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU3ZmRiOTAyNjI1
OGQ1Zjg2NzBmYTk0NWRiMzAwNzRlM2MxYmE0MTkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdf9yPK7Lx7ls07DM3aH0P1CJNd9tIqivlPb1fIw0XNY+t
PhjExlaGUwyxpfAWwaF2ZJHx5hG8k8WkmuupvESwyWiEKJ4tb6wsZarKP96xePxO
0Lmb4FjIIXAq3rK3USO3YZKRpv7/WQZIGMU52EyQjpVAAte5LjDfc+WAZ0sfv1B+
oz6LWfssLZEUoCm6vmNaRGYM89pmauVg2VUvi8uZCAb89iZl+R0H4sOVewIwiAJy
S86o7JzXSvA3ol09Rpf5y8Tkdm3N3adFsG/9AkwrS6+bWGwcunGp9tPDdT9aMdV9
XJF6CJJNHVBijKptkWaZcbuZm2pGhokoQLx7FPu7AgMBAAGjggJ/MIICezAdBgNV
HQ4EFgQU5/25AmJY1fhnD6lF2zAHTjwbpBkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYjA1NzI0LTMxODYtNDBlNy05
Y2EyLWZkM2M1MWRhYmMwYi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9iMDU3MjQtMzE4Ni00MGU3LTlj
YTItZmQzYzUxZGFiYzBiLzEvNV8yNUFtSlkxZmhuRDZsRjJ6QUhUandicEJrLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAMZkMA0GCSqGSIb3DQEBCwUAA4IBAQBei1pmRxpXGf0WSk8eygMMoZwStKGc
5ujKpho9v+E08FScLSQE6577PRZHeE364T10JlGZGf2WGFFSV1ieowATYEEEFa/w
Zj7MIsOjwNeNsmzROraOSiPLC+KEyXWz0lleipoqme8GKGEk50SA74iIt0YJNqqB
Mc3Y2qjNGhcze8nVajm4ojaiZzxKw9TxL9tk6+eZpmcmb40ymzexIT9+7vh9tHtW
Fx5VzamrF4rcDD8CigApn5g/pWWny1T62gjv8MqDgjG9meC/Gyakk3lIvowNBG+J
DSsfvcaAHH5oVbMiYK69b6RT6PWyJBNdXZ6ruPVnGwzeSREzErOoRJ4K
-----END CERTIFICATE-----