Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
File:                     nGjViy1lj_IP3QpEJywdtvPPf8Y.cer (raw, json)
Hash identifier:          xARqf+8EaartGvvhLlH8qJvu97PstCbRmWpcFHF1Or4=
Subject key identifier:   9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AF1AE168A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Mar 2022 07:39:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 195.8.47.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752070256804 (0xaf1ae168a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 07:39:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:00:75:df:b4:5a:99:e9:5e:c7:ad:cd:e6:
                    6e:84:ff:6c:d8:19:98:2d:e3:6c:90:35:62:77:4f:
                    42:05:46:3f:c9:32:51:fe:c1:94:d8:9c:a3:a6:09:
                    96:35:09:ac:62:67:42:dc:99:4f:09:cd:71:5e:93:
                    f5:4b:9f:a7:94:e4:17:c5:63:69:ce:dd:df:16:92:
                    ea:8c:10:bf:3a:c1:5d:79:0b:26:ed:aa:3d:6b:fe:
                    c2:2d:d3:85:38:b6:0c:b6:e7:e1:50:b4:6e:64:f5:
                    e6:d2:cc:92:05:4e:09:49:e9:83:12:a2:94:62:d4:
                    df:1c:f0:07:6a:09:1e:c6:e5:e6:89:e9:b1:cf:61:
                    05:72:17:e1:ce:28:b1:c6:1a:38:61:68:0f:da:c8:
                    90:8b:16:71:4c:9c:f1:d9:db:b1:dd:33:4f:56:f8:
                    17:0a:e5:97:d9:5a:ab:ee:28:fd:43:e2:e6:2f:da:
                    6b:a2:3d:d1:35:13:0f:7c:87:05:7f:1d:75:80:74:
                    2c:6d:e7:86:a9:93:c1:8e:f8:c3:ed:5b:2f:ce:ca:
                    24:93:f3:f6:93:51:7e:0e:fd:d8:44:97:e1:4c:81:
                    e2:d0:b4:3d:af:23:94:ec:ed:d6:83:5f:52:1c:65:
                    ba:81:85:58:1a:b0:e7:95:cd:c3:29:14:c4:de:95:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:91:81:22:50:ce:97:87:0a:4a:9b:10:e2:42:d6:8f:4a:4d:
         c7:22:40:6a:b3:e9:90:8f:91:3f:a2:29:8e:49:a1:01:08:5d:
         d4:13:a1:20:16:22:a0:1e:f8:55:29:69:d6:24:89:4c:b7:12:
         42:43:8c:b9:01:34:63:06:fa:22:63:88:5c:8f:39:73:cd:bb:
         b9:86:8f:67:ed:70:8c:c7:89:7b:68:a5:b0:e1:aa:a2:43:f6:
         26:30:fc:5a:2a:ba:c1:a0:86:f6:f4:0a:8c:cf:b0:29:7f:11:
         e9:26:62:a4:c4:22:84:cb:78:ea:ef:18:2b:f8:42:44:c2:8e:
         99:cc:45:f6:7f:c3:a3:57:6b:bf:6d:6e:b2:7f:86:18:30:0b:
         ff:db:6c:2e:36:75:72:9e:07:50:43:e8:6f:56:a4:89:8d:cb:
         a5:e7:f5:20:00:d8:99:53:1e:9e:aa:93:c4:e3:b2:81:bb:c1:
         be:17:5f:67:8c:a2:13:77:36:26:0d:77:7d:43:01:55:77:6b:
         3a:09:b8:a2:3d:b0:0e:72:5a:96:2e:5d:62:88:ba:df:71:ad:
         99:cb:b8:ea:72:4b:43:68:84:f5:9a:9c:a5:f8:a4:5d:dd:77:
         3c:7d:8d:06:79:92:b4:1b:fa:43:0e:76:4f:75:95:88:38:a3:
         86:59:26:d0
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAK8a4WikMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MzI1MDczOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5YzY4ZDU4YjJk
NjU4ZmYyMGZkZDBhNDQyNzJjMWRiNmYzY2Y3ZmM2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqFcAdd+0WpnpXsetzeZuhP9s2BmYLeNskDVid09CBUY/
yTJR/sGU2JyjpgmWNQmsYmdC3JlPCc1xXpP1S5+nlOQXxWNpzt3fFpLqjBC/OsFd
eQsm7ao9a/7CLdOFOLYMtufhULRuZPXm0sySBU4JSemDEqKUYtTfHPAHagkexuXm
iemxz2EFchfhziixxho4YWgP2siQixZxTJzx2dux3TNPVvgXCuWX2Vqr7ij9Q+Lm
L9proj3RNRMPfIcFfx11gHQsbeeGqZPBjvjD7Vsvzsokk/P2k1F+Dv3YRJfhTIHi
0LQ9ryOU7O3Wg19SHGW6gYVYGrDnlc3DKRTE3pUPUwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFJxo1YstZY/yD90KRCcsHbbzz3/GMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzIwNzgyMy04YmMzLTQ1YmUt
YWY5Yy0zYzUxMjc5MjY2MTIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMjA3ODIzLThiYzMtNDViZS1h
ZjljLTNjNTEyNzkyNjYxMi8xL25HalZpeTFsal9JUDNRcEVKeXdkdHZQUGY4WS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwwgvMA0GCSqGSIb3DQEBCwUAA4IBAQA4kYEiUM6XhwpKmxDiQtaP
Sk3HIkBqs+mQj5E/oimOSaEBCF3UE6EgFiKgHvhVKWnWJIlMtxJCQ4y5ATRjBvoi
Y4hcjzlzzbu5ho9n7XCMx4l7aKWw4aqiQ/YmMPxaKrrBoIb29AqMz7ApfxHpJmKk
xCKEy3jq7xgr+EJEwo6ZzEX2f8OjV2u/bW6yf4YYMAv/22wuNnVyngdQQ+hvVqSJ
jcul5/UgANiZUx6eqpPE47KBu8G+F19njKITdzYmDXd9QwFVd2s6CbiiPbAOclqW
Ll1iiLrfca2Zy7jqcktDaIT1mpyl+KRd3Xc8fY0GeZK0G/pDDnZPdZWIOKOGWSbQ
-----END CERTIFICATE-----