Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NqXJvhneQSIBSShqUyqf1cfO-A.cer
File:                     8NqXJvhneQSIBSShqUyqf1cfO-A.cer (raw, json)
Hash identifier:          9iPtfZqKxhVvvP0z8ceoo728vUVpm4R+sWNDJbSH2+Q=
Subject key identifier:   F0:DA:97:26:F8:67:79:04:88:05:24:A1:A9:4C:AA:7F:57:1F:3B:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8430E02681
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/2fc0e8-f790-4bce-9b90-1e4d1200c696/1/8NqXJvhneQSIBSShqUyqf1cfO-A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/2fc0e8-f790-4bce-9b90-1e4d1200c696/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:40:50 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 91.239.122.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567755679361 (0x8430e02681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:40:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f0da9726f8677904880524a1a94caa7f571f3be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:4d:39:cd:f5:e8:a5:7a:d3:7a:a4:8b:46:
                    4f:6f:d8:ae:31:8f:27:74:c4:f6:6c:4a:30:d6:6d:
                    7b:4c:65:66:8a:84:5b:a3:72:29:d4:f3:4a:63:ca:
                    4f:e4:00:c5:bc:0f:d8:ca:ca:1a:38:08:34:5b:4b:
                    3c:62:c5:ce:6f:88:65:8b:be:ec:8a:06:cf:c5:98:
                    9d:72:9e:f9:94:1a:5a:d1:80:f8:41:64:ae:da:80:
                    68:29:c0:10:ca:0b:ec:8e:c9:9f:4a:17:ac:c7:b2:
                    e5:bf:a5:2e:55:1e:7c:10:64:dc:17:25:7a:22:40:
                    b6:22:75:b2:97:64:84:d5:0c:6b:b9:c1:32:26:0c:
                    c5:4f:18:93:f4:21:a1:c7:d9:cb:ed:c1:fd:88:2e:
                    26:df:d4:7e:7d:14:85:98:a2:90:89:f5:5e:37:82:
                    ed:9f:64:7d:2a:65:26:0d:37:45:36:80:ea:c9:fa:
                    fc:05:8e:8a:f3:12:ce:8c:ea:12:37:0a:00:f5:f4:
                    cf:31:63:39:6c:cc:8e:70:b4:21:70:3f:a3:3d:02:
                    b4:97:5b:90:53:6a:7a:7a:27:81:2f:e0:74:e7:c0:
                    7b:09:ce:c0:7b:c2:ee:de:62:0e:6c:51:51:7a:39:
                    14:1d:ad:7d:29:18:79:fd:86:9f:bd:d4:69:d7:cd:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:97:26:F8:67:79:04:88:05:24:A1:A9:4C:AA:7F:57:1F:3B:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fc0e8-f790-4bce-9b90-1e4d1200c696/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fc0e8-f790-4bce-9b90-1e4d1200c696/1/8NqXJvhneQSIBSShqUyqf1cfO-A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:79:f6:18:fc:31:ee:ad:04:4a:32:8a:8e:1e:ac:4f:78:
         8a:2c:7c:fe:81:8c:2c:e0:f7:41:85:66:50:ec:19:b6:9e:2c:
         de:b7:87:09:dd:23:21:5f:a1:14:59:60:78:be:03:25:d2:17:
         1e:73:5a:01:18:28:98:ca:87:d6:39:a3:5d:cf:f3:14:a7:17:
         f0:5b:5f:38:9a:6f:0b:b1:ae:f4:aa:eb:58:f0:4e:af:38:9d:
         c2:0f:ca:5b:56:8f:d7:5b:dd:5e:76:ab:e5:c0:1b:89:b3:d4:
         0c:63:6f:96:89:cb:28:56:f4:fb:39:4d:c5:0e:5f:6e:c6:3a:
         8b:66:29:9f:16:48:ad:8c:d3:6a:ed:91:8e:f4:9f:f0:b6:21:
         c3:d4:7d:e2:7e:20:f4:b1:a3:d5:3d:e2:cb:89:f7:c0:97:ce:
         b7:2a:68:df:fe:13:8c:63:fe:8b:56:04:e4:91:b7:77:18:b0:
         e5:f7:ec:23:72:5a:83:40:4d:a7:9f:07:64:3d:44:06:63:9d:
         b8:74:97:b2:50:f9:1d:b3:b4:cb:50:c1:4a:59:2f:90:b8:0e:
         fc:d8:af:16:81:33:11:71:c1:46:69:ae:3a:3c:13:60:c2:8f:
         97:a0:59:f7:c2:82:e5:71:35:3a:5d:b2:66:9b:19:a6:4f:5b:
         6c:3d:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----