Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b_eQa1we5y8uPXks8ulmcbmT4c.cer
File:                     6b_eQa1we5y8uPXks8ulmcbmT4c.cer (raw, json)
Hash identifier:          xVbgGNcY7RN+Z+lJxvoIMPuEwCOJvC6YJiPPhaB72Go=
Subject key identifier:   E9:BF:DE:41:AD:70:7B:9C:BC:B8:F5:E4:B3:CB:A5:99:C6:E6:4F:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A527710768
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:58:42 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 50224
                          IP: 193.169.58.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709331322728 (0xa527710768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:58:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9bfde41ad707b9cbcb8f5e4b3cba599c6e64f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:a1:7f:55:06:05:bc:f1:78:80:a1:a0:6e:
                    a5:7a:a8:fa:8b:39:74:2b:cb:90:f4:c3:00:e7:90:
                    5a:aa:51:a0:de:6d:77:9f:19:b4:7d:21:31:a0:3a:
                    e9:40:6f:fe:e6:98:99:2c:3d:27:e6:b9:49:9f:4f:
                    a0:aa:a0:e7:ff:3d:8a:31:f6:9e:5b:cb:4f:a7:45:
                    a6:85:f1:72:15:cd:d4:f1:db:ce:40:30:d5:3b:96:
                    78:25:ac:59:da:25:18:f3:65:b8:b0:8b:58:8a:ae:
                    4e:ff:30:69:51:53:24:a6:b4:1a:56:89:fa:d7:eb:
                    c4:2b:03:be:41:de:bc:47:42:7b:19:b0:40:04:bc:
                    5e:a8:6f:bd:df:b1:f2:49:ca:a8:e1:18:db:0e:37:
                    eb:f8:38:d6:51:38:c4:df:f6:89:ce:f4:69:6f:4c:
                    8a:96:66:ba:29:c2:af:57:f9:7e:d7:14:4e:08:48:
                    08:d5:53:67:f5:ab:b6:bf:ac:d3:9a:f8:10:e0:ff:
                    a8:b0:df:3e:cb:39:27:2f:5b:87:8a:f6:d8:59:be:
                    7d:d0:cf:59:d6:2a:97:41:83:42:93:c3:5b:ae:d6:
                    39:b8:ba:18:fa:02:4e:68:bb:a0:43:01:b2:b4:42:
                    5e:1e:a4:fb:2a:a9:3d:fa:a1:85:83:4e:98:79:7f:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BF:DE:41:AD:70:7B:9C:BC:B8:F5:E4:B3:CB:A5:99:C6:E6:4F:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.58.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50224

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:aa:2d:a9:b2:47:3b:97:9c:53:8e:31:96:b3:a1:52:be:
         7c:a6:02:e9:f1:9f:d6:6e:50:5a:31:40:73:07:0f:58:81:91:
         82:ad:f6:f1:20:6e:eb:74:24:cf:2c:f1:0f:b6:75:fd:4e:b2:
         6b:8c:bf:3e:65:e6:57:f6:bf:9e:18:d8:f8:65:ae:f6:2d:bf:
         52:ac:ef:51:89:20:1b:d3:5f:b2:e0:41:af:8f:09:f8:60:03:
         fd:f7:37:12:b2:2b:14:f9:f2:bf:4b:6d:20:14:2f:76:77:37:
         b9:a1:6d:45:51:cb:d2:58:3e:03:b7:eb:da:47:c2:27:11:a6:
         cb:f9:74:9a:25:18:be:b0:89:0f:a2:21:38:b5:1e:60:08:f4:
         77:fc:75:a9:c9:a4:1a:99:b7:6e:1e:de:d0:40:2f:45:fb:71:
         ee:18:12:b6:76:c0:27:ec:4a:2f:93:3e:b4:10:ef:e5:01:9a:
         be:10:07:14:ff:9c:42:8b:37:99:18:9d:66:1a:4f:90:bc:62:
         cc:39:41:dc:36:b7:cf:9f:b7:39:2a:a1:e4:ef:b2:95:ff:cd:
         88:52:8a:c1:19:b3:36:75:9e:5a:1e:12:0c:4c:7f:b8:be:6d:
         f2:b5:88:a1:6c:57:32:a6:cf:95:3c:34:8d:28:f5:31:6f:77:
         f7:91:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----