Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6V4owKOWzsCU5JbhZJuoBRCdNDo.cer
File:                     6V4owKOWzsCU5JbhZJuoBRCdNDo.cer (raw, json)
Hash identifier:          g5DJ7OgLkXUgFrIqMHlfx0jhg4S9Nj1SpHQ9Q9hndUU=
Subject key identifier:   E9:5E:28:C0:A3:96:CE:C0:94:E4:96:E1:64:9B:A8:05:10:9D:34:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       72A2DB8B5E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ca/b3d226-0977-490e-85a5-dd4531ac2e13/1/6V4owKOWzsCU5JbhZJuoBRCdNDo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ca/b3d226-0977-490e-85a5-dd4531ac2e13/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 23 Nov 2020 15:28:00 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 192.144.32.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492358568798 (0x72a2db8b5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 23 15:28:00 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e95e28c0a396cec094e496e1649ba805109d343a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:96:78:b6:41:e9:9b:da:e9:d0:05:99:60:
                    d9:0c:08:db:96:27:03:b1:36:1e:37:93:47:0e:ee:
                    d6:f4:43:2f:5e:48:c8:50:88:f2:1d:1c:b2:d4:a4:
                    bd:9f:83:25:c7:14:55:0d:ef:24:34:55:3f:20:4f:
                    1c:7c:12:66:2e:fd:42:45:ac:6f:0c:97:0c:3d:31:
                    63:02:36:f1:68:16:08:e6:b8:a2:0f:10:ad:52:6b:
                    1e:de:bc:fc:68:31:2e:4e:af:17:41:b1:e3:e4:2b:
                    5e:a9:f0:d1:9f:84:16:ca:6f:45:30:14:41:66:4a:
                    a0:1f:db:96:0c:ff:69:fe:71:8e:62:6b:b7:e2:67:
                    95:18:18:f8:0b:0c:86:77:40:ab:64:62:13:ec:7e:
                    63:a6:b9:94:82:c2:6a:5b:e0:2d:4f:f3:c4:2a:b7:
                    94:01:97:2d:89:49:c7:7a:73:8c:f2:51:1d:97:3b:
                    5c:42:c3:bd:8e:4d:d7:59:39:f6:de:d6:39:f1:97:
                    c5:76:f8:71:17:af:7e:0e:74:1a:7a:59:b3:0f:61:
                    fd:3e:86:7a:c1:7a:a8:0e:76:30:21:3f:74:46:81:
                    21:d4:13:90:e0:33:01:8e:66:7c:dd:27:00:a3:68:
                    36:d2:55:cc:d3:6f:b7:8e:04:83:ef:5d:43:d6:7a:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:28:C0:A3:96:CE:C0:94:E4:96:E1:64:9B:A8:05:10:9D:34:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b3d226-0977-490e-85a5-dd4531ac2e13/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b3d226-0977-490e-85a5-dd4531ac2e13/1/6V4owKOWzsCU5JbhZJuoBRCdNDo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:f4:4f:55:e9:01:08:6c:3f:61:23:f3:44:ec:1a:82:03:
         43:f5:bd:7d:66:e9:6b:89:33:53:8e:d1:49:50:cb:43:45:3b:
         e6:ac:ec:4a:11:f5:1c:5b:40:6c:c7:e2:18:b4:16:db:a3:ca:
         f6:f7:e4:b5:dc:81:b7:59:30:cb:59:2d:5e:ff:f0:1c:86:8c:
         08:c4:6a:d2:75:0f:a5:6a:6e:37:eb:61:31:07:19:3d:46:9d:
         3d:53:69:ac:5a:16:c6:af:d7:8c:fe:ab:d8:1e:59:3d:cc:f7:
         da:73:af:86:05:1c:0e:b0:51:ee:ef:e3:2b:6f:79:40:b6:f6:
         f7:4d:d0:14:1f:8e:93:45:e4:8c:47:2c:8a:c9:15:13:bc:50:
         5e:e2:88:e0:4b:1d:66:21:c9:20:b2:cb:6d:61:df:f8:2b:53:
         da:ef:ef:5d:c2:16:08:48:b5:e2:ca:7f:3a:f0:e4:20:89:41:
         a6:3c:d6:8c:dc:c5:ae:aa:4f:e7:c6:88:db:18:90:b5:2a:c3:
         04:de:5f:cf:e5:6c:40:14:3f:0c:43:01:a2:90:b9:b7:e4:63:
         c5:b9:de:60:8c:40:fa:e3:19:96:9a:fb:c7:82:5d:9c:8f:16:
         3a:57:f8:cb:21:28:ca:b8:d3:a8:3d:6e:e9:a9:c2:05:16:fd:
         73:a5:a0:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----