Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/603RnzKVdxsujzI_JKzsXwaLv_c.cer
File:                     603RnzKVdxsujzI_JKzsXwaLv_c.cer (raw, json)
Hash identifier:          S0PyCtvvxH5lrKYQ33NCBRmYbmsxxpDd/W2P4lN+1ms=
Subject key identifier:   EB:4D:D1:9F:32:95:77:1B:2E:8F:32:3F:24:AC:EC:5F:06:8B:BF:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       803F96173A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/2747ce-3258-4e15-8a39-7d5fd94f42fa/1/603RnzKVdxsujzI_JKzsXwaLv_c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/2747ce-3258-4e15-8a39-7d5fd94f42fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:45:46 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 193.31.124.0/22
                          IP: 2a07:ccc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550822614842 (0x803f96173a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:45:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=eb4dd19f3295771b2e8f323f24acec5f068bbff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:d1:23:4d:d3:ac:ea:bd:97:b5:76:08:9f:
                    74:b9:db:94:f5:bc:86:ba:25:ff:07:ee:aa:d5:73:
                    1b:0b:67:a8:df:d2:ec:f1:66:83:9d:f6:40:d4:13:
                    54:76:7a:b9:64:e2:dc:5c:15:5c:88:e0:de:60:ba:
                    0a:cd:1b:08:e9:e3:1c:95:1c:cc:55:eb:8f:a1:2b:
                    cf:29:8d:63:e4:50:c7:19:c5:d6:de:4a:f5:72:9b:
                    5d:b2:08:82:80:7f:9a:68:fc:64:7d:b1:c3:fe:b8:
                    f2:2e:84:2b:d1:a0:13:6e:33:26:56:86:36:45:26:
                    fa:67:6e:03:9c:a2:71:1e:c5:77:68:86:a8:ad:a8:
                    63:0c:68:31:6c:bb:bf:8a:14:aa:58:fd:1f:b3:05:
                    d7:9b:fd:c5:72:8c:33:2c:04:98:8e:60:f8:90:ee:
                    2c:f2:cb:79:c9:28:9d:a3:f5:53:d0:68:2d:ab:73:
                    fd:a9:9a:b6:33:14:75:1f:9a:b3:9c:a5:33:36:fb:
                    9f:62:dc:96:b4:2b:7d:87:d2:de:09:44:64:d6:c2:
                    b3:a5:f8:cc:a5:61:2a:bc:61:e8:55:3f:45:37:3c:
                    0d:41:53:39:90:54:13:63:da:91:b1:40:5a:bd:ac:
                    46:ef:72:0a:26:92:26:8a:9b:0a:f6:30:e9:17:ef:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:D1:9F:32:95:77:1B:2E:8F:32:3F:24:AC:EC:5F:06:8B:BF:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2747ce-3258-4e15-8a39-7d5fd94f42fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2747ce-3258-4e15-8a39-7d5fd94f42fa/1/603RnzKVdxsujzI_JKzsXwaLv_c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.124.0/22
                IPv6:
                  2a07:ccc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         31:e1:e7:dd:e5:32:6e:40:78:d7:73:f5:8f:38:0a:de:73:e2:
         c0:96:67:46:43:45:9c:08:3c:44:34:6c:bd:2e:7f:72:35:3f:
         9e:18:e8:be:c7:68:73:93:ec:b8:20:4b:f5:3f:1d:c5:02:76:
         e4:23:49:6f:00:d8:a1:a6:a9:97:f8:14:0f:3d:20:ba:76:c4:
         50:cc:be:57:02:08:0f:46:ef:cc:1a:a4:bb:ae:41:9e:14:4f:
         b7:c5:81:ba:f7:0d:2e:cd:70:bd:50:c6:9e:e2:ef:36:bc:4b:
         57:37:c7:73:6e:57:82:5b:3b:9b:4c:34:0a:72:90:16:68:b6:
         22:95:7c:13:a8:66:8b:8c:a3:d8:7d:ca:0f:20:ff:36:b1:f1:
         69:fd:2f:5d:b7:0b:6b:dc:fb:73:0d:a6:a7:1d:8b:04:fb:db:
         dd:14:a0:52:78:b3:0e:71:5d:65:aa:6a:23:83:d9:b2:ad:c8:
         8d:5d:ff:fa:23:42:3c:0a:eb:93:73:21:9e:60:7b:11:06:fc:
         09:69:58:79:93:80:78:e9:bb:14:b6:65:cd:db:87:06:82:b1:
         e8:e6:90:72:ec:9a:52:d5:1d:38:c1:ca:d9:69:b8:88:37:dc:
         fb:3a:a7:09:43:82:a6:71:d5:00:cd:18:71:79:47:56:3f:b3:
         c8:fe:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----