Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer
File:                     IqtpBvE3XBkwz56mxPPJADn17Uw.cer (raw, json)
Hash identifier:          gBLKnmEEe4D9+oxLGgYB1fG2EZtQKKu6Vp+R3kHhiSY=
Subject key identifier:   22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182CC5A64F5EFF242A1027D24997B3ACE99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.qs.nu/repo/cynthia/2/22AB6906F1375C1930CF9EA6C4F3C90039F5ED4C.mft
caRepository:             rsync://rpki.qs.nu/repo/cynthia/2
Notify URL:               https://rpki.qs.nu/rrdp/notification.xml
Certificate not before:   Tue 23 Aug 2022 20:17:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 57782
                          AS: 202314
                          AS: 210089
                          IP: 2001:67c:1190::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cc:5a:64:f5:ef:f2:42:a1:02:7d:24:99:7b:3a:ce:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 23 20:17:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:60:45:09:0a:63:b8:f1:52:48:93:27:14:
                    b3:ba:62:3c:c0:b6:18:0e:9d:31:23:ea:01:d0:c1:
                    8e:03:d7:58:cf:71:79:09:1a:2a:25:57:d1:01:c3:
                    83:22:dd:82:b7:e6:5e:49:38:d6:eb:a8:12:c9:20:
                    9a:83:ae:3b:e0:1d:f4:94:42:8e:07:ee:34:78:7b:
                    4e:86:24:1a:00:1a:5d:b0:23:bd:d6:b6:6e:4f:ee:
                    fe:56:fb:fa:ff:82:cc:2e:7d:d7:63:e2:d2:01:bd:
                    01:cc:10:03:95:0f:70:b9:95:e4:ff:53:53:45:aa:
                    d1:2e:87:76:f8:41:4c:6f:c3:f2:ec:a0:93:bb:63:
                    83:61:22:1e:f1:ff:1d:30:c6:e3:3d:01:5e:f0:c6:
                    ee:98:6a:38:0a:76:e6:08:1c:e8:53:c3:1e:56:d3:
                    2d:7b:5c:a3:cc:78:dd:4d:23:81:0c:6e:cc:e4:52:
                    de:05:66:c7:21:77:89:85:93:13:12:4c:d6:3f:78:
                    7a:f0:98:0d:db:ce:34:ee:7a:54:e6:23:0f:89:fa:
                    61:11:90:df:88:af:cc:18:f0:1e:d6:59:ae:fa:2f:
                    50:ab:0f:2b:86:e1:f3:8d:c5:30:14:e1:9a:7f:8e:
                    8a:63:37:cf:f1:35:bd:48:d5:b2:a9:5e:f6:39:e1:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.qs.nu/repo/cynthia/2
                RPKI Manifest - URI:rsync://rpki.qs.nu/repo/cynthia/2/22AB6906F1375C1930CF9EA6C4F3C90039F5ED4C.mft
                RPKI Notify - URI:https://rpki.qs.nu/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57782
                  202314
                  210089

    Signature Algorithm: sha256WithRSAEncryption
         a6:82:b6:17:94:9a:bf:38:ba:88:5b:77:0c:07:e1:70:b0:c7:
         5f:44:86:73:0d:0e:95:7c:65:6d:d7:aa:13:75:60:cf:9e:0f:
         7f:e3:e6:36:6f:6c:e8:60:43:11:3a:10:14:f1:b4:63:7f:c9:
         0f:7f:16:99:20:36:2e:b1:29:06:03:d1:df:bf:fb:c5:55:47:
         67:39:7c:50:ab:4d:83:66:93:7b:ac:4a:5a:41:7d:e0:97:b7:
         d6:b8:f6:ab:35:b8:16:98:3a:5e:61:68:88:fa:0a:79:e8:1a:
         62:3b:1a:c3:fa:98:7b:36:e4:81:5b:bd:fe:41:8f:35:47:e3:
         30:c9:a0:ed:dc:33:01:3d:d7:c5:62:d4:0f:00:6d:7a:dc:f4:
         dd:8c:32:4b:84:09:de:3b:16:f2:a0:7c:5e:2a:c7:9a:1c:1e:
         f3:df:a0:2a:b2:c2:91:c2:a6:be:74:d3:34:f1:e0:73:81:11:
         38:f7:bc:c3:7d:e2:0e:f3:8b:14:81:2a:83:eb:d6:6a:05:8e:
         a3:74:1c:e6:29:df:97:e3:12:91:e1:1c:02:95:b0:93:3f:4d:
         3c:68:d9:46:f7:38:a3:85:10:1a:ed:e8:86:3a:fd:40:e6:9b:
         b7:f8:ed:8a:7c:cf:98:3c:f7:70:23:8c:d9:b2:6c:4e:fc:62:
         a0:5b:64:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----