Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
File:                     im--IugL5_FMHDn4SLG4DJJI7eg.cer (raw, json)
Hash identifier:          qYO9ZXrNYZXtfVoewm2PCommlwR5OHx4/H/usUEn8dw=
Subject key identifier:   8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CACECC83324494E8FA39B9693FBC491
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/im--IugL5_FMHDn4SLG4DJJI7eg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:30 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 45.89.160.0/22
                          IP: 2a0b:e880::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:ec:c8:33:24:49:4e:8f:a3:9b:96:93:fb:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:8c:6c:64:ee:65:b9:c9:43:00:ab:92:9d:
                    ff:5e:1c:98:81:60:f0:fe:83:ff:59:11:99:47:51:
                    2a:4e:45:7a:c1:68:0f:9f:07:9e:41:34:22:3e:4d:
                    0b:50:90:31:d4:e3:db:77:d1:a9:cd:41:89:0a:e3:
                    10:29:0a:38:e4:5c:9f:38:06:bb:82:31:0b:94:5b:
                    92:9b:81:c1:87:a6:94:2f:e2:cb:09:cf:49:94:66:
                    bd:1f:b5:3f:43:e0:95:6e:08:8b:b1:aa:da:99:f1:
                    4d:79:a0:59:b7:8b:61:13:47:82:ac:ad:0d:2d:dd:
                    96:42:81:bf:e8:a3:71:27:19:2d:cb:98:07:b7:00:
                    f9:f3:ce:de:d6:2c:22:3e:45:50:7f:0e:a9:f4:56:
                    ee:bb:1d:01:9a:c9:70:ab:50:8f:af:94:0e:0c:6a:
                    3c:7a:44:a4:3c:bd:c8:1c:b0:bc:8d:b6:7b:ec:57:
                    88:52:a1:68:4b:d7:7a:cd:7b:eb:e5:86:59:3a:b2:
                    7a:42:f5:48:1b:fb:9a:c6:d0:72:2d:ee:5c:54:bf:
                    88:b8:5b:c7:6e:4b:2a:d8:5b:2b:12:fd:bb:18:5b:
                    01:76:a6:d0:3d:4b:8b:cf:d4:00:b7:db:52:70:b9:
                    e3:f8:f8:31:bf:e2:94:7c:37:b9:32:3a:62:7e:6f:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/im--IugL5_FMHDn4SLG4DJJI7eg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.160.0/22
                IPv6:
                  2a0b:e880::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:14:77:97:d3:99:54:05:d9:d6:b0:7f:61:15:0a:b8:ec:2a:
         1d:f1:3c:fe:5c:c8:31:ec:64:23:61:40:13:1f:21:76:07:89:
         4c:f3:bc:fd:bf:01:47:75:ca:93:02:3f:ec:5d:6d:3f:01:56:
         04:b0:c7:08:84:23:93:4c:ce:b0:a6:c2:56:52:47:d5:82:ec:
         ab:07:c6:f7:87:94:4f:e8:e1:ee:6f:9e:45:e2:8b:6b:9d:66:
         6c:b9:60:73:59:d2:d0:fa:72:81:57:a4:ca:45:7f:b1:bd:50:
         1d:3f:55:df:95:83:9c:9f:a4:84:2e:d4:87:0d:9e:9b:e1:9e:
         1b:e0:12:3d:d7:b7:31:c0:d1:22:11:da:a1:b2:65:f0:0c:6d:
         f4:0e:27:0e:f4:47:54:8e:26:6c:6e:8e:c8:b9:69:8e:ca:1d:
         45:0c:87:2c:86:26:06:90:c1:3d:32:fa:cb:e1:b0:1a:37:24:
         3b:06:82:22:44:a5:30:7d:8e:23:0d:1b:a5:23:91:de:84:f3:
         88:d1:92:8d:08:4f:77:5b:c7:f0:80:e2:3c:be:8e:1a:a8:54:
         9b:53:39:c7:ec:0e:c5:01:8e:78:13:8c:c7:11:ab:db:c9:7f:
         06:ac:1c:7a:0b:6b:fc:f5:27:78:ff:a4:0b:2c:a8:ad:68:dd:
         21:f4:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----