Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5v75UaGFCOP9yz-Phb8lK7cbHo0.cer
File:                     5v75UaGFCOP9yz-Phb8lK7cbHo0.cer (raw, json)
Hash identifier:          LFF+JJs6+zb21dae2XF0DEMADyF5fwybcJ+KUNDyzns=
Subject key identifier:   E6:FE:F9:51:A1:85:08:E3:FD:CB:3F:8F:85:BF:25:2B:B7:1B:1E:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7AA7CF20CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/89e3c9-0c0f-4e7a-90e1-62ced12455ba/1/5v75UaGFCOP9yz-Phb8lK7cbHo0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/89e3c9-0c0f-4e7a-90e1-62ced12455ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:19:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 85.208.124.0/22
                          IP: 2a0e:5780::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526801379533 (0x7aa7cf20cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:19:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e6fef951a18508e3fdcb3f8f85bf252bb71b1e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:04:8c:6e:46:6c:c2:ed:77:01:39:b1:08:
                    83:1b:82:99:9d:70:49:fe:f4:59:75:ee:ee:1b:00:
                    02:99:f0:7b:78:f6:d3:2f:7c:e8:89:d8:fb:c8:d6:
                    3f:8e:d2:8a:97:63:a6:46:8b:25:33:01:3a:fe:ba:
                    42:b2:5d:ec:63:e5:ab:39:04:ea:3a:9d:36:3c:1c:
                    d0:dd:cb:a0:87:33:07:bb:1d:a9:8f:47:af:24:3c:
                    28:9f:82:0f:6e:02:72:20:47:b6:4c:3c:62:5c:0a:
                    e9:a2:92:bf:cf:e5:dc:fa:3f:4b:eb:ba:00:f8:d0:
                    12:fd:db:7f:85:86:be:e9:e8:4c:cb:bf:b1:24:0e:
                    5e:98:c5:62:f7:9b:4a:cb:6a:05:cd:d0:0c:7a:75:
                    a2:60:0e:ab:24:de:02:c0:69:45:72:eb:e7:70:b8:
                    fb:62:c5:69:fb:70:8c:e9:93:7b:60:83:d2:93:22:
                    0b:cf:a6:5e:ce:52:81:8e:3e:28:6f:e0:fc:2a:d8:
                    d9:00:99:bd:ef:07:0e:db:11:0c:e1:55:b6:3b:61:
                    2a:59:02:ae:3d:e1:42:23:c2:74:a0:9b:2a:66:4c:
                    3c:07:51:92:53:04:b7:d1:ab:c1:ef:1b:02:ab:65:
                    de:76:68:ce:92:9b:17:79:3a:d5:81:6b:a8:cf:93:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:F9:51:A1:85:08:E3:FD:CB:3F:8F:85:BF:25:2B:B7:1B:1E:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/89e3c9-0c0f-4e7a-90e1-62ced12455ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/89e3c9-0c0f-4e7a-90e1-62ced12455ba/1/5v75UaGFCOP9yz-Phb8lK7cbHo0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.124.0/22
                IPv6:
                  2a0e:5780::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:40:1b:4f:d7:87:96:4e:a9:ca:fc:7d:fe:de:6d:b1:78:
         b0:e6:2a:20:70:b3:a5:b4:fa:b1:88:ee:d0:06:59:b2:fe:55:
         0b:ce:8e:04:4e:fd:11:3e:b8:6c:c5:d4:a6:29:5f:05:c4:fd:
         ae:83:6b:5d:cc:5f:4f:e3:f9:8d:1a:94:ea:9e:5f:74:5b:d6:
         bf:61:09:32:78:a7:41:ad:d9:0c:6f:20:b3:df:a7:c5:3a:43:
         34:6d:07:5f:ce:8b:ac:81:53:c9:ed:01:47:96:8f:0b:e0:e3:
         55:f1:20:4e:16:45:47:24:49:a4:00:a5:20:c7:aa:80:b5:ef:
         b8:62:f2:fa:ce:ad:8e:6f:af:58:38:c9:1c:f5:b6:fa:f5:57:
         b2:a1:9b:fe:63:cc:df:87:02:5b:46:de:86:1b:91:39:cd:57:
         0f:29:80:cb:c8:b5:30:ef:c4:9b:ad:63:0c:d9:5d:a5:a1:c2:
         20:85:c2:f8:7a:1e:51:4b:04:90:68:3a:64:d2:32:a7:ee:52:
         c8:eb:0a:61:a9:be:72:19:e7:39:34:cd:15:23:7c:40:df:ba:
         2a:1c:41:d5:66:e2:5a:ff:59:43:d2:7d:94:11:72:cb:a6:5b:
         96:11:b5:2a:85:9b:25:21:0d:1b:2b:7d:32:2a:95:77:5b:67:
         b2:5e:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----