Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ALiKUAsvSkrGzp6v6FUzfkBHaZI.cer
File:                     ALiKUAsvSkrGzp6v6FUzfkBHaZI.cer (raw, json)
Hash identifier:          93Yerd/dz0538qMOmKPsFn5zumpkuBL71a6AbMuFJSI=
Subject key identifier:   00:B8:8A:50:0B:2F:4A:4A:C6:CE:9E:AF:E8:55:33:7E:40:47:69:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       780E7B6759
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/b182df-0e20-49a3-88ad-d79a2cd64461/1/ALiKUAsvSkrGzp6v6FUzfkBHaZI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/b182df-0e20-49a3-88ad-d79a2cd64461/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:05:28 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 20616
                          AS: 25116
                          IP: 91.208.142.0/24
                          IP: 195.246.242.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515639043929 (0x780e7b6759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:05:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=00b88a500b2f4a4ac6ce9eafe855337e40476992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:94:14:30:d5:c8:09:89:8b:91:9e:95:3e:
                    9d:d6:44:7a:e8:a6:bb:01:1e:2c:67:c2:3d:f1:a8:
                    7f:10:fa:71:87:88:73:eb:46:79:e1:ca:fa:a6:97:
                    dc:e4:7e:46:86:5b:6c:e4:41:29:9b:95:24:a6:80:
                    6c:3e:34:ac:a5:b7:3e:69:d8:58:60:fa:f8:fb:8a:
                    c4:be:7c:e2:0c:3d:07:ea:7a:d7:62:9a:a4:59:e7:
                    2b:6a:58:09:be:c3:19:70:c8:41:ee:1b:57:df:cd:
                    60:bb:75:e4:20:9f:01:8c:ea:f1:89:62:d5:88:a0:
                    c1:d8:56:0c:05:0e:c6:36:89:bb:4a:08:7c:08:28:
                    41:47:f3:f4:c0:3a:e9:44:4e:25:1b:03:17:b7:5e:
                    a0:56:e5:aa:0d:5b:80:7d:5f:87:5a:42:2f:95:5f:
                    9b:07:34:23:a5:9f:42:08:2a:9a:b3:1f:52:ff:17:
                    af:52:73:80:3b:6d:37:56:1c:1b:a1:81:81:01:76:
                    a8:d7:9f:c9:8c:3f:d9:86:90:f7:01:14:7d:6c:41:
                    c9:55:8f:a7:a8:0c:6d:64:dd:95:bb:0a:a8:1d:c4:
                    17:fd:b4:1d:21:98:d4:ac:90:69:2e:55:28:64:1f:
                    d7:47:2e:27:23:dd:44:3a:bb:d3:5f:26:5c:bc:77:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:8A:50:0B:2F:4A:4A:C6:CE:9E:AF:E8:55:33:7E:40:47:69:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b182df-0e20-49a3-88ad-d79a2cd64461/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b182df-0e20-49a3-88ad-d79a2cd64461/1/ALiKUAsvSkrGzp6v6FUzfkBHaZI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.142.0/24
                  195.246.242.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20616
                  25116

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:a4:f0:83:46:1a:ca:2b:f9:bb:0f:0f:4a:70:96:c7:90:
         b1:53:2b:00:4b:7a:10:f4:86:d9:9c:6f:f5:0f:6d:61:68:78:
         78:98:c4:3d:5d:fa:cb:c8:f5:2f:2a:58:26:14:60:e1:fa:ba:
         84:a1:cf:17:04:f4:57:b8:fa:05:1b:56:1d:48:2a:9a:e3:a4:
         2d:ea:77:27:ae:ac:88:a7:89:74:16:9e:06:cd:f4:0e:af:4d:
         02:c0:b4:af:4d:d9:63:21:2e:76:9c:3a:7d:80:af:a5:b5:78:
         0c:ac:ef:c7:4a:ce:3b:04:12:be:d2:25:00:f6:ed:e8:40:42:
         41:86:41:ed:ff:72:ed:c2:67:4f:a1:b7:b6:ea:04:a8:fb:f8:
         6a:8b:70:7b:88:fc:93:74:5c:8a:5c:13:79:5a:01:13:dc:be:
         ea:a4:88:64:eb:33:2b:cb:e1:d4:ad:90:26:ab:d8:bd:9d:28:
         c7:f3:1a:a6:a4:fd:90:1f:fd:62:63:96:72:33:5a:71:17:db:
         e2:e5:3d:bd:53:1f:ad:2a:59:19:44:9e:72:eb:f3:40:75:f7:
         fe:6e:54:c2:aa:0d:63:74:b9:f7:41:8c:a2:ba:a6:0d:2b:6e:
         5b:be:8f:d5:63:d2:05:db:30:ba:70:da:50:17:e2:df:49:48:
         0a:75:c0:d4
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIFeA57Z1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTA1MjhaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDAwYjg4YTUwMGIy
ZjRhNGFjNmNlOWVhZmU4NTUzMzdlNDA0NzY5OTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6KpQUMNXICYmLkZ6VPp3WRHroprsBHixnwj3xqH8Q+nGH
iHPrRnnhyvqml9zkfkaGW2zkQSmblSSmgGw+NKyltz5p2Fhg+vj7isS+fOIMPQfq
etdimqRZ5ytqWAm+wxlwyEHuG1ffzWC7deQgnwGM6vGJYtWIoMHYVgwFDsY2ibtK
CHwIKEFH8/TAOulETiUbAxe3XqBW5aoNW4B9X4daQi+VX5sHNCOln0IIKpqzH1L/
F69Sc4A7bTdWHBuhgYEBdqjXn8mMP9mGkPcBFH1sQclVj6eoDG1k3ZW7CqgdxBf9
tB0hmNSskGkuVShkH9dHLicj3UQ6u9NfJly8dxsZAgMBAAGjggKpMIICpTAdBgNV
HQ4EFgQUALiKUAsvSkrGzp6v6FUzfkBHaZIwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvYjE4MmRmLTBlMjAtNDlhMy04
OGFkLWQ3OWEyY2Q2NDQ2MS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iMTgyZGYtMGUyMC00OWEzLTg4
YWQtZDc5YTJjZDY0NDYxLzEvQUxpS1VBc3ZTa3JHenA2djZGVXpma0JIYVpJLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBABb0I4DBAHD9vIwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICUIgCAmIc
MA0GCSqGSIb3DQEBCwUAA4IBAQA/0KTwg0Yayiv5uw8PSnCWx5CxUysAS3oQ9IbZ
nG/1D21haHh4mMQ9XfrLyPUvKlgmFGDh+rqEoc8XBPRXuPoFG1YdSCqa46Qt6ncn
rqyIp4l0Fp4GzfQOr00CwLSvTdljIS52nDp9gK+ltXgMrO/HSs47BBK+0iUA9u3o
QEJBhkHt/3LtwmdPobe26gSo+/hqi3B7iPyTdFyKXBN5WgET3L7qpIhk6zMry+HU
rZAmq9i9nSjH8xqmpP2QH/1iY5ZyM1pxF9vi5T29Ux+tKlkZRJ5y6/NAdff+blTC
qg1jdLn3QYyiuqYNK25bvo/VY9IF2zC6cNpQF+LfSUgKdcDU
-----END CERTIFICATE-----