Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AC2299Rawzk0av13qfGi0_u311w.cer
File:                     AC2299Rawzk0av13qfGi0_u311w.cer (raw, json)
Hash identifier:          CM/wbs5+BNxrDRnkKkCQwP+oDVcsIuPamovpU8CdVlM=
Subject key identifier:   00:2D:B6:F7:D4:5A:C3:39:34:6A:FD:77:A9:F1:A2:D3:FB:B7:D7:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       830C769749
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/5a10cf-1913-4845-b836-d9dd5f41d587/1/AC2299Rawzk0av13qfGi0_u311w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/5a10cf-1913-4845-b836-d9dd5f41d587/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:59:00 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 204589
                          IP: 185.246.28.0/22
                          IP: 2a0d:7380::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562849814345 (0x830c769749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:59:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=002db6f7d45ac339346afd77a9f1a2d3fbb7d75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:18:16:37:a7:2d:aa:c1:83:a2:98:8b:0f:
                    7f:51:9f:14:6c:1a:ab:28:00:b6:e4:be:32:6b:19:
                    7e:bf:d2:7f:d1:d8:cb:85:32:53:a3:bf:c9:7a:65:
                    bc:72:96:7b:36:e4:6c:e7:fb:3f:c6:e9:ee:4d:b6:
                    bf:9c:71:f6:16:b9:f4:09:76:25:ea:f5:f6:50:44:
                    91:c1:1f:cc:99:f8:67:dc:56:81:e2:02:5f:be:4e:
                    45:d3:1b:70:90:c4:35:92:0a:63:18:1a:45:00:84:
                    b7:ae:b3:33:40:96:56:a0:d7:14:a6:45:73:05:3e:
                    90:67:65:f6:66:9d:0f:c7:2c:77:a2:00:84:65:06:
                    68:e3:ed:f0:da:29:86:e5:18:29:62:ad:8f:2e:04:
                    61:fb:5b:2c:db:71:53:d5:de:9a:ad:05:94:d3:fc:
                    da:d5:64:44:70:21:3c:e2:50:6a:6b:05:63:bb:ce:
                    37:78:42:02:98:98:dc:ba:b2:49:72:4f:09:43:ba:
                    13:e6:6c:e7:8a:2e:a0:60:9c:6c:46:26:2e:08:da:
                    a3:a2:f8:71:46:cd:26:43:e9:ce:25:9d:70:92:7d:
                    3c:dd:d7:70:3d:28:3e:d4:4b:9d:35:27:24:2a:14:
                    c7:3c:22:1d:20:52:8f:a5:a4:d0:cb:d5:d8:89:f6:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:B6:F7:D4:5A:C3:39:34:6A:FD:77:A9:F1:A2:D3:FB:B7:D7:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5a10cf-1913-4845-b836-d9dd5f41d587/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5a10cf-1913-4845-b836-d9dd5f41d587/1/AC2299Rawzk0av13qfGi0_u311w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.28.0/22
                IPv6:
                  2a0d:7380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204589

    Signature Algorithm: sha256WithRSAEncryption
         75:e0:6a:b0:0b:37:7f:ef:6e:30:46:5e:43:a9:90:a0:20:8d:
         d8:6f:f2:55:c1:1b:90:13:4a:08:a0:15:40:ff:87:f8:81:66:
         98:e3:74:5c:42:f1:96:d5:f1:a3:82:8c:3f:98:b2:26:73:09:
         b6:f8:27:a5:1b:53:11:24:ad:01:d2:40:d1:ea:3b:dd:ae:b9:
         df:98:9e:d8:15:1e:93:46:74:82:59:e9:8d:f5:f9:cd:95:16:
         56:e6:7d:12:c1:c9:60:df:94:fc:b2:fc:97:d1:16:7e:42:68:
         9d:cd:d2:ff:f1:dc:04:bc:bd:30:4e:4b:c4:94:fb:77:78:32:
         8d:e3:9a:8c:de:76:53:cd:9d:8a:41:81:1a:52:dd:90:14:dd:
         a4:50:cc:87:dd:61:c5:6a:f1:8a:5a:00:d7:8f:97:54:be:42:
         64:80:2a:75:3d:b0:f0:c3:f9:c2:69:8d:7b:96:74:63:20:36:
         d7:1c:c2:81:45:22:e8:ec:5d:ed:d7:49:ea:f3:8b:b1:f0:7b:
         25:8e:7e:4b:9d:72:d6:ac:e6:c5:bb:d5:cb:4d:90:dd:7b:c4:
         91:1a:c2:1a:8b:8b:81:97:da:e5:de:b7:71:d4:65:a2:41:ce:
         dc:5a:52:85:d2:e9:4b:a1:f3:3c:6a:d4:bd:09:c9:42:70:d9:
         88:21:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----