Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Qr1cFS32-tINVHfyquYwH3VBjA.cer
File:                     6Qr1cFS32-tINVHfyquYwH3VBjA.cer (raw, json)
Hash identifier:          tPU7tkP+SNtpAy1mZcXaInfXpAPb7Hk8aRVPLIJA8H0=
Subject key identifier:   E9:0A:F5:70:54:B7:DB:EB:48:35:51:DF:CA:AB:98:C0:7D:D5:06:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7DFCEC13A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/9b4046-031a-4a59-a53c-76d189cfa4ae/1/6Qr1cFS32-tINVHfyquYwH3VBjA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/9b4046-031a-4a59-a53c-76d189cfa4ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:40:32 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.95.156.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541114241961 (0x7dfcec13a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:40:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e90af57054b7dbeb483551dfcaab98c07dd50630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:6b:f2:7a:74:e8:7c:6b:7c:96:dd:c3:62:
                    84:4d:f5:5a:51:b9:3c:82:79:e3:0e:79:5b:1b:71:
                    af:77:59:79:9c:a0:f2:fc:48:03:80:68:7a:7c:0c:
                    48:f5:54:85:f5:61:6d:06:6e:ed:e5:50:c0:20:39:
                    b8:04:42:60:cd:59:f1:02:e6:39:33:f0:24:0b:62:
                    cc:ca:dc:8c:54:c3:02:9d:7a:2f:45:20:c5:c1:f2:
                    0e:ba:a2:80:4d:96:38:5d:78:0a:b3:1c:38:83:e2:
                    89:f4:7a:6c:d2:fa:04:d9:6f:4d:7a:15:2c:6e:14:
                    ba:87:b9:2d:9e:4d:df:25:bf:98:1c:69:83:f9:03:
                    8f:b9:49:df:d6:a9:0b:86:2b:89:aa:e9:d4:02:30:
                    ec:b9:d6:0d:b0:59:31:c7:4b:ee:c1:16:20:2e:7d:
                    91:7d:59:23:70:4c:79:01:3b:34:11:93:30:f3:ac:
                    da:e7:53:3e:cc:03:cd:2d:de:6b:35:18:09:f9:73:
                    28:9d:f5:fd:ea:00:70:ab:ae:8d:b8:41:de:86:c3:
                    79:72:da:54:a8:74:a6:ad:31:f7:61:ff:98:a7:25:
                    a0:e5:f5:0f:a2:48:16:72:98:64:07:52:0b:d9:c6:
                    1d:51:33:e1:f2:90:62:27:30:42:19:30:44:69:92:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:F5:70:54:B7:DB:EB:48:35:51:DF:CA:AB:98:C0:7D:D5:06:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9b4046-031a-4a59-a53c-76d189cfa4ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9b4046-031a-4a59-a53c-76d189cfa4ae/1/6Qr1cFS32-tINVHfyquYwH3VBjA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:62:ae:f7:e5:54:6d:1e:24:5f:48:b6:55:d4:31:41:02:
         80:fe:cd:6e:75:88:be:1a:85:39:8d:01:61:fd:38:28:0e:fe:
         f6:21:e3:14:65:f0:43:52:75:64:c4:f4:bf:36:30:f4:bb:a9:
         bc:f3:82:fa:27:2f:80:48:a2:c8:96:82:84:1a:cb:7c:8a:98:
         15:0c:59:3a:5f:59:c4:a1:6c:c8:62:f3:f0:1b:97:d1:c4:53:
         f3:8d:10:d0:91:12:df:c2:b6:66:5c:17:ec:84:72:a6:f7:2b:
         4e:a1:18:48:28:87:0e:87:bb:eb:72:31:73:2e:e9:50:6e:1d:
         6b:7a:42:ac:5a:87:61:68:17:a9:78:d6:49:e3:2c:c8:46:cf:
         86:99:cb:13:11:d9:56:d0:2f:9b:0b:87:ab:57:e8:80:67:57:
         a2:79:87:9b:29:4a:4e:0b:c4:ab:03:28:cc:10:3a:05:6f:c7:
         ed:38:c6:ef:94:10:b9:b6:ae:c6:a3:55:2e:9e:a8:af:be:26:
         b2:7a:12:1b:98:6e:f9:ef:05:15:f7:04:ae:38:2b:2e:d2:03:
         e7:81:d6:e9:1c:cf:92:65:b8:50:ae:d7:ab:5d:ae:55:89:41:
         4b:7b:df:15:11:62:08:55:ce:10:c5:99:86:d1:6a:f9:84:98:
         15:fd:9c:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----