Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAs3ELcgGZcxZjJqUEmgEznN8Ss.cer
File:                     YAs3ELcgGZcxZjJqUEmgEznN8Ss.cer (raw, json)
Hash identifier:          FMN65y5jYz9pGj5l7riGp+AbE9QtcnxklEHlve5fI2M=
Subject key identifier:   60:0B:37:10:B7:20:19:97:31:66:32:6A:50:49:A0:13:39:CD:F1:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       994ECDA035
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:55:36 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 211894

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658452095029 (0x994ecda035)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:55:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=600b3710b72019973166326a5049a01339cdf12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:73:4d:6f:ee:6e:d9:0b:40:11:ed:39:78:
                    db:af:91:19:8b:ec:d9:4a:59:01:ee:39:65:46:f9:
                    53:fb:b1:0a:9d:28:a5:bd:14:b0:8c:ec:38:0d:19:
                    43:2b:65:1b:b9:60:2e:19:68:94:a0:12:4c:ab:bc:
                    01:06:17:b7:d0:e0:36:93:cc:e7:bb:38:11:8e:fa:
                    46:10:da:51:27:a1:f8:6c:fc:eb:64:b6:04:5b:16:
                    4d:99:7a:4c:6b:9f:e3:4a:bd:20:c6:27:f9:f4:0e:
                    07:ed:55:82:d9:20:0b:65:30:73:f9:4a:32:39:cf:
                    74:0d:47:b7:eb:6b:cd:f3:b5:c6:dd:b7:93:48:3d:
                    4a:86:d1:4d:eb:b2:3a:c6:b9:77:28:63:ee:ef:5b:
                    b0:ec:51:3e:78:30:22:b2:f5:04:f9:45:aa:b2:5c:
                    f2:71:6a:f8:d1:64:06:7e:39:b4:2a:4a:6e:13:02:
                    a0:68:f0:2f:53:61:37:2b:ba:88:a5:24:74:8c:05:
                    d3:12:7c:7b:6e:b2:33:29:01:f5:3a:41:64:4f:f3:
                    e6:f5:7b:09:11:3c:24:b0:14:ab:56:7b:32:eb:7a:
                    4d:d1:ff:c3:65:1c:7a:2a:4d:5f:f3:d4:8b:42:ba:
                    3c:5e:e0:8c:36:c1:fb:7e:43:94:fb:81:96:27:9c:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0B:37:10:B7:20:19:97:31:66:32:6A:50:49:A0:13:39:CD:F1:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211894

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:7c:ed:46:9f:96:bc:f2:e7:70:88:bc:aa:a5:e8:53:5c:
         2e:4e:88:46:04:e7:89:b8:b6:1c:dc:05:e3:53:a5:43:e2:0a:
         1b:3d:69:66:07:a2:21:fe:76:c0:f7:33:cd:57:84:6d:3c:e2:
         35:d9:ca:1d:21:7f:2b:05:d1:ca:84:29:31:8a:1a:92:82:97:
         73:80:b7:a6:56:c0:3e:13:54:46:3c:05:29:87:d0:11:38:6d:
         26:96:c5:7f:2d:6f:91:0c:b3:6a:7b:a5:45:da:69:6c:ad:f3:
         4d:45:25:9b:98:a2:cd:65:94:5c:01:53:f3:c2:f5:b4:ad:13:
         db:c5:ad:96:86:34:14:4b:50:b7:3b:95:0a:62:e1:1d:3f:37:
         23:8a:f9:79:b9:c9:71:d7:b8:67:8b:fe:0e:c2:82:fa:36:95:
         8e:2f:21:89:aa:8d:40:6f:12:5b:75:7d:23:21:6f:25:61:0f:
         0e:39:cb:9f:c8:f5:3c:6a:4a:e1:2d:da:c4:e6:c3:95:a1:be:
         e2:11:b6:07:b4:f2:d5:6b:97:bb:21:96:16:01:fe:35:9f:8b:
         9a:10:de:1d:7f:b7:9f:83:4e:fc:8e:de:03:f3:d3:da:e8:36:
         78:c5:7e:18:d1:b2:72:f0:33:25:97:c7:9c:99:9a:07:63:d2:
         3b:d9:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----