Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer
File:                     6xmxByf1lZR0P5EjTJ63Ez9sRzE.cer (raw, json)
Hash identifier:          8TtbsX4TzoEsQxTMbMJf129p6IwIzhKNxySeB8VVIWQ=
Subject key identifier:   EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9FAE135383
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/6xmxByf1lZR0P5EjTJ63Ez9sRzE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:04:16 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 5.198.132.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685820302211 (0x9fae135383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:04:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb19b10727f59594743f91234c9eb7133f6c4731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:be:e8:65:82:93:94:bb:37:48:48:6e:f4:
                    6b:09:f8:2a:65:26:de:15:58:5c:fe:f9:ec:e1:38:
                    5c:ec:91:11:fd:81:b9:41:6d:ee:17:2d:3f:4c:ed:
                    97:72:1b:a0:47:31:19:17:92:6b:a0:0f:ec:1f:66:
                    a9:85:e2:5f:57:2a:03:27:94:50:13:7c:45:b4:f5:
                    d2:db:f1:3a:d8:6c:04:58:4b:47:ba:09:20:40:64:
                    ff:99:df:00:5c:14:ed:92:8b:08:db:15:50:ec:41:
                    2c:d1:98:e2:bc:15:69:a0:a1:c6:b3:19:50:e5:62:
                    e7:4b:ef:e2:ae:6f:f5:08:ba:06:38:59:73:88:94:
                    42:b7:a0:c9:f2:d2:95:04:ec:c3:40:7e:f0:87:4e:
                    9f:4c:63:a1:5e:68:f3:dd:9c:85:86:9f:21:35:20:
                    c0:77:0a:a5:f1:b3:e2:47:10:77:9c:2b:ea:22:57:
                    d9:5e:90:ef:d3:a6:87:f4:53:4c:7c:d9:56:d4:ef:
                    8e:15:fc:3a:2e:7d:eb:57:4b:bd:a5:20:04:63:e6:
                    4a:b0:c8:6d:20:1e:15:f5:c7:63:81:55:74:2a:c4:
                    df:41:be:da:ad:3d:4a:1e:b0:75:7c:85:a0:bf:0a:
                    9c:9b:ce:ef:e8:24:59:44:fe:65:7d:1a:77:05:ac:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:19:B1:07:27:F5:95:94:74:3F:91:23:4C:9E:B7:13:3F:6C:47:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5df466-2c9b-49da-a129-024ca643e8d5/1/6xmxByf1lZR0P5EjTJ63Ez9sRzE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.198.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:9e:d1:53:e9:63:d3:77:cd:2f:5a:91:10:41:cd:02:c9:
         86:4e:03:ba:7b:1b:4c:2d:a4:a7:85:e9:5a:1b:3f:02:c9:18:
         3f:53:c9:9a:5e:0c:0f:5a:be:f3:2f:55:8a:e8:cf:20:69:88:
         22:12:9c:4f:1c:39:f9:f1:ea:29:d0:eb:7a:0a:70:ba:7f:d0:
         7a:29:07:7e:06:dd:c2:5d:9a:f7:95:e5:4b:17:af:32:67:03:
         c2:ae:ea:01:e6:a1:26:20:dc:e5:f8:48:ab:bd:d2:4c:5c:88:
         a6:72:10:93:8a:f1:a4:30:ed:e3:98:02:80:d8:58:c9:1e:fc:
         34:5f:3b:b7:31:4e:33:43:76:2e:47:74:a8:b3:05:f4:e4:ef:
         2c:b0:a1:3d:ee:82:d3:86:d6:8e:28:7e:f0:28:0e:0a:d6:35:
         89:c3:f5:72:55:7c:63:7a:d0:cb:9e:be:07:cb:4f:71:f6:65:
         8b:06:31:f0:81:f9:b7:68:55:0a:e7:38:69:ed:e6:e2:f2:0f:
         e5:7e:e6:ab:18:47:4b:9a:e1:45:29:56:6e:6e:fb:df:fc:ca:
         93:34:d2:05:a9:e1:68:24:31:bd:d4:7f:26:cf:76:15:fd:95:
         3e:38:d8:69:bd:a4:ed:d3:d4:58:e9:93:75:d3:90:b1:62:00:
         d1:5d:3e:ad
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ+uE1ODMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDYwNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYjE5YjEwNzI3
ZjU5NTk0NzQzZjkxMjM0YzllYjcxMzNmNmM0NzMxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvjS+6GWCk5S7N0hIbvRrCfgqZSbeFVhc/vns4Thc7JER
/YG5QW3uFy0/TO2XchugRzEZF5JroA/sH2apheJfVyoDJ5RQE3xFtPXS2/E62GwE
WEtHugkgQGT/md8AXBTtkosI2xVQ7EEs0ZjivBVpoKHGsxlQ5WLnS+/irm/1CLoG
OFlziJRCt6DJ8tKVBOzDQH7wh06fTGOhXmjz3ZyFhp8hNSDAdwql8bPiRxB3nCvq
IlfZXpDv06aH9FNMfNlW1O+OFfw6Ln3rV0u9pSAEY+ZKsMhtIB4V9cdjgVV0KsTf
Qb7arT1KHrB1fIWgvwqcm87v6CRZRP5lfRp3BawbiQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFOsZsQcn9ZWUdD+RI0yetxM/bEcxMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzVkZjQ2Ni0yYzliLTQ5ZGEt
YTEyOS0wMjRjYTY0M2U4ZDUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNWRmNDY2LTJjOWItNDlkYS1h
MTI5LTAyNGNhNjQzZThkNS8xLzZ4bXhCeWYxbFpSMFA1RWpUSjYzRXo5c1J6RS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCBcaEMA0GCSqGSIb3DQEBCwUAA4IBAQBuD57RU+lj03fNL1qREEHN
AsmGTgO6extMLaSnhelaGz8CyRg/U8maXgwPWr7zL1WK6M8gaYgiEpxPHDn58eop
0Ot6CnC6f9B6KQd+Bt3CXZr3leVLF68yZwPCruoB5qEmINzl+EirvdJMXIimchCT
ivGkMO3jmAKA2FjJHvw0Xzu3MU4zQ3YuR3SoswX05O8ssKE97oLThtaOKH7wKA4K
1jWJw/VyVXxjetDLnr4Hy09x9mWLBjHwgfm3aFUK5zhp7ebi8g/lfuarGEdLmuFF
KVZubvvf/MqTNNIFqeFoJDG91H8mz3YV/ZU+ONhpvaTt09RY6ZN105CxYgDRXT6t
-----END CERTIFICATE-----