Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYS0MwrFxQIouXgfUwExgcJ5z58.cer
File:                     YYS0MwrFxQIouXgfUwExgcJ5z58.cer (raw, json)
Hash identifier:          BLEFKKWfdhdltmhWurowNxmwcmrvwmoC8/97/tYrzOU=
Subject key identifier:   61:84:B4:33:0A:C5:C5:02:28:B9:78:1F:53:01:31:81:C2:79:CF:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856AF4DEBE6258BA26947DFAF7D05A5008
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/47e7db-4533-4e4d-8e13-a9682d420a6a/1/YYS0MwrFxQIouXgfUwExgcJ5z58.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/47e7db-4533-4e4d-8e13-a9682d420a6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 01:31:50 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 178.212.142.0/24
                          IP: 2a12:2580::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6a:f4:de:be:62:58:ba:26:94:7d:fa:f7:d0:5a:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:31:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6184b4330ac5c50228b9781f53013181c279cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:80:26:f2:4b:c9:fc:53:e2:c2:1a:7c:4e:
                    56:fa:2d:1d:c1:98:24:14:af:f5:8f:9a:87:87:a8:
                    ea:fa:2f:42:1e:10:3a:fc:40:96:5e:74:bc:f0:ae:
                    e9:8f:96:9b:5a:9e:78:36:88:fe:f0:ef:b1:40:3c:
                    ab:f1:84:b3:f3:24:3e:c7:04:a7:ff:51:47:e2:da:
                    6e:26:d6:03:19:70:7e:20:12:2c:d5:1b:b8:7c:7a:
                    92:5f:cf:1a:71:a9:b3:08:c0:26:04:65:67:a3:ac:
                    f7:49:f5:1f:a4:7d:68:eb:b1:65:ab:22:8d:8b:e8:
                    84:24:8e:25:dc:48:9e:f6:2e:87:dd:50:2a:ea:e8:
                    a4:2f:95:5e:9d:be:6c:dc:bd:f9:99:5d:2d:a9:83:
                    81:41:91:09:df:09:63:37:54:06:6e:93:08:ca:f9:
                    89:cb:7b:20:e4:fb:b5:68:fd:15:d2:cf:be:f8:7c:
                    00:b0:45:a3:10:f0:16:aa:2c:54:8f:bf:fd:c9:e8:
                    6c:7c:7a:a4:6f:1d:5c:7b:d6:21:f4:0e:c2:a6:86:
                    35:98:30:22:94:52:46:6b:d1:da:38:6d:69:ca:80:
                    06:9e:2a:03:da:06:89:58:10:f0:f1:c8:a8:5b:0c:
                    aa:30:8c:92:ab:8a:e7:a4:8b:ba:42:46:79:42:d1:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:B4:33:0A:C5:C5:02:28:B9:78:1F:53:01:31:81:C2:79:CF:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47e7db-4533-4e4d-8e13-a9682d420a6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47e7db-4533-4e4d-8e13-a9682d420a6a/1/YYS0MwrFxQIouXgfUwExgcJ5z58.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.142.0/24
                IPv6:
                  2a12:2580::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:76:0a:8f:f6:82:91:1c:c0:32:e4:6d:97:64:ee:e0:cb:39:
         3f:91:1a:83:0d:d7:a8:11:cd:b4:7b:24:2d:7f:8f:29:4f:2e:
         ed:94:ae:bc:94:45:c1:14:55:65:0b:45:5f:77:b2:f7:03:47:
         2c:b5:b9:40:b3:9c:14:86:32:bc:af:dc:1a:e4:64:31:d0:49:
         b9:2d:03:d9:4b:9b:b3:08:77:a3:25:e7:f5:82:45:f1:4d:ee:
         b0:2d:79:a8:67:5b:f2:58:34:24:43:a6:52:37:ca:ff:98:6e:
         bc:24:30:73:c8:a6:14:cc:0a:6e:c5:39:a9:7c:60:37:fb:bb:
         78:6f:90:f1:47:52:c6:20:f7:67:35:f4:97:1e:17:d7:c5:5b:
         95:5b:92:2f:88:bd:75:ab:06:7b:42:78:ff:c4:2f:0e:cd:95:
         78:ea:90:49:cd:9c:13:dc:e7:f7:05:8e:04:60:91:ef:f7:71:
         ba:a4:31:f0:ec:61:e4:ed:d2:87:f5:f5:c6:98:50:f2:9e:26:
         2c:2a:75:72:2b:0f:66:f7:a0:f9:e3:9d:10:0c:57:10:6b:f0:
         17:51:78:18:b1:13:1b:fc:02:2f:84:4e:a1:98:e1:51:64:5d:
         b2:67:7a:70:8d:73:f5:81:ea:41:f9:f8:48:3b:21:9a:73:b9:
         d6:d6:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----