Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6cZLrZT5QLATtpGh28X7kpEOKn8.cer
File:                     6cZLrZT5QLATtpGh28X7kpEOKn8.cer (raw, json)
Hash identifier:          dwlbbWfnuz6O8f71L51gekJmEDwg1a8oLzoeqwybsyQ=
Subject key identifier:   E9:C6:4B:AD:94:F9:40:B0:13:B6:91:A1:DB:C5:FB:92:91:0E:2A:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9A5CBC9A2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/6cZLrZT5QLATtpGh28X7kpEOKn8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 01:54:10 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.239.64.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662980827691 (0x9a5cbc9a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:54:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9c64bad94f940b013b691a1dbc5fb92910e2a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:2c:ee:ad:6b:a4:f9:fd:59:8d:d4:b7:d3:
                    b8:0d:82:a4:58:35:90:c4:69:2a:18:1e:b3:22:39:
                    4f:6f:f3:1d:c9:39:06:cd:dd:5b:85:d4:e3:03:ff:
                    30:e4:58:ed:2a:1b:02:f4:f2:88:57:8b:ff:8b:da:
                    27:11:4f:d1:9e:23:84:81:fd:21:2b:44:4f:ce:d0:
                    68:e6:e1:98:d5:0b:93:fe:dc:36:6c:b8:21:d0:66:
                    2f:e6:ea:90:36:73:43:f8:14:c0:37:0b:4c:fa:a7:
                    bb:19:eb:2f:1d:16:5a:1b:e2:29:47:57:e1:0c:a9:
                    5f:f5:29:cb:82:65:bd:2b:e3:c5:00:6e:85:12:83:
                    70:f5:83:6e:5a:75:6b:30:94:c1:2a:9c:c8:24:fb:
                    e2:7a:23:0e:9a:5e:85:f1:07:86:20:0a:59:ce:ed:
                    c3:d8:cf:1f:81:73:63:a3:48:64:10:f4:64:ee:18:
                    bc:c2:f0:38:02:3c:6b:04:89:26:4f:b4:98:24:41:
                    33:b9:ca:9a:ed:e0:35:b6:f8:24:e3:6b:09:62:67:
                    9b:53:b8:7b:77:19:f6:06:ca:66:93:19:a9:af:56:
                    3e:4d:04:e4:03:f8:a6:3f:4b:55:df:5d:e0:2c:89:
                    05:b2:a5:58:51:33:d5:f6:a0:66:37:bd:e1:d9:f3:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:4B:AD:94:F9:40:B0:13:B6:91:A1:DB:C5:FB:92:91:0E:2A:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9fbd08-d6cd-4738-8de4-5822f621e8c9/1/6cZLrZT5QLATtpGh28X7kpEOKn8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:b1:b0:6b:27:0e:c2:79:dd:fb:d4:d3:2c:6b:f0:e4:dd:
         e9:ff:41:cb:25:1b:8c:c3:77:64:db:5a:05:2f:b2:56:ec:11:
         9e:d6:3f:46:27:a0:67:db:6b:23:ce:61:10:20:21:a5:d1:4a:
         54:f2:af:e7:a2:f7:9c:70:85:a1:b0:3a:61:c1:c5:cf:88:50:
         30:9f:3d:c5:d3:d7:17:2c:dc:5d:26:46:da:7d:58:38:2d:28:
         89:f3:3e:d9:ef:3f:0c:f7:a0:fe:6d:26:e5:d7:2c:63:8a:c8:
         8a:50:0c:2e:26:ba:49:73:5a:1e:73:58:0e:07:77:af:28:e1:
         0c:c1:9c:b7:79:b2:08:6e:8a:58:a8:88:43:d8:f3:5d:67:76:
         bb:e2:54:8a:3a:8f:94:96:88:04:20:0f:f3:7b:8d:ec:8c:a1:
         d2:7b:d8:1d:69:f8:84:c3:06:be:82:0b:0c:4d:9c:5d:a4:63:
         4e:26:79:52:42:f3:5f:aa:75:56:e3:f3:92:3c:ae:04:82:22:
         e0:1e:fd:09:18:ff:e8:52:02:fc:b3:06:45:8d:42:48:c1:09:
         57:de:b2:64:c0:5f:8c:ee:85:04:ed:68:8f:4b:a6:7f:01:ba:
         fd:cc:84:34:03:fd:c4:e4:2e:96:53:91:2a:58:19:28:18:c6:
         99:aa:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----