Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9bsYm-THPSGrlW92C6oz4JcS0vQ.cer
File:                     9bsYm-THPSGrlW92C6oz4JcS0vQ.cer (raw, json)
Hash identifier:          r3Psc74hIAEGhmTdbtwV31QHRzWiAF5jtEo+lo835po=
Subject key identifier:   F5:BB:18:9B:E4:C7:3D:21:AB:95:6F:76:0B:AA:33:E0:97:12:D2:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65615D79E23F84417F8F30A83D5CCC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/e96f84-d7e2-483a-bf12-804922255ff9/1/9bsYm-THPSGrlW92C6oz4JcS0vQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/e96f84-d7e2-483a-bf12-804922255ff9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204187
                          IP: 195.96.136.0/24
                          IP: 2a12:b800::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:61:5d:79:e2:3f:84:41:7f:8f:30:a8:3d:5c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5bb189be4c73d21ab956f760baa33e09712d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:37:ed:e6:d0:ec:15:4f:d3:40:32:ac:32:
                    0b:11:67:81:92:d3:43:0f:be:3b:ec:01:21:14:01:
                    12:3d:83:71:3f:2e:b5:57:96:9a:7b:be:5f:a1:40:
                    fc:9b:14:40:d4:97:56:56:c9:b0:74:6a:17:4b:24:
                    e6:72:d6:f7:a1:e9:0e:0e:9c:f7:7f:f3:a0:2e:b9:
                    86:7b:9d:ef:8d:ff:b6:16:5c:7b:d7:22:48:a6:26:
                    74:7a:c3:98:c7:0f:90:74:33:6e:e6:03:4c:83:e3:
                    78:83:9c:3a:d7:e5:7f:7c:25:32:39:2f:ad:85:53:
                    41:5a:3c:62:8f:c2:55:ab:ec:95:14:5a:ad:13:ed:
                    77:ed:e3:6c:76:5e:85:d8:07:98:bc:bf:3e:19:3d:
                    3d:62:d9:25:ba:6b:31:1c:68:fb:fc:0e:8a:dc:40:
                    03:dc:88:82:71:1c:4d:0a:c7:cd:80:89:50:93:f7:
                    fc:4a:e5:eb:03:3e:72:47:67:47:74:38:3d:f4:92:
                    71:a6:53:8b:4d:67:4e:ff:43:ed:7b:40:b2:c6:a4:
                    7e:f3:7b:31:90:a2:e9:57:09:3c:b2:72:a1:63:6c:
                    50:96:2d:bf:92:34:7e:7c:f9:b0:f1:40:10:eb:48:
                    db:e7:d5:39:53:c2:2f:9f:e2:c9:2b:e6:91:2f:65:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:18:9B:E4:C7:3D:21:AB:95:6F:76:0B:AA:33:E0:97:12:D2:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e96f84-d7e2-483a-bf12-804922255ff9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e96f84-d7e2-483a-bf12-804922255ff9/1/9bsYm-THPSGrlW92C6oz4JcS0vQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.136.0/24
                IPv6:
                  2a12:b800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204187

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:81:9a:01:55:33:69:6f:28:82:11:02:d9:d3:8a:8f:7d:
         73:30:70:26:9c:be:ed:7d:29:d3:22:47:f8:e0:d9:87:43:74:
         bb:2b:a9:d9:82:03:4d:74:08:22:dc:9c:ee:57:e7:fc:d5:be:
         11:d7:8d:87:ed:18:4c:80:b6:c4:a0:d1:04:c4:5c:fa:a1:fd:
         59:a4:04:4a:46:5a:ef:3c:93:7c:57:da:19:27:01:ad:88:ec:
         12:4d:89:20:19:3d:4e:ce:56:fe:50:0d:89:47:de:c9:12:11:
         c5:88:54:bf:84:f4:3c:7b:69:de:24:3c:2b:0b:e4:02:0c:55:
         bf:f0:7f:7d:21:1f:18:f9:4d:e1:0e:65:01:0a:18:d3:da:24:
         ed:25:14:59:fa:2e:da:75:fe:50:2d:b0:e2:f2:4c:ec:c8:1f:
         36:95:5b:c5:5b:15:3e:5a:97:94:29:e6:34:e4:93:3a:cd:41:
         e7:8b:d3:fe:ff:52:50:60:7b:db:74:92:ed:9a:e4:77:70:8c:
         9f:d3:aa:33:99:ba:27:bc:86:fb:4d:d7:2f:ee:dd:79:ef:02:
         9b:a7:53:ce:5f:7b:79:19:a3:d2:fc:30:c3:44:b2:95:c5:bd:
         9f:8b:35:46:fb:99:f7:d9:d3:d0:78:36:c1:11:7c:02:c6:8a:
         11:49:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----