Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8v62cbyxRYA-vSg7-dOHj6CCSpY.cer
File:                     8v62cbyxRYA-vSg7-dOHj6CCSpY.cer (raw, json)
Hash identifier:          o5PYkSTLj1ajVj9AROph1v4kVzcLr0fRhZdeROL2zk8=
Subject key identifier:   F2:FE:B6:71:BC:B1:45:80:3E:BD:28:3B:F9:D3:87:8F:A0:82:4A:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       74E62E93AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/b90826-1fd0-4d3d-9965-4098a6484fe6/1/8v62cbyxRYA-vSg7-dOHj6CCSpY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/b90826-1fd0-4d3d-9965-4098a6484fe6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 28 Dec 2020 14:04:27 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.162.72.0 -- 185.162.74.255

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502078018479 (0x74e62e93af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 28 14:04:27 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f2feb671bcb145803ebd283bf9d3878fa0824a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:4a:db:5b:75:63:a0:36:46:a5:4d:c0:11:
                    ef:40:f3:a3:c5:a1:5f:d1:72:0b:2c:48:d4:d8:d5:
                    47:94:1c:f9:c4:de:6c:f4:4f:2c:4b:70:72:67:c6:
                    3d:02:4a:7d:41:de:95:ee:f6:d5:d9:10:53:99:20:
                    ca:c7:e4:8c:b1:ec:73:d5:e3:b0:62:18:45:4a:6f:
                    2a:da:02:3d:43:3f:33:cb:83:2d:50:67:06:ff:ea:
                    b7:65:a3:8c:e4:96:5b:09:ca:c4:3d:ff:fa:62:4c:
                    a2:b1:55:79:b4:cb:fc:52:d8:02:30:0a:09:7e:30:
                    ab:97:df:45:59:66:a7:f9:4a:4a:65:02:93:eb:6a:
                    5e:d1:95:63:e5:26:80:e9:e9:38:00:3b:b9:81:19:
                    75:d3:3a:e2:54:39:b4:ac:9c:46:e1:44:f7:da:b1:
                    c0:e7:b5:bc:ee:4c:bd:48:18:b6:47:62:10:95:06:
                    f6:95:fb:39:5a:36:a5:d7:f6:bb:95:c5:cd:42:b9:
                    fa:e9:b8:31:91:0e:47:af:a6:d3:31:e8:1f:7c:f9:
                    32:c8:eb:09:3c:f7:fb:26:aa:8b:81:ab:fa:68:36:
                    96:d9:d2:8c:5d:ca:c7:85:dd:b9:73:1b:7b:ca:a6:
                    7a:9f:b4:1e:87:f6:b3:18:9e:5e:d9:52:38:f5:6c:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:B6:71:BC:B1:45:80:3E:BD:28:3B:F9:D3:87:8F:A0:82:4A:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b90826-1fd0-4d3d-9965-4098a6484fe6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b90826-1fd0-4d3d-9965-4098a6484fe6/1/8v62cbyxRYA-vSg7-dOHj6CCSpY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.72.0-185.162.74.255

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:54:e4:3c:8d:da:9d:17:41:61:c1:80:da:19:54:d2:71:
         eb:d9:9a:25:90:1b:30:74:be:b2:19:be:29:20:52:ad:09:8a:
         ed:c3:fa:3d:c7:4f:46:00:fe:d5:e2:6d:cc:ee:89:3f:b7:57:
         fb:90:33:09:22:13:0d:e2:12:37:eb:24:39:f5:36:1e:c7:fe:
         ed:2c:ff:fb:7d:80:9c:d5:2f:9f:59:18:61:6a:71:b4:c7:3a:
         9a:e9:f6:c5:c3:c9:6f:7d:71:97:d9:67:43:b0:30:38:3c:74:
         34:5c:35:04:95:ee:c1:6f:1b:7d:29:e6:a8:c6:4f:48:59:4f:
         34:a3:5e:96:99:7c:0a:69:5a:cd:b2:25:f4:9b:27:7f:4a:a6:
         cd:43:8b:bd:dc:80:22:99:04:0c:68:61:0b:1b:df:66:8e:15:
         16:0f:48:3e:10:a8:51:54:85:04:89:1e:26:4c:07:db:27:5a:
         43:8b:af:b2:43:f0:95:02:57:65:43:d7:52:ca:ec:92:f6:71:
         46:fb:f9:0c:9a:a7:7c:15:e9:1d:ec:bc:52:d2:b0:3a:d1:f3:
         ef:76:be:c2:b9:44:47:db:ce:31:a9:e4:8b:77:05:db:24:07:
         b2:86:9f:92:22:fa:1e:28:7c:1f:ee:25:6d:e6:4a:69:67:84:
         a1:39:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----