Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8s2WZ-gLPxwFLyMAP5FXx960rQc.cer
File:                     8s2WZ-gLPxwFLyMAP5FXx960rQc.cer (raw, json)
Hash identifier:          uNmKclLIdQORRxSfygllD7DNnIbrilFc+VGBMVYclh0=
Subject key identifier:   F2:CD:96:67:E8:0B:3F:1C:05:2F:23:00:3F:91:57:C7:DE:B4:AD:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7657F48D41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/2d3f81-8d05-46de-b8ec-79d67e177080/1/8s2WZ-gLPxwFLyMAP5FXx960rQc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/2d3f81-8d05-46de-b8ec-79d67e177080/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:25:14 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.80.212.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508281785665 (0x7657f48d41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:25:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f2cd9667e80b3f1c052f23003f9157c7deb4ad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:93:28:da:0a:fe:7f:34:2f:0a:db:e7:ce:
                    d1:b8:1e:7c:82:5d:13:f8:a5:37:69:79:41:3d:6b:
                    dd:35:34:71:01:ed:19:8a:2d:df:84:5b:45:70:b2:
                    cc:45:7a:31:f7:b3:14:c9:12:a0:59:f4:28:82:90:
                    e5:43:8c:e7:09:7b:88:db:71:8e:0a:9f:aa:0f:15:
                    4b:a0:f4:a3:41:6c:8f:0f:fc:dc:5b:50:a9:bc:e0:
                    f3:57:74:81:ac:d4:b5:34:f4:b2:98:a3:99:17:b9:
                    13:bc:74:fd:54:40:a7:85:1a:af:c9:87:4b:4e:52:
                    08:c2:8e:48:f4:12:a4:8f:c2:1c:27:f5:42:88:f5:
                    5a:69:28:d7:07:e2:ad:cf:99:62:78:61:46:cb:79:
                    dc:bd:69:ea:9c:e1:21:e5:38:12:ce:53:9b:b8:62:
                    b9:35:7e:b9:80:13:77:8e:af:10:0f:d9:3b:1f:ce:
                    09:ac:e3:d3:a7:91:e0:34:25:26:45:bb:6e:22:e6:
                    22:b2:24:97:1e:19:a8:77:cc:23:6d:46:c4:96:4d:
                    d2:34:03:d1:99:14:04:d2:66:ca:de:61:da:9c:41:
                    b4:c1:c3:49:41:2c:6e:f5:4d:ba:ff:7f:5d:04:7f:
                    a7:fd:5e:bb:1a:6b:73:65:ec:51:04:39:41:01:49:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:96:67:E8:0B:3F:1C:05:2F:23:00:3F:91:57:C7:DE:B4:AD:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2d3f81-8d05-46de-b8ec-79d67e177080/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2d3f81-8d05-46de-b8ec-79d67e177080/1/8s2WZ-gLPxwFLyMAP5FXx960rQc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a4:94:95:8a:53:cf:5e:01:82:2b:0e:81:7e:9e:bf:42:5e:
         73:55:8c:98:be:f8:99:21:d2:be:36:68:61:65:24:77:4c:28:
         d8:78:be:0e:75:e4:a4:d6:b5:96:ca:85:e0:0e:8b:56:b0:cb:
         cc:b5:1e:37:0c:29:db:c0:c7:69:d0:f5:e4:e4:6c:a2:ac:ea:
         07:32:66:36:c7:a7:64:65:76:89:d4:91:d7:4e:fc:f9:41:78:
         85:56:7e:78:64:f0:41:92:f6:13:c2:09:95:e5:23:44:68:c7:
         eb:30:ea:35:cb:2b:d5:59:d5:4b:2b:99:2e:53:d4:6e:22:ea:
         68:b3:e6:6d:a6:c3:6e:3f:3b:fa:99:8c:fd:c6:c3:c6:8a:14:
         2d:fc:e2:14:f4:96:ce:42:af:ea:3a:8f:fe:9d:fe:83:3e:6a:
         5e:c5:04:09:7a:e8:9a:48:52:2b:a3:a9:9e:75:ba:05:f1:db:
         a7:f3:28:6f:23:59:1e:48:72:59:f8:80:3e:2d:67:7c:10:c0:
         30:e4:c8:bb:c8:f8:eb:ac:61:60:b1:60:79:30:6a:6a:67:e1:
         4e:dc:38:2b:f4:05:e1:c8:f8:02:4e:0b:c4:7e:94:c4:53:f4:
         6a:e5:cc:14:e4:a0:ed:aa:18:3c:aa:ca:36:12:e0:45:6e:6a:
         1f:32:ef:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----