Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
File:                     MSTeLWt4Cz27X79bkm3LjS8MwQY.cer (raw, json)
Hash identifier:          9I6gjcJ/02HaFq876scdpJEYO7Ntp2VknE48mWk7VgE=
Subject key identifier:   31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A4A0E9140D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:54:35 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 141.98.4.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707074266125 (0xa4a0e9140d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:38:89:d2:70:ca:c6:27:68:66:1c:b0:c7:
                    0b:c4:a4:32:36:af:4c:8a:56:d0:7e:03:23:c0:8b:
                    fa:78:3e:75:55:c5:ba:5e:87:48:0b:87:8e:74:c0:
                    70:42:7c:8d:b3:63:41:33:ff:68:85:ac:6d:72:c2:
                    56:5a:af:7d:6e:c4:0e:ce:cb:9d:37:ea:d5:51:b4:
                    ef:6f:4f:3a:99:0c:c3:40:6a:21:40:85:d0:ec:18:
                    8d:5b:34:5e:1a:8e:e4:0d:a8:dc:a1:be:c5:03:f1:
                    17:86:fe:28:31:93:26:04:3f:46:3a:e5:0c:e9:fc:
                    30:c1:56:65:aa:ff:25:78:9f:92:11:3a:65:3e:13:
                    fc:5f:0c:75:ce:7f:2b:88:06:df:ce:a9:6a:5a:53:
                    9e:2b:0c:06:fa:eb:e7:20:8b:a7:6f:fc:dc:74:59:
                    51:14:36:56:d5:12:1c:25:27:d0:5e:5d:04:ca:6f:
                    75:ea:44:3b:6c:bb:5f:b9:4d:a9:b8:95:df:dd:b7:
                    05:0a:1f:f8:3f:b3:56:f1:4d:8e:8a:1e:13:33:a4:
                    b4:0a:ec:bf:12:f2:80:ad:39:e1:c2:a4:6a:2d:cb:
                    80:d6:66:df:ff:f3:ca:06:40:32:8c:e2:78:07:4a:
                    f1:72:bb:2d:84:72:ec:ae:e6:78:33:f0:25:12:f3:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:88:81:9e:2c:a6:84:9d:65:59:63:da:e5:ab:e6:c1:83:
         88:4d:2f:c9:44:1e:71:bb:b4:36:e5:27:42:05:d4:10:16:29:
         3b:15:69:4d:96:65:e8:7b:5b:1e:da:8b:43:f2:9b:75:29:4a:
         45:c6:d0:48:23:55:8c:1f:cd:01:9d:03:e0:16:be:bf:a5:ec:
         d5:20:12:b1:d4:9f:1e:1b:75:2f:30:51:0d:7a:29:3b:b6:0e:
         65:a1:ef:dd:53:e6:8c:48:e8:29:c4:15:46:d9:b8:62:f7:55:
         40:5d:39:df:90:2e:b3:6d:14:fc:65:cc:94:02:fb:ff:4d:02:
         ae:0c:a1:c6:ec:dc:17:42:1d:12:c2:ae:09:a2:ef:3d:f2:ce:
         f5:bd:5f:86:3c:9c:80:93:34:08:f9:c9:e9:57:a6:b3:c5:c1:
         e5:56:7f:74:9c:a1:54:a8:eb:01:21:98:3c:80:78:a8:de:de:
         4c:95:13:05:53:3c:a8:73:59:5d:2a:d5:37:da:18:d3:f7:d4:
         fd:88:b5:7a:ff:d3:be:01:67:3b:58:33:b1:f7:98:36:67:ad:
         ed:20:6a:79:b8:9d:18:9c:ab:cf:4e:ba:eb:b5:e0:10:58:c1:
         15:a9:7d:28:2e:6f:d5:7c:65:30:f3:36:79:ad:7a:19:19:d8:
         84:07:50:ee
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKSg6RQNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTA1NDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMTI0ZGUyZDZi
NzgwYjNkYmI1ZmJmNWI5MjZkY2I4ZDJmMGNjMTA2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA0WI4idJwysYnaGYcsMcLxKQyNq9MilbQfgMjwIv6eD51
VcW6XodIC4eOdMBwQnyNs2NBM/9ohaxtcsJWWq99bsQOzsudN+rVUbTvb086mQzD
QGohQIXQ7BiNWzReGo7kDajcob7FA/EXhv4oMZMmBD9GOuUM6fwwwVZlqv8leJ+S
ETplPhP8Xwx1zn8riAbfzqlqWlOeKwwG+uvnIIunb/zcdFlRFDZW1RIcJSfQXl0E
ym916kQ7bLtfuU2puJXf3bcFCh/4P7NW8U2Oih4TM6S0Cuy/EvKArTnhwqRqLcuA
1mbf//PKBkAyjOJ4B0rxcrsthHLsruZ4M/AlEvP2kwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDEk3i1reAs9u1+/W5Jty40vDMEGMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzkzNmVhYi0wOTRlLTQ5MDMt
OTE0OC1hNzZmODY1NzUyNDcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvOTM2ZWFiLTA5NGUtNDkwMy05
MTQ4LWE3NmY4NjU3NTI0Ny8xL01TVGVMV3Q0Q3oyN1g3OWJrbTNMalM4TXdRWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCjWIEMA0GCSqGSIb3DQEBCwUAA4IBAQBS4YiBniymhJ1lWWPa5avm
wYOITS/JRB5xu7Q25SdCBdQQFik7FWlNlmXoe1se2otD8pt1KUpFxtBII1WMH80B
nQPgFr6/pezVIBKx1J8eG3UvMFENeik7tg5loe/dU+aMSOgpxBVG2bhi91VAXTnf
kC6zbRT8ZcyUAvv/TQKuDKHG7NwXQh0Swq4Jou898s71vV+GPJyAkzQI+cnpV6az
xcHlVn90nKFUqOsBIZg8gHio3t5MlRMFUzyoc1ldKtU32hjT99T9iLV6/9O+AWc7
WDOx95g2Z63tIGp5uJ0YnKvPTrrrteAQWMEVqX0oLm/VfGUw8zZ5rXoZGdiEB1Du
-----END CERTIFICATE-----