Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer
File:                     6mxSuRPG3H_6BwMYNU6IW2K2rZM.cer (raw, json)
Hash identifier:          OD4OEr9z5pmn/eltIhd1XPRIPnSlg1eayqy7ds54+Sk=
Subject key identifier:   EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B18BB6C455
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/6mxSuRPG3H_6BwMYNU6IW2K2rZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 11 May 2022 09:09:12 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 20900
                          AS: 48196
                          IP: 31.217.232.0/21
                          IP: 185.182.252.0/22
                          IP: 213.190.64.0/19
                          IP: 2001:1b08::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762553222229 (0xb18bb6c455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 11 09:09:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea6c52b913c6dc7ffa070318354e885b62b6ad93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:52:8e:bb:dd:4e:af:e4:42:b5:a5:da:df:
                    00:7f:8b:52:f3:35:ff:bd:a8:42:d2:fa:8d:54:fd:
                    95:cf:ce:40:b2:62:bd:40:61:eb:be:92:88:bf:cb:
                    5c:4a:5d:55:89:1f:01:c4:03:f4:78:7c:ef:79:ca:
                    12:03:87:9a:00:91:c2:48:18:ff:8d:0b:fb:aa:86:
                    72:5b:16:26:d3:ea:ca:6a:80:13:c4:c8:c8:9c:b6:
                    c4:7e:f8:ea:31:29:78:c7:c0:17:91:5e:30:b4:6b:
                    b6:f5:96:91:0a:5f:e3:96:9e:72:e1:c1:39:6e:16:
                    f1:5a:c4:3a:2b:48:20:66:67:6d:b1:7f:36:fe:c0:
                    48:2f:07:f8:43:e9:a9:2b:b2:a2:ee:0c:64:36:01:
                    27:90:96:02:3f:ff:1b:2f:26:ed:18:34:68:a5:b6:
                    0c:c9:d3:44:bd:f8:8e:30:cf:8c:6e:97:13:ff:d2:
                    d1:7e:12:db:0f:42:0e:47:e2:11:b1:69:56:54:82:
                    57:82:b8:48:e4:f7:da:71:69:54:4f:be:9b:a7:70:
                    9b:3e:47:cb:d9:d3:fc:db:25:86:4e:5d:d6:b4:0b:
                    13:77:81:16:ed:2a:a8:4a:50:ea:1b:aa:ab:3b:ef:
                    2e:32:90:6c:30:1e:df:cf:5e:9c:ef:f4:89:e6:11:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:52:B9:13:C6:DC:7F:FA:07:03:18:35:4E:88:5B:62:B6:AD:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5b440-b533-4359-b59e-c16e03d625a0/1/6mxSuRPG3H_6BwMYNU6IW2K2rZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.217.232.0/21
                  185.182.252.0/22
                  213.190.64.0/19
                IPv6:
                  2001:1b08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20900
                  48196

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:33:e5:48:01:07:42:93:34:bd:66:d3:83:0e:17:ea:85:
         5b:a3:a9:42:78:40:de:08:83:49:fb:a0:18:cb:54:b6:cc:03:
         61:d2:58:31:51:1d:8e:ed:6c:cb:3f:0a:dc:73:2f:a3:a0:63:
         5d:b6:ff:99:d4:09:59:99:d3:ed:f6:f8:4d:05:b2:0f:1c:10:
         04:56:ee:bc:c4:ab:de:5d:94:48:0e:37:33:e0:2f:4a:45:2c:
         20:77:5c:18:e6:4d:20:52:bf:40:ab:fe:38:59:07:0c:8f:45:
         60:53:6a:7a:18:a2:66:3c:95:10:7c:7a:dc:12:38:34:fe:e1:
         96:5d:cb:f6:42:ca:6a:f1:c6:74:b8:03:99:d2:d5:ce:a5:31:
         36:f2:c6:83:be:d5:b7:07:b6:04:6f:79:a1:f4:d3:83:23:b0:
         60:20:5d:cf:ab:b2:bc:4a:20:ad:b6:9d:c2:6e:df:e7:50:7a:
         f7:25:37:2e:24:6b:11:30:1a:2e:ec:1e:b7:8a:ac:98:f9:88:
         5a:93:f9:16:e2:8a:02:08:f0:2b:ab:c2:27:04:75:82:39:07:
         13:f2:42:aa:4a:20:ea:d5:fd:0d:69:9f:85:4d:a1:46:1b:ec:
         f5:d3:6f:d2:84:74:13:f1:23:fd:03:5a:bf:93:f0:ad:12:2f:
         19:54:5e:55
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIGALGLtsRVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NTExMDkwOTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYTZjNTJiOTEz
YzZkYzdmZmEwNzAzMTgzNTRlODg1YjYyYjZhZDkzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA2JJSjrvdTq/kQrWl2t8Af4tS8zX/vahC0vqNVP2Vz85A
smK9QGHrvpKIv8tcSl1ViR8BxAP0eHzvecoSA4eaAJHCSBj/jQv7qoZyWxYm0+rK
aoATxMjInLbEfvjqMSl4x8AXkV4wtGu29ZaRCl/jlp5y4cE5bhbxWsQ6K0ggZmdt
sX82/sBILwf4Q+mpK7Ki7gxkNgEnkJYCP/8bLybtGDRopbYMydNEvfiOMM+MbpcT
/9LRfhLbD0IOR+IRsWlWVIJXgrhI5PfacWlUT76bp3CbPkfL2dP82yWGTl3WtAsT
d4EW7SqoSlDqG6qrO+8uMpBsMB7fz16c7/SJ5hHGpwIDAQABo4ICvzCCArswHQYD
VR0OBBYEFOpsUrkTxtx/+gcDGDVOiFtitq2TMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2Q1YjQ0MC1iNTMzLTQzNTkt
YjU5ZS1jMTZlMDNkNjI1YTAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDViNDQwLWI1MzMtNDM1OS1i
NTllLWMxNmUwM2Q2MjVhMC8xLzZteFN1UlBHM0hfNkJ3TVlOVTZJVzJLMnJaTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQDH9noAwQCubb8AwQF1b5AMA0EAgACMAcDBQAgARsIMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAlGkAgMAvEQwDQYJKoZIhvcNAQELBQADggEBAEFLM+VI
AQdCkzS9ZtODDhfqhVujqUJ4QN4Ig0n7oBjLVLbMA2HSWDFRHY7tbMs/CtxzL6Og
Y122/5nUCVmZ0+32+E0Fsg8cEARW7rzEq95dlEgONzPgL0pFLCB3XBjmTSBSv0Cr
/jhZBwyPRWBTanoYomY8lRB8etwSODT+4ZZdy/ZCymrxxnS4A5nS1c6lMTbyxoO+
1bcHtgRveaH004MjsGAgXc+rsrxKIK22ncJu3+dQevclNy4kaxEwGi7sHreKrJj5
iFqT+RbiigII8CurwicEdYI5BxPyQqpKIOrV/Q1pn4VNoUYb7PXTb9KEdBPxI/0D
Wr+T8K0SLxlUXlU=
-----END CERTIFICATE-----