Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TzUo7e5GQTA91uxUnZIBPTwb-kE.cer
File:                     TzUo7e5GQTA91uxUnZIBPTwb-kE.cer (raw, json)
Hash identifier:          oRlMb5ssUKjuYaop00bGkVPcWiLFprDn65vYdW3APT8=
Subject key identifier:   4F:35:28:ED:EE:46:41:30:3D:D6:EC:54:9D:92:01:3D:3C:1B:FA:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AAE62828FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/4a8dd5-5cfc-439a-8fc2-8536e4665b12/1/TzUo7e5GQTA91uxUnZIBPTwb-kE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/4a8dd5-5cfc-439a-8fc2-8536e4665b12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:02:30 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 207427

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734005831930 (0xaae62828fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:02:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f3528edee4641303dd6ec549d92013d3c1bfa41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:1b:13:f2:81:5f:9c:38:c6:e8:5f:59:92:
                    34:93:c7:c5:d1:b2:5e:80:c5:9c:1f:58:d7:29:04:
                    3c:65:b7:56:b4:1f:73:37:3a:d6:58:5c:4e:03:ba:
                    fe:94:93:60:09:9d:3b:b1:5b:90:c1:ac:42:05:e9:
                    8c:a1:4f:31:69:de:ad:59:be:79:06:5d:75:4e:f9:
                    28:b6:2a:f5:24:18:9b:79:82:16:49:b7:98:72:c3:
                    58:81:e8:2e:85:24:7b:8c:25:27:c2:d2:39:af:c9:
                    e2:b1:0c:22:bf:b9:4d:4c:da:aa:2d:0b:af:15:f9:
                    cd:b1:96:86:48:63:bf:a2:a2:39:7f:48:4a:3b:83:
                    d8:8f:08:db:bc:cf:b8:f0:48:ed:0c:ab:aa:4b:a8:
                    31:c3:01:6f:7a:6c:39:78:4b:fd:49:ad:27:c2:10:
                    01:cb:c2:76:03:8b:7c:0e:e3:11:5f:b7:0c:11:d6:
                    48:ad:99:7d:34:a7:91:64:d8:a5:89:11:ea:68:93:
                    eb:c4:2b:03:30:ef:d9:09:a7:30:95:f2:8b:41:94:
                    1e:0e:59:a9:d0:a4:86:b9:e3:03:ae:e9:58:1f:e7:
                    12:be:87:0c:57:b4:96:e8:66:ff:4b:8b:f9:fc:f6:
                    6d:81:70:6e:0e:64:31:17:0e:05:5d:d9:ab:85:2f:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:28:ED:EE:46:41:30:3D:D6:EC:54:9D:92:01:3D:3C:1B:FA:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4a8dd5-5cfc-439a-8fc2-8536e4665b12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4a8dd5-5cfc-439a-8fc2-8536e4665b12/1/TzUo7e5GQTA91uxUnZIBPTwb-kE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207427

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:09:56:ea:24:a3:9e:4f:51:97:a1:24:51:58:8b:e9:75:
         fb:20:b1:0d:62:47:07:68:fa:80:3c:ee:54:96:ef:11:15:4b:
         b6:b1:06:fe:0e:88:8d:74:b8:71:e7:5b:54:97:4a:d3:95:a5:
         24:4d:5f:42:d6:44:65:fb:9c:7a:04:90:84:04:1b:b2:08:5e:
         6f:2f:5a:aa:4d:4c:ff:83:2b:3f:47:cd:8b:05:04:60:0c:44:
         e2:8e:84:09:4a:9a:4f:25:40:ff:a2:09:a4:8c:1b:a6:88:b6:
         64:a8:bc:63:b9:ee:1c:69:28:b7:46:90:14:bc:81:08:ea:79:
         a9:94:3d:6b:2f:8c:e9:d9:79:8f:1a:14:86:f8:dd:4f:eb:f5:
         74:1f:f2:25:72:95:19:e5:38:6d:92:a6:db:08:a2:37:1e:b2:
         c0:39:fc:69:db:0d:5a:ed:f5:0f:fd:68:33:7b:b4:dc:b4:8b:
         78:94:68:60:60:e3:a4:38:73:d1:79:a9:0c:1d:78:d1:44:46:
         99:50:1c:1f:6e:96:18:bf:14:4b:d5:ff:45:49:21:91:8e:84:
         d5:9f:e0:94:1e:47:57:13:3a:f6:74:de:ad:13:3a:3a:f4:82:
         17:af:d6:a4:78:0e:55:a2:cd:7b:99:6f:5f:27:8c:9b:87:32:
         e4:4c:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----