Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wNrAskBp3fB5naJTz2YRLgxryO0.cer
File:                     wNrAskBp3fB5naJTz2YRLgxryO0.cer (raw, json)
Hash identifier:          9W2F6OGGiBkck4RmqiLVvdBCVm5yApc7wgzifqF4H4E=
Subject key identifier:   C0:DA:C0:B2:40:69:DD:F0:79:9D:A2:53:CF:66:11:2E:0C:6B:C8:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A41CB44941
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:01:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 29269
                          IP: 79.171.216.0 -- 79.171.221.255
                          IP: 2a02:6480::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704856213825 (0xa41cb44941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0dac0b24069ddf0799da253cf66112e0c6bc8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:7e:5f:49:2d:a2:b5:f9:cd:ab:12:4b:45:
                    f5:b1:c7:ac:85:87:57:e1:c5:e1:ec:86:12:fb:56:
                    ef:7b:42:7e:8d:a7:f7:c3:2a:d8:fb:37:e6:7f:0f:
                    a0:2f:1d:b8:2f:3f:62:7a:a2:e4:f7:7f:65:85:70:
                    cf:0e:87:57:ba:46:8f:58:da:e4:20:14:50:e2:49:
                    46:6d:1f:aa:28:05:d5:5a:b4:03:ad:76:ab:bd:d8:
                    04:07:60:94:22:ab:ad:5e:0b:cb:79:96:a5:16:19:
                    f6:9e:19:2b:a9:4b:a3:22:00:f8:c6:ef:e5:a5:38:
                    41:4f:88:0d:42:ca:4b:5d:d5:fe:f6:08:93:c6:ad:
                    a7:18:fe:18:51:6c:e4:6c:a7:20:5a:66:1d:8a:f7:
                    89:67:3f:e6:40:e4:a6:ab:a4:8e:50:63:91:b0:57:
                    3e:c4:26:e1:05:30:10:d6:0a:b0:8f:e5:42:37:53:
                    5d:ac:1c:45:fa:4f:48:a8:b7:19:aa:8e:5e:ae:dd:
                    6b:23:55:3d:2e:11:09:97:d6:9f:30:8a:a8:c4:1d:
                    37:04:10:ed:d0:74:5e:c8:6a:18:0c:26:32:5e:93:
                    2b:96:b5:62:ee:ff:29:a9:23:f6:cd:94:6d:69:49:
                    21:91:84:92:06:0f:de:d1:a5:7a:61:2a:3e:f3:a1:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DA:C0:B2:40:69:DD:F0:79:9D:A2:53:CF:66:11:2E:0C:6B:C8:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c0ecc-413b-4ff4-9d45-8d1bac1a4f68/1/wNrAskBp3fB5naJTz2YRLgxryO0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.171.216.0-79.171.221.255
                IPv6:
                  2a02:6480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29269

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:5a:86:6a:78:b4:89:a0:82:e8:05:1a:63:57:bb:2c:5a:
         b7:d2:31:f2:f5:14:d3:aa:58:30:23:23:e3:6e:2f:1c:5d:29:
         a2:e3:a9:d6:4f:4a:2d:19:a3:ce:9f:5d:b2:00:8c:e3:59:90:
         c9:aa:67:59:d7:1b:7d:64:97:13:64:15:d6:70:e8:90:26:3d:
         29:d3:e5:6f:47:89:3f:36:8e:2b:2b:dd:f6:b5:cc:4e:a8:3b:
         83:54:22:f1:90:01:27:d6:57:03:91:a8:91:a0:8e:d3:cb:fd:
         02:1e:1e:e8:39:2a:97:42:a0:62:fc:30:34:8a:c8:ae:58:24:
         ac:71:65:1a:e9:50:6a:99:ed:4c:d8:2d:20:8a:2d:ee:a4:a1:
         cc:ff:c5:53:62:93:15:5e:e9:34:0f:0c:1d:8d:95:17:18:3f:
         0e:18:43:1e:f8:e6:cf:0d:eb:db:10:3b:66:0b:0e:18:10:c4:
         2f:dc:f2:08:af:0a:e5:18:e0:e4:73:0b:07:78:cc:8d:03:ab:
         48:39:0c:83:7a:d3:cd:f5:45:68:a5:b9:49:9d:20:3a:ad:77:
         f7:5a:b0:1c:73:eb:08:c8:fa:e9:05:c9:22:b7:b8:8f:38:22:
         d3:71:ee:1c:15:c3:cf:8e:4c:6d:84:d4:2c:22:f4:1d:0b:6f:
         7e:49:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----