Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62h8KAbb4D1AuXUUej-SdwENmHM.cer
File:                     62h8KAbb4D1AuXUUej-SdwENmHM.cer (raw, json)
Hash identifier:          /oIuiyVnPiOYxbppmZ/s7mluD6zPRkqvjS2H+vPd998=
Subject key identifier:   EB:68:7C:28:06:DB:E0:3D:40:B9:75:14:7A:3F:92:77:01:0D:98:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7ACA0D265B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/92806c-b3f5-4123-8710-a4c8245643bc/1/62h8KAbb4D1AuXUUej-SdwENmHM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/92806c-b3f5-4123-8710-a4c8245643bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:22:45 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 185.184.220.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527375869531 (0x7aca0d265b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:22:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=eb687c2806dbe03d40b975147a3f9277010d9873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:9e:25:85:1c:6a:31:2a:a5:4e:1f:43:16:
                    b5:6b:9b:96:f1:a3:df:4e:ec:f1:33:3a:56:03:a8:
                    62:b8:df:0a:28:f9:1e:51:5f:d8:ce:4b:52:53:d3:
                    42:e1:b0:fa:d7:02:3e:83:7b:40:35:b1:a7:ab:07:
                    a2:a7:bd:b0:92:7e:ea:7e:cf:80:4c:29:14:14:cc:
                    2f:a0:58:0b:6c:58:3f:10:6e:a9:02:2e:6c:fa:c2:
                    0b:34:27:ec:5d:e3:25:7a:23:2a:96:d6:c5:67:1a:
                    7e:66:5e:9f:4d:f3:38:53:03:65:55:ac:15:0b:5a:
                    6b:01:62:5c:e3:ba:42:ae:f0:07:b8:40:a2:20:5d:
                    58:93:71:74:0d:26:89:ab:40:3f:c9:23:6c:a3:9c:
                    b8:e3:fc:22:84:b9:bd:77:10:1a:0f:18:51:83:09:
                    c8:f5:ef:8e:50:ba:68:76:06:ca:ef:ba:a0:7e:03:
                    32:6c:4e:21:f3:40:19:fb:5b:27:c2:c5:fe:98:2d:
                    f3:b7:e9:ee:b7:a2:84:3e:66:4f:47:7c:3f:5d:1d:
                    f7:80:f0:a8:f6:c1:f6:44:3b:1a:a8:39:f6:ed:ff:
                    9c:4e:70:6f:9b:f0:19:9d:3e:22:fb:63:c2:1a:94:
                    9a:31:76:cf:15:56:34:1c:d5:7b:50:fe:34:bc:af:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:7C:28:06:DB:E0:3D:40:B9:75:14:7A:3F:92:77:01:0D:98:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92806c-b3f5-4123-8710-a4c8245643bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92806c-b3f5-4123-8710-a4c8245643bc/1/62h8KAbb4D1AuXUUej-SdwENmHM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:72:29:67:a6:38:8c:9f:db:01:7d:b0:b3:a6:19:b8:66:
         07:c6:dc:7f:19:76:55:1a:00:3f:5e:86:64:0e:f5:a4:9f:06:
         79:f3:d2:7c:69:7c:04:30:f7:9a:97:0b:e3:7b:a7:b2:2e:ab:
         3e:06:04:ae:e5:1d:65:26:ab:cc:9d:49:c0:11:43:91:f1:a0:
         aa:d8:78:9e:2b:d6:20:f6:c7:f5:23:bb:28:fc:d1:de:50:e5:
         a0:57:38:de:cb:f2:25:78:ba:f4:87:42:ba:b3:68:ba:b6:1b:
         a1:92:8f:5b:87:2f:b2:2f:7b:76:43:96:3a:ce:07:5e:e6:4a:
         27:46:d6:34:2e:96:e7:8c:48:f2:1b:e8:57:25:75:2f:9e:31:
         00:6c:f1:55:de:25:93:2a:5a:2d:5a:44:4c:46:40:56:9a:ad:
         44:7c:08:61:11:15:3a:92:a5:79:11:eb:9a:36:58:8f:f4:72:
         c9:0f:3a:ce:0f:e7:62:8b:29:8e:85:de:df:10:71:da:e7:9d:
         ac:94:1e:27:02:41:d4:36:b4:cd:af:7e:58:90:82:77:5e:ba:
         be:b1:1b:da:bb:a7:d6:0d:8f:7f:ae:c9:dd:8c:71:c2:d3:8d:
         fb:ee:9b:b6:c1:33:58:03:22:d6:a4:0e:68:7a:78:d3:5e:f8:
         7b:39:a3:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----