Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9PbWHthYejwpXdzdYrMjDvJNUxk.cer
File:                     9PbWHthYejwpXdzdYrMjDvJNUxk.cer (raw, json)
Hash identifier:          UB+U+Hjkz1d4Clwx0zmd9iRi/9QzWNW1dyLsgMZn9w4=
Subject key identifier:   F4:F6:D6:1E:D8:58:7A:3C:29:5D:DC:DD:62:B3:23:0E:F2:4D:53:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5FA8CC6530
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/043eeb-1fb7-4fd2-ad5d-88b556e4aea8/1/9PbWHthYejwpXdzdYrMjDvJNUxk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/043eeb-1fb7-4fd2-ad5d-88b556e4aea8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:15:18 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.109.32.0/22
                          IP: 2a06:4e40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410853860656 (0x5fa8cc6530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:15:18 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f4f6d61ed8587a3c295ddcdd62b3230ef24d5319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:d2:ce:b3:03:80:48:fc:fd:8b:56:58:f5:
                    5d:10:64:b1:70:a6:b4:d9:79:6d:12:65:b0:02:ba:
                    07:3d:0f:f3:3d:d8:3c:b0:47:bf:6f:66:51:9a:67:
                    24:65:d8:b6:2c:d5:f7:5f:3e:eb:ae:e0:b7:b1:b8:
                    8b:e5:02:1f:6e:0c:bf:fb:07:46:99:69:79:72:2b:
                    91:e0:54:12:e8:85:45:10:11:e4:c2:a1:7f:46:6c:
                    cf:1d:43:f3:e2:5e:db:50:6b:e6:88:98:d8:7f:df:
                    17:ae:45:16:0d:63:ca:75:54:06:b4:c6:eb:7c:4a:
                    a1:17:b9:fc:d0:d8:d2:3a:ba:72:ef:7f:29:bd:9d:
                    3a:48:9c:b2:06:57:02:d7:95:50:0a:5c:b4:ee:dd:
                    da:7a:f5:fe:9b:d0:89:f8:1c:13:55:cc:5b:36:5c:
                    df:b6:dd:fd:b2:51:a9:48:a9:35:2e:ad:1c:30:d1:
                    ac:ab:07:4f:91:2d:f1:72:2f:78:0f:fc:2f:64:7e:
                    a4:8c:2f:46:2b:fb:ce:2d:cf:f4:b5:f3:20:a6:42:
                    73:56:f7:4a:33:9f:56:c0:af:30:44:78:2c:a6:ce:
                    65:24:2f:b7:1d:dc:89:4d:11:78:3e:98:41:ad:2f:
                    bd:1f:34:23:69:f9:65:8b:43:f5:2f:45:01:c3:e2:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:D6:1E:D8:58:7A:3C:29:5D:DC:DD:62:B3:23:0E:F2:4D:53:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/043eeb-1fb7-4fd2-ad5d-88b556e4aea8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/043eeb-1fb7-4fd2-ad5d-88b556e4aea8/1/9PbWHthYejwpXdzdYrMjDvJNUxk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.109.32.0/22
                IPv6:
                  2a06:4e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:e4:9a:bf:6d:29:76:73:ec:ed:12:a5:db:d0:52:b1:91:
         96:22:7e:78:be:ae:8d:e4:d1:b3:51:f7:09:60:48:c5:16:e3:
         84:88:c8:6e:2f:d7:28:22:a1:ca:a7:c0:32:ea:d0:d0:7f:a7:
         af:ec:16:dc:4c:a4:ff:e5:ec:1b:7a:ce:f4:9a:8e:81:cc:21:
         e0:0b:a7:e2:89:d0:2c:f1:98:d2:41:73:ad:90:eb:76:d0:18:
         cf:5f:52:c3:1c:10:48:92:c5:63:ee:08:8c:99:15:fd:28:c0:
         d8:6e:a8:d0:f8:3e:12:9d:03:cc:5c:5c:45:4d:e5:27:5b:21:
         78:f0:45:0d:87:cb:38:39:c7:a8:b8:b3:3d:b6:21:c0:33:3e:
         e3:ce:ae:df:0b:fb:4e:89:0f:df:09:09:fe:e9:e7:b2:77:58:
         0a:6e:38:aa:c6:08:73:4a:c8:ee:ac:88:31:33:a2:0b:6e:38:
         80:51:07:8b:85:d0:be:95:21:30:cc:87:a0:bf:c6:ef:9f:45:
         8b:e4:ef:60:e4:7c:2a:65:c7:0c:ce:88:a7:ff:85:e2:d6:1c:
         e3:77:56:27:df:4e:8f:89:dd:a3:d0:c7:ac:d8:73:c5:4a:91:
         8a:41:a6:00:6e:f2:c7:14:b5:e6:32:84:bd:a6:a2:db:39:3e:
         42:5b:30:1d
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFX6jMZTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTE1MThaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY0ZjZkNjFlZDg1
ODdhM2MyOTVkZGNkZDYyYjMyMzBlZjI0ZDUzMTkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHw9LOswOASPz9i1ZY9V0QZLFwprTZeW0SZbACugc9D/M9
2DywR79vZlGaZyRl2LYs1fdfPuuu4LexuIvlAh9uDL/7B0aZaXlyK5HgVBLohUUQ
EeTCoX9GbM8dQ/PiXttQa+aImNh/3xeuRRYNY8p1VAa0xut8SqEXufzQ2NI6unLv
fym9nTpInLIGVwLXlVAKXLTu3dp69f6b0In4HBNVzFs2XN+23f2yUalIqTUurRww
0ayrB0+RLfFyL3gP/C9kfqSML0Yr+84tz/S18yCmQnNW90ozn1bArzBEeCymzmUk
L7cd3IlNEXg+mEGtL70fNCNp+WWLQ/UvRQHD4u1rAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU9PbWHthYejwpXdzdYrMjDvJNUxkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMDQzZWViLTFmYjctNGZkMi1h
ZDVkLTg4YjU1NmU0YWVhOC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wNDNlZWItMWZiNy00ZmQyLWFk
NWQtODhiNTU2ZTRhZWE4LzEvOVBiV0h0aFllandwWGR6ZFlyTWpEdkpOVXhrLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAK5bSAwDQQCAAIwBwMFAyoGTkAwDQYJKoZIhvcNAQELBQADggEBAD7z
5Jq/bSl2c+ztEqXb0FKxkZYifni+ro3k0bNR9wlgSMUW44SIyG4v1ygiocqnwDLq
0NB/p6/sFtxMpP/l7Bt6zvSajoHMIeALp+KJ0CzxmNJBc62Q63bQGM9fUsMcEEiS
xWPuCIyZFf0owNhuqND4PhKdA8xcXEVN5SdbIXjwRQ2Hyzg5x6i4sz22IcAzPuPO
rt8L+06JD98JCf7p57J3WApuOKrGCHNKyO6siDEzogtuOIBRB4uF0L6VITDMh6C/
xu+fRYvk72DkfCplxwzOiKf/heLWHON3ViffTo+J3aPQx6zYc8VKkYpBpgBu8scU
teYyhL2mots5PkJbMB0=
-----END CERTIFICATE-----