Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ALKSHXss5MLitq4-ccgOmVd3zME.cer
File:                     ALKSHXss5MLitq4-ccgOmVd3zME.cer (raw, json)
Hash identifier:          alQZWkfG6rVIaYl4sAnz2MblpSDSf258T2CnlbS8fd0=
Subject key identifier:   00:B2:92:1D:7B:2C:E4:C2:E2:B6:AE:3E:71:C8:0E:99:57:77:CC:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5DA34DF2C0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/59dc18-09e2-43b3-86c6-441fb23ec610/1/ALKSHXss5MLitq4-ccgOmVd3zME.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/59dc18-09e2-43b3-86c6-441fb23ec610/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:05:22 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 95.214.36.0/22
                          IP: 2a0f:5ec0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402171753152 (0x5da34df2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:05:22 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=00b2921d7b2ce4c2e2b6ae3e71c80e995777ccc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:f9:fb:1f:da:79:93:47:50:7d:4e:7d:82:
                    b6:71:e4:24:ca:32:b6:48:23:e5:12:25:41:4c:1b:
                    2c:68:27:b9:db:ec:3c:db:17:e1:cd:b9:b6:bf:96:
                    f1:73:d7:4a:e7:4f:a3:8c:89:0f:99:84:fb:98:0b:
                    9b:b5:86:68:e2:25:66:97:99:37:dd:8f:a3:84:b7:
                    eb:4a:d2:5f:92:8d:10:01:b3:a7:e1:94:4b:e9:6f:
                    fe:02:4a:e2:e1:c8:16:53:8b:ee:af:2e:31:b8:a3:
                    b7:60:40:0f:68:d8:7f:14:84:ca:ff:f1:68:c0:7a:
                    bc:0c:e8:eb:9d:d1:04:04:6e:62:fe:40:af:ad:4c:
                    73:b8:85:ad:6b:51:72:6e:f2:91:1b:57:0a:66:59:
                    dd:3e:c2:04:70:28:1d:c2:38:87:e8:a1:44:f6:1f:
                    25:d8:8a:b4:91:65:63:19:c5:09:1e:60:ce:36:13:
                    6e:68:37:8a:12:db:3e:6a:4e:3a:b4:ee:e9:1d:5c:
                    37:8b:7b:a3:ce:e2:25:46:a1:02:96:ee:89:6a:18:
                    07:e6:5a:eb:fb:7a:e5:d0:82:0a:c8:39:9a:8f:bc:
                    58:f4:4d:ec:13:82:31:a6:7f:e1:2e:7f:d3:e1:bb:
                    7d:92:42:24:d4:94:c1:56:8b:74:32:4d:82:82:bb:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B2:92:1D:7B:2C:E4:C2:E2:B6:AE:3E:71:C8:0E:99:57:77:CC:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/59dc18-09e2-43b3-86c6-441fb23ec610/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/59dc18-09e2-43b3-86c6-441fb23ec610/1/ALKSHXss5MLitq4-ccgOmVd3zME.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.36.0/22
                IPv6:
                  2a0f:5ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:02:dc:7f:e0:53:61:0f:e9:19:06:1d:72:70:6b:eb:ec:ba:
         63:95:88:e4:bb:ef:62:b3:1d:43:59:fd:91:9c:b9:36:8c:93:
         8d:53:8c:f1:fd:fb:43:e0:5e:53:23:18:0d:41:d5:b3:2a:0a:
         db:22:d8:9e:cd:3e:fd:1b:a8:0b:09:ce:00:18:a6:ab:92:ba:
         47:b7:5d:46:38:54:a0:7e:63:df:89:42:2b:fc:c3:ab:bb:42:
         76:c6:44:79:d4:67:fe:e0:c6:c7:64:e0:9d:30:6d:63:6d:3b:
         d5:9f:df:0e:2d:1e:30:06:f1:1f:3f:c4:a0:e1:4b:33:f9:d3:
         ef:2e:78:ed:3c:98:be:95:53:f5:1d:a8:6a:24:e2:10:d9:22:
         ce:a6:d2:34:0e:17:cc:cd:da:c6:15:c9:5d:c9:06:2c:da:cc:
         ac:da:63:f7:a4:f5:84:e8:2a:b5:de:e1:cd:19:0f:b5:7c:c3:
         fb:84:6a:e8:6d:bd:c4:85:d4:96:69:eb:1e:0c:eb:4c:7e:49:
         90:26:3d:25:df:c3:e7:40:9a:0e:23:3c:85:5c:26:fe:79:9b:
         b0:c0:d9:85:10:f2:d4:4f:12:63:c0:1b:a4:b3:83:2a:3e:4c:
         5d:96:98:17:4c:05:98:e5:de:26:8d:a3:39:34:aa:cc:26:0a:
         14:44:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----