Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
File:                     m5j0IykqNamMIg-QzzAd1BAlhKE.cer (raw, json)
Hash identifier:          tUz+U6NUBUC/Uoh514iZ9es0AKhLLFMbt4P00KMJG0k=
Subject key identifier:   9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018ACC85E54CFFC513B45238B4FB8A214D89
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 13:27:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212376
                          IP: 185.212.33.0/24
                          IP: 2a13:ef40::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:85:e5:4c:ff:c5:13:b4:52:38:b4:fb:8a:21:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 25 13:27:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:f9:f4:41:7c:f5:2b:7c:64:36:16:05:ce:
                    53:14:f1:7e:84:69:26:e9:67:97:22:30:a8:20:1b:
                    4d:95:f2:4c:f9:68:33:f8:1f:bd:34:c6:ab:9c:4d:
                    d2:ea:e2:60:fc:1f:eb:b6:11:c4:db:a4:2b:06:bc:
                    5b:c8:55:3f:ab:09:43:7a:45:20:eb:a9:40:8d:95:
                    c4:cc:0f:01:93:43:7b:05:95:a8:6f:ac:df:43:14:
                    9d:f9:a9:d4:6e:e3:c5:8a:95:e5:9b:b0:ab:fd:2c:
                    d0:c9:28:12:20:c3:17:90:18:0e:e1:14:34:5f:d5:
                    a0:14:49:1d:72:56:ea:3a:44:31:30:71:e5:1a:96:
                    b9:db:6b:77:68:ec:25:0c:d5:5e:88:36:c1:b9:b9:
                    9e:c1:22:54:8f:7a:28:dc:74:d0:f7:0d:7c:90:53:
                    20:2e:a6:0b:0a:a8:73:9a:84:04:1f:57:b1:90:28:
                    f8:d4:4e:69:7a:c9:e7:a9:33:23:37:bd:90:12:b1:
                    e7:de:4d:f1:f8:92:2c:5a:89:1d:37:0c:50:b6:0f:
                    98:e6:19:3f:83:9c:cb:c0:01:44:c2:26:48:64:cb:
                    40:72:67:d8:76:00:79:41:21:e4:fb:90:ec:00:c4:
                    3f:c1:58:82:60:f6:8b:e5:27:f4:67:ae:74:f7:52:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.33.0/24
                IPv6:
                  2a13:ef40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212376

    Signature Algorithm: sha256WithRSAEncryption
         6c:02:90:69:2f:f9:b3:0f:d6:26:47:82:18:6f:b1:60:40:62:
         d5:6f:af:bb:a9:78:b9:0e:3b:a2:9e:c4:0a:56:00:5f:6b:cb:
         4d:be:25:b2:99:f1:19:7a:49:ff:b8:17:df:78:7c:1a:ce:e4:
         f8:d5:00:81:38:29:12:94:61:8d:19:56:d7:e5:57:ff:6b:0d:
         75:e2:11:75:7b:9e:40:7c:3c:3e:6c:7d:79:ac:eb:5f:7c:5e:
         21:63:fd:66:e1:43:f9:15:43:c6:ac:3a:a2:45:5f:0f:8c:35:
         19:0a:10:13:05:1b:f7:85:c9:d1:77:c7:82:85:2e:63:66:98:
         08:e6:61:a3:4a:10:0f:70:bf:66:73:c5:78:c4:f2:20:6a:db:
         83:37:90:bd:ed:cd:ac:df:95:85:81:20:4f:58:7c:30:e3:35:
         32:97:97:57:bf:df:18:de:87:cd:e6:b8:67:a9:e0:70:91:6f:
         5c:6e:7a:13:53:58:60:3d:fd:ea:17:d9:fc:d1:c5:88:77:a8:
         26:f2:e3:b3:35:2a:9f:42:0e:a5:26:e4:db:4f:49:d4:b6:81:
         73:18:55:57:b2:db:06:29:7c:f2:04:8c:a5:2b:26:9b:25:4b:
         08:2e:b8:aa:96:dc:c7:06:00:49:9e:99:dc:20:b6:f7:02:79:
         76:0e:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----