Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bcUpyewAC5Bw8tH7-64efcnb5F8.cer
File:                     bcUpyewAC5Bw8tH7-64efcnb5F8.cer (raw, json)
Hash identifier:          W3W+NGYOk5cNO0OhCiHTXhliCugKUgcqt/3kZQbtRIs=
Subject key identifier:   6D:C5:29:C9:EC:00:0B:90:70:F2:D1:FB:FB:AE:1E:7D:C9:DB:E4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01873BB375FEA7392BCB1E36FF7B8A920A80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Apr 2023 07:23:49 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48652
                          IP: 2a13:d080::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:3b:b3:75:fe:a7:39:2b:cb:1e:36:ff:7b:8a:92:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  1 07:23:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6dc529c9ec000b9070f2d1fbfbae1e7dc9dbe45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bd:0f:5c:aa:60:a1:8a:21:52:65:fe:1a:c0:
                    16:78:ae:cd:7d:83:06:65:25:bf:51:e2:21:28:1a:
                    8a:0b:88:b2:07:49:8a:59:24:1c:fa:b0:6f:c8:c9:
                    00:7b:d6:ca:f0:b5:f8:07:f1:9d:61:76:8a:27:18:
                    1e:a3:2e:55:7c:c3:45:da:5d:28:50:38:ff:f8:45:
                    fd:f0:f3:fd:c3:b5:19:f6:f4:39:70:36:7b:1b:32:
                    9d:33:da:cf:23:f4:1d:3b:60:e5:4f:0e:43:d0:36:
                    fb:46:33:11:6e:8c:dc:1f:42:f5:bf:ca:cc:0b:2e:
                    b0:fa:b0:8f:2c:6e:e7:d1:ab:33:6c:11:43:64:3a:
                    7b:f7:4a:27:8b:b6:b4:eb:9f:9c:cd:eb:1a:94:6a:
                    26:c1:22:c6:ee:bf:32:80:7c:37:e6:09:74:7a:eb:
                    0a:5d:36:92:c6:5d:cb:79:1a:0f:85:2e:72:f1:69:
                    f5:13:64:4a:0a:d8:f7:7b:4c:6e:d5:85:61:09:2a:
                    27:78:98:0f:2d:2b:c1:7d:89:a0:8f:6e:1b:41:b7:
                    2d:f6:d1:d4:fe:a8:42:ff:3c:6c:e6:b4:88:08:98:
                    52:3a:f8:3f:b6:5f:01:15:a2:13:96:f3:9b:02:de:
                    49:81:63:ee:97:af:49:d7:64:29:05:b0:b3:c3:a9:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:29:C9:EC:00:0B:90:70:F2:D1:FB:FB:AE:1E:7D:C9:DB:E4:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48652

    Signature Algorithm: sha256WithRSAEncryption
         ac:d8:65:53:14:51:e9:72:20:e4:92:57:af:32:58:dc:b1:00:
         a2:bf:c4:f0:ea:32:5d:91:39:5e:8a:99:bf:8b:20:eb:19:3c:
         0a:a1:45:d2:ed:fb:a3:85:19:0a:6e:93:62:c9:3d:df:5f:00:
         86:fb:c6:f2:78:8f:42:92:bb:6c:39:54:18:ba:58:66:a9:22:
         ae:7b:d1:a7:9f:b2:5e:c1:51:64:bd:3c:b0:99:5b:5b:ca:5b:
         3b:16:2a:eb:e2:33:6e:4d:6b:0e:c5:9c:93:45:6b:54:f3:14:
         00:8e:14:fe:f6:66:ec:83:88:25:e7:0d:5f:b2:7d:0a:74:86:
         42:3b:88:6c:9f:ae:1c:a6:8d:77:79:a6:f1:5b:84:6b:5a:b8:
         5e:bc:db:3f:b1:e4:82:6e:29:41:ec:86:ac:a6:9b:fc:c5:f7:
         8b:ec:90:97:e0:01:00:de:2a:4d:de:83:43:4d:f6:3d:97:45:
         ea:38:d8:45:6d:93:51:be:3e:96:64:20:6d:0b:18:a6:3f:65:
         44:13:6f:94:f1:74:eb:b0:94:18:e1:a9:69:ec:ce:2c:9b:97:
         10:4d:69:09:62:10:06:00:c1:7b:25:6c:93:aa:72:e1:c3:cc:
         b4:17:82:28:4f:14:a3:ad:51:c3:4e:a1:ef:3c:51:0e:fb:cd:
         20:66:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----