Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
File:                     zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer (raw, json)
Hash identifier:          k3Wu2E9+vk+wLMJ0p8UzyJYRoeg+fr5uUcX9WghnbXE=
Subject key identifier:   CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF785EE702A82259DBB7751325FF842
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 201011
                          IP: 185.89.36.0/22
                          IP: 2a05:d4c0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:85:ee:70:2a:82:25:9d:bb:77:51:32:5f:f8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cccb42889e5ac899c12f3486bda045a90eeff779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:4f:29:55:c1:c9:7b:e7:94:0f:aa:3a:57:
                    15:5a:1d:a7:60:2c:af:13:6e:87:ef:c1:78:59:10:
                    94:f0:05:19:53:9a:32:a0:45:8d:e4:a7:23:80:96:
                    da:8e:46:4a:12:2a:26:d0:0b:db:8c:8e:6e:fe:ce:
                    d8:c4:6a:70:00:41:32:49:42:89:de:c7:90:01:80:
                    3d:a5:bc:fc:28:17:9d:04:96:1c:68:ef:4f:cd:b5:
                    b4:e6:4f:f0:62:10:86:f9:58:aa:6f:89:a4:52:06:
                    dc:c4:80:00:bf:fb:d3:10:d1:d5:ff:31:4d:86:29:
                    c2:66:8f:94:bb:13:3e:85:02:5e:9b:74:8b:75:37:
                    31:ce:9c:95:eb:20:fa:e2:f7:ef:ec:5e:a3:68:50:
                    a0:de:0e:c9:2a:fd:97:d7:4f:03:fb:7b:f5:ab:4e:
                    f2:de:ce:bb:25:98:28:8f:88:ab:d8:3f:a9:8f:49:
                    88:97:c0:37:1d:f0:56:4e:a6:31:aa:23:dc:fc:37:
                    1c:ad:9a:0c:65:56:c8:3f:ca:65:b8:0f:c5:e0:83:
                    23:ad:99:d6:e3:a0:11:bb:01:62:5a:5c:5c:dc:7e:
                    97:c6:27:c6:9a:f8:80:74:97:8c:41:96:81:b5:9c:
                    8f:65:35:0c:e4:d9:2c:43:af:90:6b:2b:82:05:7b:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.36.0/22
                IPv6:
                  2a05:d4c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201011

    Signature Algorithm: sha256WithRSAEncryption
         70:16:4e:e1:a2:89:54:9b:08:8e:cd:3b:b3:81:5c:38:e6:60:
         90:c7:a5:d9:fe:81:d3:db:61:88:c0:0f:2c:94:7c:33:9f:96:
         a8:8f:2b:0c:e8:72:9d:aa:a9:24:ce:4a:7b:01:31:f2:85:0f:
         42:5e:3e:a3:b8:9f:7f:19:6b:86:56:0d:45:4c:c3:4a:cb:13:
         4d:28:b4:e0:32:10:dd:b7:9d:9d:3d:e8:24:74:82:b4:f5:77:
         72:8c:41:ad:05:73:82:65:8e:52:1c:e5:14:ca:7b:c9:f1:af:
         92:c1:45:50:71:0f:66:49:ee:91:fd:39:58:0e:e0:40:7e:b5:
         d6:c4:f9:fb:46:52:96:6a:f1:47:26:f3:cc:1e:b7:69:80:45:
         bf:0f:ce:65:79:21:85:81:98:ac:d4:64:42:ce:2a:e4:7a:a9:
         a9:bc:26:0e:9a:f9:fc:cd:cc:b7:fb:0a:3d:26:71:a5:be:82:
         3f:57:6d:03:b1:52:f4:a9:12:b4:f1:39:cf:c5:d8:68:8f:28:
         98:2a:ca:d8:14:f6:08:aa:7c:f3:70:d5:ce:ea:e7:0d:d8:b5:
         58:27:f6:0e:3e:d7:61:47:ef:de:ff:b1:94:34:76:58:df:f5:
         6f:94:ab:36:97:a2:8b:5b:eb:22:78:bd:85:b8:ae:40:9e:1b:
         d2:51:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----