Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8OnHs_eCmgU-NcHy4y-zhhFbo5c.cer
File:                     8OnHs_eCmgU-NcHy4y-zhhFbo5c.cer (raw, json)
Hash identifier:          UQWBYUUsk0k9f8wiaHKYzKqfN2Mz5MZ+ZA3sCizn9ys=
Subject key identifier:   F0:E9:C7:B3:F7:82:9A:05:3E:35:C1:F2:E3:2F:B3:86:11:5B:A3:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       824B7FB79F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/1985fa-e87c-40bd-a21b-8875cd0e977d/1/8OnHs_eCmgU-NcHy4y-zhhFbo5c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/1985fa-e87c-40bd-a21b-8875cd0e977d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:03:40 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.10.108.0/22
                          IP: 2a0e:5900::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559612409759 (0x824b7fb79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:03:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f0e9c7b3f7829a053e35c1f2e32fb386115ba397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:11:d4:96:ad:e9:2b:8a:ff:f0:52:15:09:
                    41:bf:1a:64:47:df:a3:82:1e:57:34:70:54:f6:82:
                    fb:03:3e:72:4e:e4:ab:c5:b4:45:10:80:28:f1:c1:
                    49:97:cd:02:1a:1c:4a:f1:2a:54:17:87:3c:31:2d:
                    a9:9d:62:8d:9e:04:98:d2:00:b2:71:41:d0:ed:1f:
                    91:b0:b6:6e:1e:93:8a:96:cf:31:82:2c:73:91:87:
                    89:65:ef:c3:5f:31:5a:dc:81:d1:de:e8:54:8c:89:
                    55:d9:9e:69:ec:42:9c:f9:ce:23:2d:14:97:8f:d7:
                    86:33:43:a0:f1:a0:0e:5d:2f:99:85:f8:ac:08:25:
                    bc:77:bb:06:15:bd:9e:31:f6:96:7b:99:04:30:0b:
                    b0:25:75:6b:b7:6d:c0:63:52:33:30:a2:08:ed:bf:
                    86:a8:e5:d5:de:e3:8b:13:b3:fd:0b:c8:68:48:d5:
                    ba:28:e3:1c:5a:c1:33:47:2b:26:04:96:fa:8e:41:
                    ec:3d:ff:d0:27:af:70:cc:df:41:d9:59:74:3b:ad:
                    8d:a7:44:80:70:d7:b4:24:fb:e3:54:0a:f2:d5:50:
                    a6:fa:f4:58:4c:fd:00:03:bf:f0:89:50:ba:31:be:
                    c4:c4:eb:ee:3b:7e:64:33:4a:6a:42:f9:68:3b:cb:
                    e0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E9:C7:B3:F7:82:9A:05:3E:35:C1:F2:E3:2F:B3:86:11:5B:A3:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1985fa-e87c-40bd-a21b-8875cd0e977d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1985fa-e87c-40bd-a21b-8875cd0e977d/1/8OnHs_eCmgU-NcHy4y-zhhFbo5c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.108.0/22
                IPv6:
                  2a0e:5900::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:05:15:a3:4e:67:45:5e:2a:28:34:3e:48:da:e9:14:6a:
         68:3e:ea:d1:fa:f2:46:95:73:25:c1:42:cd:85:0b:5a:03:f8:
         75:67:6d:4a:d7:57:8b:6c:19:9e:cd:97:9c:bf:b9:ba:66:ed:
         13:57:c4:dd:05:89:33:be:35:e7:05:59:37:42:57:25:8a:2a:
         4a:c8:2f:bb:9d:e1:40:69:7e:ba:a9:0f:6b:e1:ed:ec:7e:0f:
         e4:5f:6d:cd:9e:c0:8d:3e:c7:f6:a3:5b:29:70:d5:9b:95:06:
         35:d2:c4:e8:a5:7e:13:25:77:2c:5d:80:e8:15:11:a5:dd:31:
         b2:3f:fd:4c:db:9d:6c:3e:c4:0a:ba:61:4d:94:aa:63:76:96:
         28:e9:4d:ec:6f:9c:2c:1a:e9:af:f5:cc:bc:f7:cb:72:45:da:
         b4:cf:be:1a:f8:d4:1a:05:70:94:ea:c5:38:94:a0:fd:37:83:
         d1:ec:df:40:af:32:89:26:9a:46:98:38:73:5e:f4:f2:14:c8:
         31:00:1d:8f:64:16:c7:bf:d3:83:91:d2:98:61:64:f3:48:d7:
         59:5e:14:7c:e0:f4:18:1c:9f:e9:84:c4:6e:b7:51:f4:13:03:
         06:a4:12:a9:d7:01:21:3f:2b:24:cc:a2:e2:a6:5e:92:79:e6:
         00:af:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----