Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer
File:                     YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.cer (raw, json)
Hash identifier:          OlKfo/5+gEa7DiNVS8a1DrLQGSjusjKR6NmSrQLNe7c=
Subject key identifier:   60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A20ACF25F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:03:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.141.32.0/22
                          IP: 2a07:21c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695966049785 (0xa20acf25f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:03:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6046cdd10a7489f3aef12199d24f01a9d9a9d533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:bb:90:59:d8:e9:98:89:9e:3a:c5:73:c2:
                    bf:50:58:6e:cd:3f:60:2f:22:51:e2:8c:17:67:08:
                    c6:c0:72:d9:ea:17:e4:0e:0e:5e:d3:7f:94:f1:f6:
                    90:43:6b:07:b5:e5:6b:c2:04:86:ef:cc:56:39:7e:
                    31:32:97:e7:0f:69:23:ee:7c:b2:66:3e:79:45:e3:
                    c6:20:2b:7d:f2:38:59:0c:3b:82:86:94:2b:7a:d6:
                    44:35:5e:3c:ad:41:27:0f:d9:df:ee:b9:94:44:9e:
                    17:1c:d7:d6:e0:3f:19:8b:12:27:a2:b5:c8:35:0f:
                    e9:2b:e6:f9:f7:69:32:47:5c:74:e7:20:f1:32:af:
                    90:8a:c6:c0:09:f6:22:bd:4d:b6:5b:c4:33:9f:5a:
                    d9:06:ec:f7:14:52:41:39:84:c0:f5:11:5f:49:29:
                    15:47:a6:3c:e4:e7:4b:5f:86:c8:70:45:bf:87:96:
                    91:77:fa:ba:78:04:a7:69:94:49:b0:52:db:92:e1:
                    27:22:f7:82:03:de:f3:6c:ea:cc:25:1f:af:24:44:
                    14:ba:dd:82:44:e9:4f:98:37:da:02:c9:55:78:89:
                    46:66:4e:f4:6e:a8:35:27:42:6a:67:46:fa:76:d6:
                    ab:12:88:91:7b:bd:d5:1b:7a:17:c2:bd:b2:52:de:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:CD:D1:0A:74:89:F3:AE:F1:21:99:D2:4F:01:A9:D9:A9:D5:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/82558d-8e36-48db-b5cc-bd918df2deb6/1/YEbN0Qp0ifOu8SGZ0k8Bqdmp1TM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.32.0/22
                IPv6:
                  2a07:21c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:b1:24:ef:be:9e:da:d3:d8:2b:38:42:8b:b9:3a:56:51:
         2e:a9:34:be:0a:90:b5:89:b7:45:6a:01:b6:26:54:b9:23:ff:
         bb:02:07:71:4d:81:ee:9b:ef:2d:95:70:55:a5:03:15:2f:5b:
         09:8a:01:6f:56:1d:cd:48:c1:99:a8:18:9b:c7:41:9a:17:6c:
         72:37:dc:b1:41:16:7f:71:aa:73:23:a8:de:73:de:3a:31:48:
         b8:3a:24:ee:e1:e9:20:4a:4b:62:04:01:ec:75:28:eb:52:0c:
         66:4a:28:7c:ee:93:f0:0f:7f:1e:3b:39:07:85:3b:23:46:bd:
         43:77:d8:37:05:37:b9:8d:e9:89:3d:8f:b0:dd:79:c8:f8:ef:
         f7:44:d9:df:80:84:35:d3:ca:eb:23:ed:df:0a:af:f3:4a:94:
         c0:6f:ba:32:cf:ab:00:02:c2:54:f4:79:85:00:c7:78:af:98:
         1a:8d:e3:3d:7e:9a:a9:4f:aa:72:73:c7:d8:0a:db:15:32:e2:
         57:aa:08:a1:35:4f:21:83:f3:d1:46:02:98:73:ef:aa:aa:07:
         6c:66:e6:52:ed:11:91:5b:ad:0c:b0:6a:f2:de:c8:e4:59:2e:
         82:14:1d:c5:c2:4a:ca:c9:31:ae:bb:d2:b6:5e:44:a2:fc:f5:
         64:96:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----