Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ah-YeUI--xB8d5E29VPkpvJFoNc.cer
File:                     Ah-YeUI--xB8d5E29VPkpvJFoNc.cer (raw, json)
Hash identifier:          0C7V3jqSLchsEjLykQAtnSLEiNaytVxLWHYMoRoanbY=
Subject key identifier:   02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183AC061977AF812AC95677C7215F0C9359
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 06 Oct 2022 06:40:24 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 49291
                          IP: 188.112.192.0/18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ac:06:19:77:af:81:2a:c9:56:77:c7:21:5f:0c:93:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  6 06:40:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=021f9879423efb107c779136f553e4a6f245a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:d2:ee:77:a9:06:80:4d:d3:78:1d:26:0f:
                    d5:73:98:bc:24:17:2b:c8:8b:c3:cb:96:b1:6f:02:
                    f0:e2:29:65:31:d3:9c:bc:46:a5:35:f4:33:61:b3:
                    34:2c:ba:1c:e1:54:3d:dd:19:66:ca:84:cf:33:2c:
                    a4:7a:89:95:5c:0b:fb:af:ef:a5:e7:f3:7a:35:a7:
                    ca:29:7b:1f:f1:b2:91:85:87:b0:d2:8e:af:89:d5:
                    42:dc:2a:b6:37:93:a1:a0:b5:55:02:ef:a0:91:b3:
                    1b:94:46:57:d3:86:7c:4f:cd:1b:e4:03:12:d0:f8:
                    09:06:54:57:be:4e:11:3a:8f:16:11:c3:58:6a:5f:
                    b7:6d:9a:86:d4:65:33:15:6b:ae:3b:25:50:ec:f5:
                    b2:61:f2:ea:ee:4a:08:d7:45:63:e0:fa:0c:8f:bd:
                    49:20:f2:3d:e6:56:e8:d0:bc:78:f1:fb:d0:01:5b:
                    d9:20:a2:0c:f3:77:58:44:35:eb:a4:c4:ed:df:d5:
                    6c:09:e9:32:91:70:e3:4f:5f:2f:d4:58:28:fe:74:
                    10:b0:e0:93:dd:ac:a7:4a:2a:88:8b:27:f0:58:9e:
                    38:aa:f6:c9:ad:53:67:5c:46:91:97:45:e1:8c:71:
                    57:4a:fb:24:4c:11:46:a9:93:7b:ba:d2:5c:54:b1:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1F:98:79:42:3E:FB:10:7C:77:91:36:F5:53:E4:A6:F2:45:A0:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae0293-ca92-499f-a9a9-b963722c5c30/1/Ah-YeUI--xB8d5E29VPkpvJFoNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.112.192.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49291

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:fc:b1:d5:7f:ac:0f:a2:e1:c6:67:7c:44:45:d4:5c:fb:
         fd:f6:ee:9c:e4:76:e8:df:08:8c:0c:81:5c:99:86:3a:6c:f1:
         8d:48:7d:55:5c:fc:21:79:dd:90:c7:3d:e3:1b:f0:60:0f:7e:
         1d:42:4b:c2:3a:cb:05:28:5c:58:77:8a:c2:fc:2f:d8:31:2b:
         3c:f9:89:26:7f:68:24:5d:88:04:fe:da:c9:38:ff:f9:f6:9a:
         da:5a:f0:26:3a:d5:21:ff:fa:f9:ac:21:4a:c9:91:e5:50:5f:
         bb:b5:82:7d:c8:b6:98:32:55:d9:e1:ff:7a:f9:7d:68:ec:df:
         47:15:06:0b:4b:e5:44:76:dc:1e:80:5d:86:bd:d6:e9:a0:e8:
         90:5a:80:f7:a3:32:ea:78:31:96:39:29:23:54:77:56:44:ff:
         c7:e4:7a:e7:f9:ed:f1:5b:e1:5c:42:83:6b:1e:c0:0f:c8:2e:
         54:41:f8:c2:1c:c7:50:8d:fd:41:bc:90:e6:f7:b8:05:a7:c5:
         37:60:4f:ff:18:74:95:4b:16:61:26:79:41:06:10:cc:4a:8f:
         b5:d4:33:8e:44:fb:d3:0b:cf:54:65:52:fd:87:a2:ab:a4:e1:
         de:30:36:44:af:fd:12:b2:b0:9b:47:e8:1c:95:5d:ba:11:ca:
         60:ba:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----