Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wCsUO2spDVu7TBFgARUKe7Rwm4o.cer
File:                     wCsUO2spDVu7TBFgARUKe7Rwm4o.cer (raw, json)
Hash identifier:          TiyukURCg9ogDRSWEQ0n2XxWfM8gWhrjJUEkAEIHgsM=
Subject key identifier:   C0:2B:14:3B:6B:29:0D:5B:BB:4C:11:60:01:15:0A:7B:B4:70:9B:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183944FB24F5578577B979AA456FC8A3381
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/143cf1-a404-40f4-b9ac-3c8e60527a9e/1/wCsUO2spDVu7TBFgARUKe7Rwm4o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/143cf1-a404-40f4-b9ac-3c8e60527a9e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Oct 2022 16:09:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203453

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:94:4f:b2:4f:55:78:57:7b:97:9a:a4:56:fc:8a:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  1 16:09:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c02b143b6b290d5bbb4c116001150a7bb4709b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:54:70:f6:90:02:b0:46:42:a2:99:20:af:
                    98:68:e7:c4:9c:d1:07:94:69:dc:99:fe:30:a3:84:
                    b0:34:26:08:dd:46:f4:ca:25:2a:6d:c0:1e:23:18:
                    f9:d9:88:00:f2:35:d9:18:a3:ba:a9:94:72:29:df:
                    06:95:ba:c7:dd:35:9a:d4:e7:b6:4a:1a:64:70:5c:
                    d9:dc:aa:e4:b0:65:44:3a:88:89:bc:a7:66:fa:84:
                    d1:24:e5:7e:ef:80:b5:d3:c5:1e:53:72:15:25:97:
                    f9:fe:d0:75:68:b0:b9:85:b1:e1:df:33:c7:2c:3b:
                    15:e8:69:91:0c:e1:78:be:1d:dc:39:24:be:e9:6f:
                    cc:9c:a8:b2:f9:43:1f:27:6c:ac:57:50:ce:27:2d:
                    8c:b6:2e:e4:93:03:34:6e:54:90:91:b5:d2:0d:0b:
                    3b:74:d5:82:d8:bb:cb:83:d3:34:78:47:e9:b1:26:
                    29:bf:0a:17:50:84:24:14:0b:29:51:8c:c6:30:c6:
                    f9:7f:f1:d1:2e:2b:68:bb:46:4c:69:17:e1:9a:b4:
                    a8:02:8e:33:b5:c6:12:11:c7:5c:ac:09:00:af:39:
                    c2:ff:dc:59:5c:78:2d:b5:60:41:77:d5:9a:1d:ae:
                    fc:7d:c9:e2:6c:54:4b:e0:17:ae:f7:94:83:64:38:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2B:14:3B:6B:29:0D:5B:BB:4C:11:60:01:15:0A:7B:B4:70:9B:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/143cf1-a404-40f4-b9ac-3c8e60527a9e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/143cf1-a404-40f4-b9ac-3c8e60527a9e/1/wCsUO2spDVu7TBFgARUKe7Rwm4o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203453

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:d2:04:bb:8b:2f:0a:16:92:65:23:20:49:c5:a5:5d:84:
         6f:86:84:fe:d2:b5:f8:73:bb:1f:04:86:75:90:eb:74:09:a1:
         e0:54:ff:0d:1b:63:7f:9e:0f:0e:b3:cb:20:f3:88:07:67:ec:
         8d:33:c2:38:7c:95:cc:25:47:0e:c0:d5:b9:15:4d:56:24:d0:
         b0:b5:2c:2b:42:99:c8:fc:ae:3d:82:7a:d8:04:10:d0:5e:de:
         d2:d1:76:1f:8f:b8:21:e7:8e:12:66:9a:98:88:e5:3a:f8:d1:
         77:78:72:bd:c0:85:5b:a3:8d:f4:c8:bf:36:ce:e8:6b:35:4b:
         e2:18:86:d5:e2:58:bb:24:03:f5:76:58:9c:a4:eb:93:51:35:
         e6:f7:f4:36:7c:0d:e7:5e:1c:34:e8:15:97:8d:3e:81:b2:54:
         c7:ca:52:8c:27:1b:ca:88:1f:b0:c0:06:a1:a8:04:db:e8:2e:
         3f:49:25:51:8f:7a:32:ef:23:b6:8a:7f:d6:3b:21:cb:fc:74:
         e5:38:d9:e2:03:6f:05:e3:3d:87:56:9a:d1:91:5e:f9:76:33:
         f8:8c:97:d8:75:0a:17:1a:d2:18:0a:29:01:c7:6a:c9:43:97:
         7a:33:6f:45:78:9e:c0:ef:dc:e4:cd:2f:01:f1:30:94:7e:32:
         e9:25:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----