Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7WsgDFK-RGmjbs2irC4vfHyKdaI.cer
File:                     7WsgDFK-RGmjbs2irC4vfHyKdaI.cer (raw, json)
Hash identifier:          IoDsn+Ic9hHSDTWQGjwiDvvVqWaXLmF9NT5nrqo16Tg=
Subject key identifier:   ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A42713C188
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/7WsgDFK-RGmjbs2irC4vfHyKdaI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:01:41 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 44624
                          IP: 185.69.24.0/22
                          IP: 2a03:2e20::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705030242696 (0xa42713c188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed6b200c52be4469a36ecda2ac2e2f7c7c8a75a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:ac:d6:1a:9f:1d:f1:d3:19:21:78:db:27:
                    02:19:09:f5:91:03:a7:5b:84:37:de:cf:74:0a:7b:
                    fd:9a:e4:37:80:0e:09:e5:cc:e4:81:e2:e8:ea:1f:
                    37:06:39:2b:70:13:6f:87:12:2a:a3:9d:96:82:6d:
                    95:b2:12:6a:4a:ea:e8:56:b1:9a:23:6e:39:d3:df:
                    26:ba:38:dc:9e:4f:8c:d4:bc:ef:0d:87:4a:c9:4e:
                    1f:47:e6:9f:5a:5b:2d:8b:6e:4b:f1:23:90:77:14:
                    30:df:20:29:8b:8b:c6:9e:4e:6c:47:07:6e:f7:4a:
                    b2:83:c1:3e:51:99:1b:53:3d:93:0a:f8:37:0d:ab:
                    95:93:00:66:70:06:4f:3f:72:a4:cc:f9:42:97:66:
                    8d:e1:3f:e4:4f:7f:a8:91:47:e3:af:7d:c1:92:67:
                    45:4e:17:cb:9f:b9:16:d8:ec:94:91:6a:c5:55:fa:
                    6c:33:ce:7e:11:b5:1e:be:b5:22:fc:cf:74:47:ef:
                    8f:83:4d:35:90:95:e1:2d:d4:2b:c3:40:fc:46:eb:
                    3c:10:d2:1e:19:36:8d:98:7b:a8:b8:45:9d:76:46:
                    8e:1d:cf:eb:ef:c0:ec:fe:92:16:a8:98:61:72:2a:
                    88:ea:e9:84:f6:bb:d3:5a:70:91:58:e3:62:a0:58:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6B:20:0C:52:BE:44:69:A3:6E:CD:A2:AC:2E:2F:7C:7C:8A:75:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bfc7a0-99bc-476d-9f51-b6d679f3fb12/1/7WsgDFK-RGmjbs2irC4vfHyKdaI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.24.0/22
                IPv6:
                  2a03:2e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44624

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:57:9d:2d:a8:9a:71:93:93:7d:fb:67:e2:55:56:b5:ba:
         06:fe:61:bf:3a:01:5b:1c:9f:a0:14:f1:4e:de:ed:74:0f:f1:
         ba:2a:7f:06:2b:34:b5:44:c3:54:c4:c2:c6:c4:5e:ed:86:45:
         0f:1b:14:6c:ec:7a:74:15:b6:60:8a:7f:72:2a:50:82:6d:ca:
         e8:22:b2:e7:2a:a2:a4:e0:ad:0c:84:36:e8:89:5b:e6:9d:3e:
         ed:37:a0:62:52:19:8c:fa:25:4c:56:fd:a5:97:86:7b:d6:fb:
         6f:d6:10:9c:76:5c:ba:d9:d5:3b:72:c5:25:c6:25:03:d1:8e:
         38:92:e7:65:a8:77:5e:e0:37:91:c7:67:f3:c1:a5:3b:8d:c5:
         97:bb:55:7d:bd:48:37:9a:6d:d8:ef:21:0e:ce:81:be:5b:62:
         de:fc:62:48:f6:1a:bc:e3:57:86:05:7f:ba:b7:d8:62:3c:43:
         34:fa:d4:7b:85:ae:8a:6f:04:ab:a0:60:ea:42:a5:77:48:46:
         13:7f:59:62:ca:d5:cb:36:6c:92:fe:39:27:31:d8:fd:de:0e:
         bd:0d:32:08:7f:5d:42:17:8b:d2:b9:4d:4b:b1:0a:71:ba:74:
         d7:e5:b5:c4:04:0e:be:e2:ef:40:1c:b5:c4:f2:b6:9c:75:75:
         e8:3a:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----