Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6jREFdCosR9RmPDT0Pt14v4j-gM.cer
File:                     6jREFdCosR9RmPDT0Pt14v4j-gM.cer (raw, json)
Hash identifier:          mtcSxg/zM2EPIAHOWiZeBgAkddmCqh0oQ+2NAdKD7DU=
Subject key identifier:   EA:34:44:15:D0:A8:B1:1F:51:98:F0:D3:D0:FB:75:E2:FE:23:FA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0181F7F3338D5806E811918631005077292C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/91bd27-b2ff-450f-b783-22f43127667b/1/6jREFdCosR9RmPDT0Pt14v4j-gM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/91bd27-b2ff-450f-b783-22f43127667b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 13 Jul 2022 14:25:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 44691
                          AS: 207504
                          IP: 185.80.196.0/23
                          IP: 2a05:7de0::/30
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:f3:33:8d:58:06:e8:11:91:86:31:00:50:77:29:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 13 14:25:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea344415d0a8b11f5198f0d3d0fb75e2fe23fa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:7d:1b:ea:8b:19:f3:13:c7:90:8d:30:fe:
                    50:76:43:31:ea:a2:09:9a:3d:b2:6e:c2:a2:14:08:
                    e0:b5:ba:d1:37:42:ea:c2:b5:2c:4a:86:c0:eb:c6:
                    28:e4:af:20:f9:8c:6a:81:c2:52:7d:64:94:96:03:
                    90:14:1e:3f:f8:d5:4b:62:dd:79:38:ed:08:e6:4d:
                    1a:f1:3b:2f:e7:17:2d:19:3e:45:de:ec:24:ea:ee:
                    bf:21:83:75:3e:94:3f:f6:93:4e:9e:bf:ed:27:0f:
                    ed:31:91:71:40:92:a8:e5:b6:74:7b:f0:35:81:4d:
                    b1:c9:4c:79:ac:d8:0f:7b:08:b0:80:30:36:0f:d2:
                    57:24:4b:5e:9b:4e:ba:72:8d:95:ce:7a:10:4c:71:
                    b2:4c:3f:6d:2a:74:3f:a9:2e:43:28:47:ef:15:e7:
                    38:74:fc:2c:7c:58:cf:fb:a8:12:bc:b6:e7:21:94:
                    4e:fb:e5:a4:8c:bc:8b:4b:2b:53:47:2b:e6:a8:fc:
                    61:c5:16:f4:13:60:d3:42:46:11:6d:55:72:df:13:
                    35:0a:86:65:a3:c9:1b:60:6f:19:a2:cf:11:6b:70:
                    92:7b:51:07:5b:c5:82:cd:39:4c:16:40:37:9e:a4:
                    6b:cf:ee:d2:4f:6b:f0:7f:ac:54:42:d3:14:5f:c9:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:44:15:D0:A8:B1:1F:51:98:F0:D3:D0:FB:75:E2:FE:23:FA:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91bd27-b2ff-450f-b783-22f43127667b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91bd27-b2ff-450f-b783-22f43127667b/1/6jREFdCosR9RmPDT0Pt14v4j-gM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.196.0/23
                IPv6:
                  2a05:7de0::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44691
                  207504

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:81:24:31:ed:3e:b4:19:1b:b5:e7:76:6c:78:8b:b0:8f:
         f6:4d:17:11:0c:0c:da:b7:15:06:a5:d1:c4:ab:c9:60:ab:ce:
         a9:c7:b0:a8:fb:14:92:42:41:c0:0c:61:51:53:cc:7c:ac:a9:
         e2:f8:74:af:ae:d9:4c:1d:53:2d:f9:16:a4:58:0a:16:55:b9:
         5c:38:95:c8:d2:ce:bd:30:4e:82:bf:1e:52:25:f2:cf:07:5f:
         c9:33:3e:c4:03:65:99:18:5e:62:1f:1f:02:36:23:6a:f8:a1:
         b8:69:b5:ee:8a:6a:28:91:9e:f6:40:8f:8f:c0:f7:e3:b1:c8:
         1f:0b:3e:9a:be:1b:3e:8a:c1:eb:78:19:ea:a2:7f:f2:08:01:
         2a:9f:ba:a7:5d:34:32:5c:f1:4a:5d:25:6b:f8:76:56:87:4c:
         af:d1:b8:65:77:ce:29:0d:ed:89:10:2f:be:f1:c1:c5:82:27:
         07:05:f0:63:0a:0d:21:97:ff:c1:3a:a6:bd:77:24:cf:96:de:
         d6:5b:a0:1f:29:d9:14:a9:bf:89:22:b8:24:c1:3c:6c:6d:34:
         32:e1:40:ed:9e:b4:1a:7b:d2:76:50:9b:d3:fe:70:07:d4:7d:
         35:22:c8:bc:b2:36:34:48:b5:5f:8e:98:cd:d7:4d:32:22:99:
         a9:23:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----