Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8H8Vj71iCZROtd6XR1BZZXR5uMI.cer
File:                     8H8Vj71iCZROtd6XR1BZZXR5uMI.cer (raw, json)
Hash identifier:          1lzu3sJJgJC+m1dt1t3GJTHNsxOrVwRugI9Z7qp4IDo=
Subject key identifier:   F0:7F:15:8F:BD:62:09:94:4E:B5:DE:97:47:50:59:65:74:79:B8:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7B5D6D7C9D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/f922fa-5a83-4e2d-9ce0-c3a9e4b221e0/1/8H8Vj71iCZROtd6XR1BZZXR5uMI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/f922fa-5a83-4e2d-9ce0-c3a9e4b221e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:35:48 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 51242
                          IP: 193.239.162.0/23
                          IP: 2001:67c:250::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529848433821 (0x7b5d6d7c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:35:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f07f158fbd6209944eb5de97475059657479b8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:92:32:0c:f4:95:f8:3e:64:0e:4c:91:7c:
                    b3:3a:12:4c:7c:6c:ec:60:88:02:e2:83:e4:5a:a4:
                    9c:f0:72:78:45:70:b9:29:c4:9c:0b:3a:2d:9d:34:
                    ba:c8:79:1a:88:41:f6:0d:3c:e1:23:29:99:9d:e7:
                    c9:b0:70:c8:3b:0f:b4:f6:a6:38:03:c0:fb:26:3e:
                    4b:46:e9:e6:98:4d:a7:7e:e7:16:d5:4f:02:7b:cf:
                    b0:ed:ec:38:2a:6b:3b:0e:d9:67:6d:74:8f:44:49:
                    62:e5:29:28:5e:f2:45:49:11:05:c8:9f:4e:1f:f5:
                    30:54:56:28:a8:32:ad:63:8a:ec:31:b5:bc:d8:9f:
                    4e:f9:f3:14:a4:d9:98:f2:39:12:06:a8:30:ad:bb:
                    c6:35:03:ae:b0:be:53:d4:8e:76:20:24:92:f4:e4:
                    6a:6d:92:ca:f1:c5:60:b1:6a:6c:a1:62:c8:fd:88:
                    43:9c:92:a8:bd:14:32:58:a7:b8:f2:46:1d:08:f0:
                    8a:92:c1:e2:17:7f:4d:b7:16:c7:2e:a6:74:0d:d0:
                    f7:2e:73:77:71:14:ff:8b:a5:12:c6:39:fd:9f:12:
                    93:ab:88:4c:f5:de:e1:7d:c8:b8:d2:8a:df:21:97:
                    22:f7:1e:ab:c2:04:81:d5:bf:5d:c6:5f:8f:f0:66:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:15:8F:BD:62:09:94:4E:B5:DE:97:47:50:59:65:74:79:B8:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f922fa-5a83-4e2d-9ce0-c3a9e4b221e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f922fa-5a83-4e2d-9ce0-c3a9e4b221e0/1/8H8Vj71iCZROtd6XR1BZZXR5uMI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.162.0/23
                IPv6:
                  2001:67c:250::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51242

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:c5:54:06:92:0f:fc:d5:ad:a4:55:da:7e:46:20:34:e4:
         e3:b3:ed:b1:85:c5:69:cf:94:a1:ba:91:b6:a8:be:81:de:b4:
         84:71:a3:1e:12:e3:a4:5c:77:fd:fb:9f:6d:ec:50:c6:77:84:
         d5:c4:b7:4c:38:ab:e2:6b:dc:c1:fc:2e:c7:59:79:97:f9:dc:
         70:48:c3:33:88:1c:29:ed:7a:6c:f2:8c:02:56:86:57:32:4a:
         0a:6a:91:b5:f3:20:a2:a4:31:8d:04:83:93:11:94:8d:c9:0b:
         ae:dd:39:b5:38:54:5e:9a:62:36:91:7d:f0:13:66:d6:d3:4e:
         b3:4c:67:53:0d:c0:1a:59:35:9e:36:fc:ce:0b:56:7a:45:ed:
         ee:60:3f:40:14:9b:9c:1a:b1:b9:57:e7:01:76:5e:f6:39:01:
         db:71:5f:27:13:c6:3f:db:fc:95:5b:71:83:07:40:fb:63:5d:
         41:5c:97:d9:ca:35:e3:77:01:65:6b:5c:3f:bf:0f:cf:62:46:
         d8:94:7d:50:02:5b:50:a5:a6:1a:b1:fc:4f:e3:99:3c:de:1f:
         b1:4b:a4:d3:46:e5:82:04:07:c3:16:87:02:7c:9c:c8:2f:16:
         17:a1:03:c6:1c:f1:57:e5:8e:b2:4c:7e:44:8b:56:15:f4:87:
         67:7f:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----