Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6U2NUjS_q6OS436qHF2H6l-2gtM.cer
File:                     6U2NUjS_q6OS436qHF2H6l-2gtM.cer (raw, json)
Hash identifier:          dFJGVqPUrJP19m0mwzUrwrzrIeP1jWSE7+w6//qxFho=
Subject key identifier:   E9:4D:8D:52:34:BF:AB:A3:92:E3:7E:AA:1C:5D:87:EA:5F:B6:82:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0C6285404
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/6U2NUjS_q6OS436qHF2H6l-2gtM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:01:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 51450
                          IP: 91.217.170.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690519299076 (0xa0c6285404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e94d8d5234bfaba392e37eaa1c5d87ea5fb682d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:30:d8:a2:1c:e1:18:da:98:1a:05:6a:6c:
                    b3:af:c3:c3:8a:1d:e4:27:d8:c9:50:e8:fc:79:74:
                    15:51:f6:f8:b7:41:8a:f3:04:c2:8b:cb:83:89:ea:
                    f1:db:b5:b2:59:a6:be:99:c4:d5:fe:f3:59:09:a7:
                    77:e7:81:dd:20:d5:00:a1:a4:2d:24:9a:1e:89:54:
                    1d:5b:68:0a:2e:94:88:1e:b6:c4:db:02:2e:ec:4d:
                    01:78:58:c9:3f:34:ee:3b:0d:06:43:1e:7d:f8:cd:
                    92:4a:49:25:ba:23:60:05:e4:c8:00:69:4b:7f:3d:
                    1d:6e:27:c6:a2:0c:fc:8f:8e:46:a9:f7:71:b1:d6:
                    40:ae:40:50:66:2b:af:8f:2d:c4:d9:45:0e:91:bd:
                    f3:5b:5d:a1:0d:60:61:5d:44:a7:1f:6e:a2:c7:d1:
                    f8:d6:bc:25:f5:70:45:02:47:fd:ec:39:f5:24:1d:
                    ae:4f:3f:8d:65:fe:9a:b0:ce:d6:60:9c:eb:cb:ad:
                    bf:b4:ab:3e:97:6d:1d:c2:29:52:a0:8b:e8:bf:f5:
                    88:f8:cb:f6:4f:71:59:01:b1:25:79:d2:af:c8:fd:
                    30:d7:79:60:6b:0b:d3:84:a5:2b:03:62:e1:6d:fb:
                    79:db:aa:de:6d:2b:d4:cd:93:d3:44:90:d1:e4:da:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:8D:52:34:BF:AB:A3:92:E3:7E:AA:1C:5D:87:EA:5F:B6:82:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/dba9b0-4523-4c0d-8bb4-a646b34c1ee7/1/6U2NUjS_q6OS436qHF2H6l-2gtM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.170.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51450

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:0a:0c:04:92:91:0d:a8:a6:d5:9c:8f:17:b5:b0:20:40:
         c4:10:ab:de:a2:3f:58:61:14:39:ed:f8:0e:78:51:00:e7:7c:
         e6:4a:10:64:82:1b:fe:34:fd:ee:93:82:f5:9a:29:b4:e4:d6:
         60:aa:15:0f:ef:87:57:8f:ef:b7:36:b4:de:5e:51:54:44:db:
         2f:a4:f4:56:8a:d5:c0:9c:0e:86:dd:a8:7f:74:fb:f9:16:90:
         f8:ed:02:f4:bd:a6:30:0d:8d:9d:d3:69:53:24:08:a8:00:b2:
         b0:62:89:13:fe:50:35:0b:b3:2b:07:42:8b:b1:7f:a8:53:c8:
         94:54:d3:4e:ab:07:8b:e7:4a:1a:72:55:15:11:d7:13:37:bd:
         67:58:22:3e:fe:3a:75:b8:de:05:38:73:ec:7f:ed:7b:38:5b:
         45:fc:ac:4d:b3:b3:09:4f:3e:3c:43:a5:cd:dc:95:99:e8:1f:
         4f:02:1d:7a:a6:00:ce:4b:85:df:fc:f2:cb:55:fa:3e:16:26:
         92:cf:21:0a:f6:f4:a5:1e:dd:6a:12:55:32:dd:14:84:c8:e8:
         0b:21:be:e3:09:10:70:66:7a:31:19:d8:47:0b:52:54:b5:97:
         18:ff:44:ac:90:aa:2c:88:7b:6b:53:e6:e4:e9:6e:86:15:10:
         05:5e:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----