Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lV_qkyFbqAwt4BNPo2E0HAhUyik.cer
File:                     lV_qkyFbqAwt4BNPo2E0HAhUyik.cer (raw, json)
Hash identifier:          eqKRTvV8m9DaqJFblOXqlCQ7V1n7qWonm6K3/0izx2I=
Subject key identifier:   95:5F:EA:93:21:5B:A8:0C:2D:E0:13:4F:A3:61:34:1C:08:54:CA:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A17F995600
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/2c60a1-c65d-498b-839e-e4afcd428798/1/lV_qkyFbqAwt4BNPo2E0HAhUyik.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/2c60a1-c65d-498b-839e-e4afcd428798/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:57:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 147.78.164.0/22
                          IP: 2a09:26c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693630490112 (0xa17f995600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:57:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=955fea93215ba80c2de0134fa361341c0854ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:f4:70:ab:a6:0f:3e:fd:24:c3:63:32:4a:
                    d0:cc:b6:17:01:4c:1c:ca:fb:7c:2b:d1:21:8c:33:
                    df:9a:84:27:6b:c3:d1:ec:51:fb:2c:a8:a7:75:8e:
                    11:c8:55:3c:b1:75:6c:73:21:07:0f:d2:20:68:7f:
                    bf:99:49:13:30:2f:e7:ff:6e:78:f5:97:8e:e7:29:
                    ce:6c:1e:1d:c1:01:61:43:67:8a:a7:8f:87:0c:c1:
                    8c:99:5f:22:5b:77:45:01:25:17:f3:7a:f9:f2:26:
                    2f:cc:fa:4f:12:21:94:f8:93:00:01:5d:23:19:e2:
                    77:3b:45:9e:e0:e7:2b:8b:2e:37:99:c4:e3:95:23:
                    4b:e3:22:6d:b5:08:b4:5f:80:cd:d1:ed:c1:6e:1d:
                    b8:32:49:8a:e6:f8:c4:99:40:16:58:d3:e8:e9:f3:
                    f4:4d:1f:87:a6:d0:94:e5:bb:a9:b4:2f:d6:de:03:
                    85:35:dc:06:6d:13:3e:a5:b7:ca:aa:17:3b:2e:30:
                    76:2b:5a:d9:93:be:b0:75:3b:3d:bd:be:b8:b9:9c:
                    71:a9:29:b2:8c:84:db:0c:b3:f9:9b:00:da:4a:05:
                    3c:e4:11:3e:4c:b1:aa:16:50:3f:7b:33:42:75:0c:
                    61:2e:6e:5b:22:78:29:dd:a4:d3:93:e3:20:81:06:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:EA:93:21:5B:A8:0C:2D:E0:13:4F:A3:61:34:1C:08:54:CA:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2c60a1-c65d-498b-839e-e4afcd428798/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2c60a1-c65d-498b-839e-e4afcd428798/1/lV_qkyFbqAwt4BNPo2E0HAhUyik.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.164.0/22
                IPv6:
                  2a09:26c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:5d:07:8e:9f:ac:62:31:5e:9e:05:28:fc:6a:55:7b:28:
         ee:8b:77:06:68:bb:9f:2e:01:41:6d:48:8f:ea:19:76:70:39:
         2e:57:a2:ab:30:f8:03:37:97:d9:5f:5c:d8:e1:77:d9:c6:71:
         9e:01:6f:7d:39:16:00:bb:d4:d1:88:a5:17:df:04:27:a1:00:
         23:0f:4a:10:29:a0:d2:de:89:e9:60:07:cb:e2:14:00:6f:e8:
         81:d5:02:eb:92:9a:e9:ae:1e:84:00:7c:68:ac:fb:9f:b0:a7:
         24:bc:eb:a0:79:95:60:28:0e:6d:b1:9d:28:37:b9:62:12:20:
         e0:79:39:e0:29:8d:bf:94:91:1f:95:cb:d4:26:71:d3:d7:fc:
         d6:f1:18:00:0e:e7:60:bb:8e:f4:ef:54:3d:17:e0:0e:bd:62:
         c7:2b:34:3a:ba:8f:e5:17:e2:f0:8e:42:0c:89:fc:36:eb:ca:
         d5:0e:62:e0:37:fb:6c:f5:9a:fc:4e:7d:9a:00:f8:b5:26:38:
         8f:66:06:cf:22:09:18:ed:bc:ca:d1:a3:32:fd:a8:c4:20:30:
         e7:68:2b:c3:e4:a9:f8:af:70:af:0e:33:a3:36:b4:f3:3b:f0:
         3f:c0:3d:ce:e6:98:61:62:9f:84:e9:8c:2c:17:94:b2:d5:f7:
         c2:0b:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----