Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
File:                     ULkKXhWLoJCP3IPMQkP-QMbatCM.cer (raw, json)
Hash identifier:          VH3/T2SJbs64btWYkxds7XqD5mDph0GZxOOfIGihEhE=
Subject key identifier:   50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018484CBFDB61CA743BD8A9A28315763B9EC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 17 Nov 2022 08:54:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a09:be40::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:84:cb:fd:b6:1c:a7:43:bd:8a:9a:28:31:57:63:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 17 08:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:da:86:6a:84:28:93:bb:01:95:ec:4b:43:
                    b7:de:e4:57:c8:1d:16:1a:f0:ee:dd:4e:66:65:25:
                    0f:ef:b0:63:2c:e5:e9:0a:f6:5d:e1:c5:70:b9:88:
                    67:b2:cc:c3:bb:10:e2:6f:e2:45:3f:6e:a2:ab:4a:
                    48:f6:85:44:2f:23:68:1a:c4:e2:92:f2:3d:d6:9c:
                    17:18:0b:9f:9e:75:a4:38:3e:cd:ff:70:2f:47:95:
                    58:e0:4b:3e:5b:72:25:9d:51:9f:2c:75:c5:55:2c:
                    f4:d1:0b:c7:2c:44:f7:ed:89:1f:f4:31:78:c1:aa:
                    24:9c:fb:76:2c:f8:89:0d:58:03:7f:49:e1:38:0e:
                    a5:19:a4:d4:79:ca:c7:8e:5c:47:44:f2:82:76:b6:
                    e3:a2:7b:1e:0d:51:5c:8d:94:33:4a:f8:de:2d:8c:
                    3e:5e:4e:ed:95:cd:9b:5d:ae:87:01:68:9c:72:ed:
                    3c:64:09:d4:36:57:4a:08:b8:ef:e9:fd:3e:47:58:
                    dc:e4:a6:bb:38:77:ce:9f:1f:ce:09:01:84:f8:9e:
                    ac:77:06:6f:f9:33:c1:46:1d:e8:9d:cc:30:09:3a:
                    9f:ea:b7:7e:49:8d:ef:77:1e:3c:3c:7b:65:e7:5b:
                    0c:63:91:86:b2:b1:e5:10:81:11:b5:d2:d4:59:a1:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:be40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:2a:05:62:3d:75:1b:27:d3:ee:c9:a0:22:3a:00:98:a4:
         0c:19:17:8a:ad:3f:a5:fa:73:07:b8:45:e1:34:19:5e:a6:ff:
         65:01:d3:0f:c9:3e:27:fe:0b:39:57:d5:70:19:1a:f2:e3:62:
         fc:d1:8b:18:44:89:20:20:8a:d5:5b:1d:84:fe:15:e8:7d:ad:
         50:7c:83:e7:f9:fc:14:40:92:8b:bd:e5:8d:13:95:5a:15:f9:
         1c:64:b2:7d:8e:a4:a6:df:5d:bd:22:5a:ec:49:59:24:37:2a:
         70:6f:2d:57:a7:80:a5:41:0b:96:67:df:78:a2:3a:b0:ca:56:
         1d:82:48:a1:db:f1:50:1f:9e:79:7a:a0:96:d6:d1:c4:20:94:
         16:23:14:65:90:a3:57:86:be:60:34:31:c3:e0:c7:cd:0a:95:
         94:76:00:42:19:aa:ec:5d:b0:29:e9:7f:10:48:3f:c5:97:d5:
         48:ba:0e:fa:26:0c:9b:f3:e0:ad:fa:6f:3e:f4:52:aa:b3:29:
         a6:10:9f:cf:eb:b3:fb:89:42:c7:c6:14:44:b9:d0:20:50:f1:
         7a:29:61:85:56:b1:42:8a:77:bc:7a:52:24:43:d4:f4:23:98:
         a3:1d:0b:72:97:da:8f:36:cd:90:62:07:da:21:4b:95:bb:ec:
         da:b9:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----