Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dliLQJbBFlIfQfjO_nmTrClf2Sk.cer
File:                     dliLQJbBFlIfQfjO_nmTrClf2Sk.cer (raw, json)
Hash identifier:          Qcc4YUADLS5ebAUTQb2RmHw8ecX/AA9M9dTH8G2UcyY=
Subject key identifier:   76:58:8B:40:96:C1:16:52:1F:41:F8:CE:FE:79:93:AC:29:5F:D9:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A2EE141D9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/813697-13bb-4745-85be-9fc8f9feced6/1/dliLQJbBFlIfQfjO_nmTrClf2Sk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/813697-13bb-4745-85be-9fc8f9feced6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 09:00:44 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 51818
                          IP: 91.220.15.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699778997662 (0xa2ee141d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:00:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76588b4096c116521f41f8cefe7993ac295fd929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:fe:02:ef:e2:37:ed:37:ae:58:c4:97:fb:
                    18:c0:f4:5d:b4:82:1d:c2:9a:3b:7f:c9:71:bc:4a:
                    b3:c3:e1:72:f2:1a:d5:b8:34:68:84:84:c0:af:ed:
                    59:46:c5:d2:bf:5d:66:11:0c:11:44:2c:a3:68:0a:
                    52:38:33:24:7b:b5:fe:c7:cb:a2:69:ea:9b:57:4b:
                    78:5d:76:e1:7f:12:10:a1:79:d3:d5:71:48:e1:f5:
                    6d:e3:09:09:aa:26:8c:e9:6c:21:4f:53:7c:b2:17:
                    67:ae:65:b9:b4:f7:fd:89:be:d6:9c:24:35:0b:04:
                    bd:84:6f:7f:0f:77:c0:0a:62:f2:cf:78:dc:3c:af:
                    e0:70:b2:23:d6:49:35:4f:db:35:01:68:67:73:c3:
                    24:08:78:8e:72:98:3c:ed:52:db:8f:f8:53:91:d9:
                    c0:c5:10:b2:5a:24:9e:e8:c4:f6:2f:d4:84:af:08:
                    07:37:83:32:d9:2a:67:cb:a3:b2:eb:71:b3:82:aa:
                    45:53:12:fc:97:91:21:1f:dd:5f:b8:63:c4:a1:69:
                    bb:08:e7:b9:8a:5b:cd:54:1a:df:d9:1d:c4:f1:2b:
                    9d:01:1d:e1:57:a9:8a:71:50:9d:c2:73:bd:2c:c0:
                    9a:32:67:78:b9:2f:8f:b0:b8:5b:4e:93:3f:c0:3d:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:8B:40:96:C1:16:52:1F:41:F8:CE:FE:79:93:AC:29:5F:D9:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/813697-13bb-4745-85be-9fc8f9feced6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/813697-13bb-4745-85be-9fc8f9feced6/1/dliLQJbBFlIfQfjO_nmTrClf2Sk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.15.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:18:27:51:c7:69:bd:9a:9e:7c:d6:86:50:02:7d:2f:bc:
         3b:c8:8e:f7:b5:87:a2:21:38:fd:c9:96:51:ee:8a:7d:8e:3e:
         ca:e5:e2:d4:2b:69:41:f8:a1:a7:3e:8a:57:1e:8f:ce:5b:57:
         79:c1:40:3a:10:58:d5:14:67:20:64:16:46:5a:7b:f7:b9:3e:
         af:ad:19:dc:55:df:70:96:3f:23:67:d9:84:d4:13:ac:bf:23:
         51:c9:05:b0:bb:3f:66:e8:ca:13:96:98:0d:db:40:82:6f:eb:
         93:a4:c9:bb:96:da:43:99:3b:12:51:f4:b6:8a:07:a5:19:18:
         d0:7c:b5:6b:d3:d0:9a:97:77:3d:b9:24:c5:70:8a:fa:5f:2a:
         cc:62:73:c0:92:6d:10:8c:c4:7e:dd:d1:2e:38:fc:0c:cb:14:
         74:1b:b8:6a:73:e9:78:3a:a8:e8:cc:af:71:d5:71:28:37:72:
         58:c1:cc:30:bf:c8:8e:62:2c:4b:b4:49:9c:6a:04:c2:a6:0e:
         8e:b9:3e:fe:fe:82:5c:5c:bb:98:f1:5f:a3:db:9a:ab:f1:fb:
         d8:76:a2:33:55:30:36:4c:03:f1:a7:d3:41:ac:de:b9:4f:4a:
         78:0c:b6:e1:a7:12:99:63:a3:91:6a:2a:69:d7:5b:05:7e:b3:
         c2:a2:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----