Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sY7WXSlahhoftGskv2qeyvfz6rk.cer
File:                     sY7WXSlahhoftGskv2qeyvfz6rk.cer (raw, json)
Hash identifier:          +XHAzLZiH9RNU5L6USaxWv+8d9JoznyRar+UYq/XgW0=
Subject key identifier:   B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9B980B9489
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 02:55:18 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 34070
                          IP: 195.88.142.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668270826633 (0x9b980b9489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:55:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b18ed65d295a861a1fb46b24bf6a9ecaf7f3eab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:cd:9c:92:b4:1c:e8:80:b4:da:62:07:e1:
                    de:2a:86:3f:02:6d:21:ff:6f:19:c6:5b:6a:66:7d:
                    d0:18:85:12:fc:4b:10:43:66:e7:e4:e9:64:96:03:
                    0b:96:c0:88:de:b4:9b:12:b4:8e:f4:76:e2:d3:4b:
                    6a:e9:e4:fa:de:10:ab:49:1c:f0:c0:25:f4:64:b6:
                    5b:d5:b7:09:90:87:b6:17:18:4f:47:5f:8e:59:13:
                    58:a8:d9:2c:9b:97:90:41:23:59:97:43:b1:70:a0:
                    a5:45:1f:7f:b7:e3:72:76:f1:2e:10:4d:0c:8e:ad:
                    00:4b:cc:0f:37:67:4d:03:65:d7:0a:cf:73:5c:b6:
                    1f:a1:48:c4:e0:2d:fe:48:75:88:0c:df:02:f5:d1:
                    67:13:35:be:02:2e:89:fc:37:22:b8:da:7f:3c:3b:
                    e8:06:f0:19:7d:c9:74:df:07:ac:a8:ba:5f:54:f1:
                    09:1c:a0:81:4b:51:8b:c0:17:a0:03:67:b1:ce:65:
                    38:e3:ed:c9:b1:61:62:7a:2c:e2:c2:2d:d6:5c:71:
                    f2:4d:02:f8:07:c1:d0:a4:44:f7:8c:f3:ef:ae:ef:
                    e2:fb:10:1a:97:bb:09:21:69:1a:fa:3f:ab:50:0a:
                    c6:f3:2a:50:08:7e:00:b7:cc:7b:34:67:47:36:5a:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.142.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34070

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:17:8b:9a:5d:fc:fe:fc:8d:3d:32:b2:6b:85:fb:f2:4a:
         2c:eb:0e:46:b9:5b:d4:d5:0a:3d:43:f2:b7:a2:88:e5:ca:c7:
         7d:76:82:80:65:fb:47:17:a6:f4:f9:28:fe:bb:fe:62:49:ca:
         79:a9:af:c8:55:ea:e8:36:f5:12:1b:1b:44:17:48:7f:c3:83:
         e0:37:b4:51:0a:e9:81:18:3d:94:52:5d:5a:28:9a:81:c2:1d:
         57:25:05:cb:5c:b3:2c:b8:a2:fc:69:0f:5c:84:40:ff:2b:e8:
         79:6b:19:6b:b5:0b:49:a1:c5:0c:ad:e1:d4:d4:7c:ec:8e:cc:
         f3:ac:46:d9:af:61:26:cc:73:e9:be:40:6b:e3:60:11:35:af:
         84:bd:ea:dd:34:2c:97:60:dc:94:2f:3e:11:3b:74:cb:f4:19:
         75:e0:e2:70:94:bf:34:1d:ec:1c:55:14:42:88:8f:3f:1b:c7:
         0e:19:b9:99:5c:b2:ef:85:0f:87:aa:17:51:af:ab:90:81:98:
         9f:10:b7:2c:1d:b8:a1:c7:6d:a7:52:52:47:f4:fc:ed:ec:b0:
         1d:38:f9:b0:9a:a3:cd:09:c0:34:ee:b1:93:4f:62:5d:e6:5b:
         1b:6a:28:e2:f4:f0:dd:12:df:13:b0:89:b5:55:5c:63:0a:2f:
         17:1a:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----