Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
File:                     sUxz039H2HcRtsOcRQ0hNWr8mlc.cer (raw, json)
Hash identifier:          Itx9ZanVNoABnoX8FrsYyS4v3IPharK1+Lwzm4u45U0=
Subject key identifier:   B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01852AAD8DDB1ADA5DDACA463C9293FEB19E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 19 Dec 2022 13:58:15 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a03:1440::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:ad:8d:db:1a:da:5d:da:ca:46:3c:92:93:fe:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 19 13:58:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b14c73d37f47d87711b6c39c450d21356afc9a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:84:ce:f9:96:03:ca:88:c0:11:07:b0:12:
                    bc:5b:ef:07:75:b2:5b:b1:b6:77:ae:03:ef:5f:a5:
                    4d:1e:35:21:16:52:61:ea:48:07:d8:75:0e:3e:68:
                    9f:cc:d5:0f:24:8d:56:8f:06:97:95:80:13:7b:f7:
                    6c:4e:04:b0:ff:6c:d7:83:c5:42:b1:3c:04:5c:82:
                    f8:f8:fc:d9:76:5e:fe:f0:4b:d8:6d:b3:6f:9e:c0:
                    5d:4e:8e:7f:0f:f5:ad:d2:f1:75:22:3b:15:6f:6b:
                    b3:1e:39:2e:84:08:25:ac:d5:da:3d:a2:42:f0:fe:
                    b7:7f:e9:f0:ca:ef:b1:6a:9c:ee:a9:f4:49:39:9e:
                    ae:f2:3f:94:58:89:6f:3b:69:a3:70:49:9c:aa:5f:
                    5c:81:b7:26:98:93:89:a5:9d:75:25:6e:ce:4e:7c:
                    17:03:fe:c5:a8:c2:23:88:c7:16:7d:6f:c7:af:3e:
                    40:ca:1a:97:d3:9e:bb:9b:e4:a9:b7:b9:ca:ad:d9:
                    72:e7:dd:8f:27:e7:ef:fa:c9:79:bd:d6:f6:f9:1b:
                    43:76:9c:fa:4d:8c:4a:4a:a6:c4:71:b3:6a:2b:24:
                    2e:58:fd:2b:0f:63:7a:b3:c0:40:88:4f:06:34:5a:
                    c3:e8:c8:c8:26:84:ee:41:60:65:c2:f3:35:9b:30:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:15:ea:a8:19:aa:14:23:3b:f1:6d:1e:47:6e:80:bc:85:28:
         1e:7a:fe:38:9a:df:5b:14:58:db:3e:5b:dd:bd:0e:2a:b3:fe:
         6f:85:29:20:42:13:09:45:a3:4e:63:d9:e5:22:32:3f:0e:f1:
         be:21:6f:7a:a9:b5:f4:1e:00:72:3d:a8:8a:a2:9e:f3:be:84:
         b7:c0:d9:74:7a:88:d0:b8:29:8b:f8:ce:9b:e7:c1:1a:9d:ee:
         17:ce:6d:e9:77:78:da:e9:6c:cb:25:f7:89:ee:f8:ac:8d:76:
         88:65:66:88:8f:23:37:f8:4c:58:40:fd:05:62:dd:a6:0d:25:
         e8:54:76:c6:cc:1d:ee:a3:76:66:13:75:7a:4b:aa:2e:b4:41:
         fe:21:ef:fd:09:75:c1:f7:96:e0:e8:8b:d1:66:f4:85:a2:fb:
         9d:1f:12:c5:04:1f:43:f4:15:7a:05:2a:22:dd:e1:b4:81:c0:
         e5:81:1d:a6:08:0c:92:3c:6f:12:d4:be:dd:55:31:33:9e:eb:
         e9:ef:70:ca:10:1f:d4:24:f8:c8:d6:84:c4:ca:5e:42:be:8e:
         d4:5e:d3:3c:f8:14:c5:96:88:37:8d:70:17:b5:d1:1e:0e:21:
         26:4f:06:e8:15:a0:01:18:7f:09:f0:37:28:2d:24:26:a5:13:
         17:8b:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----