Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XC19GEnIiwTvndWiQG61FQjjw7Q.cer
File:                     XC19GEnIiwTvndWiQG61FQjjw7Q.cer (raw, json)
Hash identifier:          x/+tFcChYh7L0nwL275i6TiaTHj6snrhkDmgHQUPI+c=
Subject key identifier:   5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A29BCFAE4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:56:38 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 209043
                          IP: 141.98.208.0/22
                          IP: 2a0e:a880::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698398781002 (0xa29bcfae4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:56:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c2d7d1849c88b04ef9dd5a2406eb51508e3c3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:21:f7:80:5f:8a:d9:c1:a7:e1:4f:43:e4:
                    71:03:2a:52:5f:48:5f:0a:a4:4e:d5:f2:4b:7b:0c:
                    11:d1:40:7d:39:20:ad:ec:d7:e7:12:bc:fa:2c:94:
                    13:ba:0f:d0:f8:8b:a2:71:d3:a7:1b:45:9b:fb:33:
                    3b:08:e5:c0:e9:80:19:88:41:51:98:9c:02:99:7d:
                    3c:bf:6b:21:7f:aa:7b:86:9a:52:8f:9e:b2:4b:ef:
                    ba:4b:5e:1d:fd:a6:f1:f6:c1:05:8f:af:fe:3c:04:
                    1e:f2:85:3f:98:3f:35:b3:23:79:15:68:9c:9f:63:
                    de:e1:e0:6d:52:f2:74:48:e8:07:77:d3:f6:a0:fe:
                    9a:66:fa:62:43:48:7f:cb:29:c8:3f:f2:63:8e:ac:
                    81:7a:da:c2:51:eb:e8:de:0e:7b:e3:92:79:ab:a3:
                    26:de:51:44:8c:59:a8:b6:b7:72:93:e6:ee:b5:bc:
                    dc:eb:6d:67:fe:7f:f3:ab:c8:96:68:a7:5a:b9:d3:
                    c7:6e:78:38:7e:af:09:a8:3a:db:01:17:53:ed:21:
                    b4:9f:8e:cf:1f:03:7c:f7:69:35:1f:2e:f4:15:6a:
                    c2:bd:d7:51:c7:9f:a3:74:26:fc:65:1c:91:af:cf:
                    24:84:05:f7:13:e3:06:8d:fb:8a:40:39:a1:2b:57:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2D:7D:18:49:C8:8B:04:EF:9D:D5:A2:40:6E:B5:15:08:E3:C3:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3c8f60-3131-4a23-b544-ccb67ee1176c/1/XC19GEnIiwTvndWiQG61FQjjw7Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.208.0/22
                IPv6:
                  2a0e:a880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209043

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:a0:97:06:f2:4c:8e:46:6f:5d:ee:6c:32:65:dd:14:04:
         16:b8:42:e6:10:d2:68:1b:b5:0e:df:13:bd:f9:ea:bd:4c:86:
         ff:95:21:34:d4:e3:12:74:67:48:88:f7:e2:18:d1:bd:e4:4c:
         db:7e:fe:1b:9e:b9:63:bd:bd:a7:76:c9:7e:02:63:59:2a:4a:
         a0:03:e7:4d:59:c9:ca:7e:80:0a:6b:33:ed:1e:5f:02:3d:d6:
         c5:b4:bd:3b:93:dd:01:3b:c4:43:aa:36:35:e3:ba:1d:f9:e2:
         7e:f9:c1:00:26:e2:37:42:06:5d:55:67:10:ef:54:87:1e:aa:
         27:78:71:52:03:a0:0c:67:ad:b4:57:de:b5:00:55:36:cf:85:
         2d:1e:1a:f8:7b:80:77:76:b4:4d:d7:c3:ca:2b:ec:64:eb:df:
         c0:ed:51:eb:8b:4e:3d:f1:a4:28:3c:50:66:63:c2:8b:b3:a0:
         bf:3a:4d:0c:ee:02:05:ee:60:17:5a:a8:b3:d8:73:7a:9e:51:
         82:c9:b7:c9:c6:8e:05:d8:53:ca:f1:7a:0c:3e:f7:88:63:73:
         fa:26:22:cf:d9:1b:21:63:bb:89:7c:d0:b1:35:06:f7:ee:f5:
         34:a4:74:89:51:a2:e7:19:ae:c6:5d:22:a8:08:73:8f:67:65:
         fb:f1:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----