Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8X1sjvA0HrlvlGai_Mfs56zLGEM.cer
File:                     8X1sjvA0HrlvlGai_Mfs56zLGEM.cer (raw, json)
Hash identifier:          KDGdmZPB2zF3kDoJQzvv0hI3LjL1OP/JR6+0onbIuNc=
Subject key identifier:   F1:7D:6C:8E:F0:34:1E:B9:6F:94:66:A2:FC:C7:EC:E7:AC:CB:18:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183A39D55E514F254F500A00976976CA356
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/8X1sjvA0HrlvlGai_Mfs56zLGEM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 04 Oct 2022 15:29:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205478

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a3:9d:55:e5:14:f2:54:f5:00:a0:09:76:97:6c:a3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  4 15:29:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f17d6c8ef0341eb96f9466a2fcc7ece7accb1843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:d8:5f:a3:a8:7e:f1:cf:60:50:af:79:ba:
                    c5:4f:92:d5:e2:6f:22:c3:59:6e:dd:4d:08:53:f1:
                    fa:84:16:ae:de:01:ee:d1:82:e9:92:f3:78:6b:c2:
                    c4:44:91:1d:90:b5:0e:c1:67:44:60:a4:95:5a:4a:
                    c3:a5:0b:5e:90:11:ea:f9:2b:96:ca:f1:c8:c1:06:
                    7a:01:0d:a8:a5:33:ff:9f:b5:62:14:01:85:4d:f7:
                    26:2b:f2:c8:5b:2b:38:b1:85:89:16:77:38:2d:c9:
                    0b:5a:94:ee:1d:81:12:28:f4:26:2d:2e:69:90:fe:
                    00:ce:92:53:8a:a7:1e:b0:16:c1:29:84:fd:fe:c8:
                    44:3b:7d:bf:5e:1b:83:e6:3b:db:45:4e:ef:1d:9f:
                    4e:58:75:5f:db:82:d6:30:12:dc:10:3d:de:6a:c0:
                    16:58:0b:ec:36:8b:fc:44:8d:82:dd:ec:13:e9:87:
                    ab:60:e9:f9:06:e4:c6:2b:ab:54:7c:4a:74:b9:df:
                    e7:a4:c6:57:67:99:b4:a7:cb:31:45:d0:dd:b3:81:
                    3f:dd:a9:aa:78:9c:e6:b5:06:71:32:03:d1:79:4b:
                    1c:20:fd:74:82:fb:3c:ed:29:e4:e5:0e:5e:55:2a:
                    93:00:84:f1:c5:ac:93:84:5a:85:90:48:a0:b2:22:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:6C:8E:F0:34:1E:B9:6F:94:66:A2:FC:C7:EC:E7:AC:CB:18:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/8X1sjvA0HrlvlGai_Mfs56zLGEM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205478

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:f9:e0:ab:6f:18:6d:22:93:45:c0:6b:2c:f3:21:84:8b:
         66:08:f5:6c:01:f5:36:05:f2:6a:7c:df:88:45:16:ee:b3:3c:
         b2:1e:7b:ce:82:fc:b1:ad:df:c8:de:23:e6:98:43:49:da:16:
         04:92:48:99:ba:b4:b1:96:db:05:94:ad:36:85:7a:f0:76:4b:
         c3:bc:f5:62:f4:96:f4:04:13:85:03:b1:df:14:4e:37:d2:0e:
         ca:c0:d1:62:39:6d:69:a2:13:7a:0e:f2:8d:6d:32:ee:ff:77:
         74:8b:54:2d:db:dd:ab:21:24:aa:07:e2:95:03:61:a5:92:72:
         25:17:70:29:00:dc:0b:f9:10:65:48:f6:54:8e:dd:74:ab:9c:
         01:40:9e:0e:dd:5d:cc:14:f5:e0:5b:bd:fc:fc:b2:29:2a:d7:
         19:cd:0b:65:d9:e3:ac:fd:19:2e:40:b7:29:5d:07:4b:52:f8:
         d8:44:28:ae:53:9a:2b:4f:2b:d2:55:c4:0d:21:31:89:30:09:
         2a:d2:b9:43:53:6c:32:42:74:10:8d:9d:bd:a4:e7:0e:6c:86:
         09:2d:2b:13:6a:1c:33:6b:53:b5:10:46:f2:f5:29:6a:0c:63:
         27:c7:6a:a5:d0:81:e4:48:f7:75:83:8c:22:d7:3f:c2:c7:3d:
         fa:1e:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----