Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9je7om_RV4piKAGLJEyJu2Pbynk.cer
File:                     9je7om_RV4piKAGLJEyJu2Pbynk.cer (raw, json)
Hash identifier:          iuJS6uDKvLJ5tzO8EicElEnObPP4CT58KVs+534A2Ig=
Subject key identifier:   F6:37:BB:A2:6F:D1:57:8A:62:28:01:8B:24:4C:89:BB:63:DB:CA:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       772E3373E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/47a964-d64a-4df6-ae49-4d35e733b8ed/1/9je7om_RV4piKAGLJEyJu2Pbynk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/47a964-d64a-4df6-ae49-4d35e733b8ed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:44:56 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.151.12.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511876232165 (0x772e3373e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:44:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f637bba26fd1578a6228018b244c89bb63dbca79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:02:c5:49:32:1e:05:9d:0d:bb:f6:e2:0e:
                    76:e9:f2:14:3d:a4:8f:97:e8:b9:92:b9:19:28:f3:
                    dd:69:cc:c1:00:46:98:6d:83:d1:bf:0a:ff:f6:42:
                    30:c4:bf:27:db:ad:58:de:d0:86:de:ea:93:7c:38:
                    06:32:53:48:1f:1c:61:7b:88:82:2b:a3:cc:6e:3f:
                    2c:30:45:22:b8:de:34:80:f4:17:de:73:c5:cf:35:
                    f8:6e:11:ec:20:89:b8:5e:e6:c5:b4:e5:a4:5a:ca:
                    4c:7b:53:66:9b:47:1d:a6:ac:57:bd:93:5e:cd:13:
                    01:5b:7d:0a:a8:52:4e:a3:fe:9c:fc:9c:f9:d6:f4:
                    b6:d6:2c:f1:0f:55:e3:05:c3:6b:87:82:00:7a:f5:
                    03:09:fb:9b:f0:37:c3:06:ce:30:6e:c0:be:9b:de:
                    0c:e3:60:23:44:f8:8d:fe:c0:38:c2:f6:99:33:46:
                    42:4e:98:1c:57:5e:04:6b:12:b3:3c:3a:27:e1:41:
                    b6:9a:29:b0:5f:e0:6a:0c:28:a0:9b:4f:9a:c8:73:
                    64:3e:5c:38:17:3f:a4:17:c9:e3:70:77:2a:bd:7c:
                    c7:93:7d:5a:a0:28:d5:f1:8d:98:b4:a8:2d:cf:87:
                    f4:93:32:82:a5:72:a3:4a:96:a6:98:d6:02:4c:85:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:37:BB:A2:6F:D1:57:8A:62:28:01:8B:24:4C:89:BB:63:DB:CA:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/47a964-d64a-4df6-ae49-4d35e733b8ed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/47a964-d64a-4df6-ae49-4d35e733b8ed/1/9je7om_RV4piKAGLJEyJu2Pbynk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:84:96:2f:04:33:1d:f3:3e:c0:87:d1:ae:0b:fd:de:b7:
         aa:14:d9:a7:09:fa:73:da:b9:61:f7:7d:2f:5e:5f:70:37:c2:
         56:17:d7:bf:83:97:be:58:04:85:e3:4b:ea:61:1f:36:38:43:
         ad:98:f5:be:ed:df:eb:c1:f8:77:49:31:02:a2:0f:0c:58:b4:
         18:63:52:9c:cb:26:6f:21:b4:7d:b0:48:f6:85:54:97:ce:9f:
         ff:bb:a2:43:1c:b1:3e:6d:df:6f:41:88:98:d7:5d:2f:79:b8:
         b4:45:9b:75:23:e7:70:3d:37:0a:ee:80:de:81:ff:07:87:bc:
         2f:89:61:9b:7e:c3:6c:a4:9b:4a:0b:bd:56:98:92:29:f6:e8:
         f7:ba:bd:67:7d:31:24:37:72:3e:af:ab:97:e2:f6:ee:b2:0a:
         51:bd:cf:6c:08:89:b9:fa:3e:b9:ec:b5:20:7b:ff:f1:7f:71:
         32:7c:0b:6a:82:5b:06:a7:2f:94:87:0a:7d:91:6f:21:7f:6a:
         99:c9:06:da:6c:a6:57:41:a0:32:f3:c2:36:2d:03:5c:b3:c6:
         77:f6:23:31:d5:31:0d:68:51:cf:19:e2:b1:8f:96:85:36:86:
         d1:ad:6a:04:25:9a:2b:fc:0a:3f:09:3c:0b:e3:03:7b:f0:5c:
         64:8f:8a:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----