Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m4FYlF3kruURk3PFOAHK0K4UcM.cer
File:                     7m4FYlF3kruURk3PFOAHK0K4UcM.cer (raw, json)
Hash identifier:          AyhflLX8jdUn9lc3oLjSdeuWszs6KQNK1I9EiMGQn1w=
Subject key identifier:   EE:6E:05:62:51:77:92:BB:94:46:4D:CF:14:E0:07:2B:42:B8:51:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9CB0A26F23
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/1acfd7-c614-43d1-b04b-f177859db211/1/7m4FYlF3kruURk3PFOAHK0K4UcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/1acfd7-c614-43d1-b04b-f177859db211/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:54:18 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.240.112.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672978333475 (0x9cb0a26f23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:54:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee6e0562517792bb94464dcf14e0072b42b851c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:34:24:1b:c6:02:4e:c0:ea:c7:42:d8:b9:
                    3d:df:21:b7:8c:56:ac:54:75:ab:d0:89:ad:18:7e:
                    1d:8d:9b:94:81:85:b4:73:f0:ae:1e:8b:4a:4c:70:
                    a1:d2:da:0e:10:f7:64:55:7a:e7:c6:e1:20:0b:90:
                    f0:3d:45:20:a9:5b:8b:b0:72:c4:21:58:b0:5f:4e:
                    f9:cd:d9:0b:97:9a:16:fe:94:12:64:d6:42:93:36:
                    7a:0e:5f:5d:53:57:99:bb:90:5c:ef:50:dc:2f:a8:
                    ec:dd:dc:7b:e1:4f:00:6e:e8:1e:60:a6:4a:9f:b8:
                    0c:d5:84:e3:d6:94:58:ad:c9:42:9b:73:00:50:9a:
                    0a:ec:a3:be:86:be:fc:3b:d9:33:05:c0:11:2b:ba:
                    38:8e:95:d6:a2:b3:dc:4a:2c:d1:52:e9:8c:50:2b:
                    40:db:a6:e0:45:a9:26:43:cc:b1:5d:5c:ea:37:74:
                    ed:73:d0:c2:77:1f:e4:61:a3:bb:2c:a8:11:90:74:
                    88:43:63:4d:c9:98:5b:15:4e:d1:a9:f2:39:d8:73:
                    9a:c8:4f:2f:64:d9:47:41:f2:51:75:1c:a1:07:5f:
                    66:5b:b6:57:f4:b0:18:b3:b7:3e:cf:4d:d1:21:3e:
                    52:94:1a:b9:e6:c8:51:47:94:f8:de:8a:fc:c8:73:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:05:62:51:77:92:BB:94:46:4D:CF:14:E0:07:2B:42:B8:51:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1acfd7-c614-43d1-b04b-f177859db211/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1acfd7-c614-43d1-b04b-f177859db211/1/7m4FYlF3kruURk3PFOAHK0K4UcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:51:eb:86:4d:f7:53:af:7c:66:c7:8a:56:e0:e9:c7:f1:
         cb:b6:6e:74:b2:61:2a:df:11:48:05:1f:f4:9c:09:86:3b:c6:
         44:18:ea:20:6d:35:27:31:c7:c0:0f:32:86:20:30:c3:c3:74:
         5b:73:60:a6:b2:27:79:b3:b6:b5:d4:42:c6:90:21:aa:63:58:
         dc:e0:09:ba:64:fa:e3:e2:8b:35:ed:f8:1e:ba:3f:b1:ec:e1:
         94:c0:6b:e9:72:05:eb:91:5b:28:18:cf:82:b1:12:5e:7e:a3:
         7e:db:ca:97:3b:65:43:18:52:81:a0:f1:7c:80:7b:2a:31:ff:
         82:39:61:25:bf:eb:0c:06:a3:cd:97:68:c2:7f:fd:8b:b8:7f:
         74:03:31:fb:f4:64:ae:d9:a6:e8:d3:c0:ab:c0:91:4c:80:0c:
         bd:05:f1:6a:10:8f:54:2d:24:56:a7:28:70:b7:d1:76:94:cb:
         2e:e7:f8:46:ed:1a:b3:8e:13:12:88:0b:67:98:b5:c3:b5:6d:
         f2:54:b4:84:3e:1d:7e:90:22:88:ba:90:92:2d:09:79:06:08:
         56:78:2f:39:78:ea:85:50:99:cb:7e:1c:52:8e:c2:ca:9d:9e:
         3c:7c:c5:19:95:a6:40:a2:6a:e8:23:56:f1:c1:44:50:ea:c6:
         65:3a:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----