Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
File:                     Gf7GYmONvpLlgBNRQKay8Ok2d84.cer (raw, json)
Hash identifier:          YGZQbTXqwDn7PGq4E/eBPnNKAkcZobk3/UI9wt78tF0=
Subject key identifier:   19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFA5C34FACC13662F927D39DA6D808
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.229.0/24
                          IP: 2a11:5bc0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:a5:c3:4f:ac:c1:36:62:f9:27:d3:9d:a6:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19fec662638dbe92e580135140a6b2f0e93677ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:05:df:a2:1f:e8:bd:d3:ac:c1:68:11:4f:
                    c8:61:7a:ab:92:e3:4e:21:44:f1:f0:0c:04:4d:ff:
                    5b:6e:ca:28:e5:4b:d7:67:97:f6:ba:70:89:ee:f0:
                    b5:77:04:c1:49:ef:43:0c:50:c5:47:85:0d:fd:e5:
                    a9:84:7d:54:45:b9:ad:fc:cf:4a:7d:95:bb:2b:1a:
                    c5:c9:c2:40:09:61:f9:15:ce:b8:56:5d:19:2b:bb:
                    bf:ad:6d:eb:2d:f9:7c:05:b5:55:ab:fa:3e:0f:d0:
                    2b:ce:af:4c:82:c5:5d:a3:bb:7d:c3:d3:b0:6b:61:
                    16:04:12:ac:cb:b7:6a:48:d5:a7:8d:22:90:f9:a4:
                    bc:27:f2:cf:6a:d8:f5:45:5a:fc:23:4a:dc:b1:f0:
                    0f:0f:4f:d9:2b:50:0e:ba:7f:46:5a:8e:da:ab:3b:
                    a0:f0:ba:1e:83:ae:22:72:37:a5:54:bd:46:84:80:
                    b4:20:aa:3e:77:76:75:dd:77:cf:e0:46:46:fc:c1:
                    38:3c:17:a2:b0:dc:ac:0a:1b:1b:9f:08:07:50:06:
                    f1:bc:16:f5:57:bb:06:fa:a8:64:27:f3:61:4d:1c:
                    83:07:7a:8e:fa:b3:81:91:0a:c6:df:8f:e2:88:4b:
                    89:29:c9:96:70:28:67:0c:d8:10:59:59:de:a7:53:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.229.0/24
                IPv6:
                  2a11:5bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:fd:73:51:2c:02:81:c0:99:91:13:fe:b5:52:c0:36:fd:
         61:d3:07:02:f2:ec:2d:3c:1b:fb:e8:61:b9:bb:69:50:23:fc:
         10:09:08:69:6f:97:6a:f5:25:b8:5b:bf:3b:f6:a6:8a:f4:dc:
         c9:f5:f7:47:49:0e:eb:54:90:6c:00:90:02:2e:2e:97:29:60:
         19:3d:ba:4f:14:63:b1:61:58:50:4e:85:3d:44:36:c8:1f:94:
         c2:2d:52:62:b0:c1:ee:49:4b:65:0c:3e:e4:16:c4:3e:b3:87:
         9c:94:e8:d4:b1:85:e1:67:a3:69:74:32:a3:0c:c2:67:d1:a2:
         04:b7:90:06:6e:63:96:75:eb:4b:bf:7f:05:c8:b9:1a:de:a6:
         99:7a:55:92:cb:1b:00:cf:4e:dd:f6:b2:16:3e:a4:4d:5b:37:
         4d:8a:85:c8:f3:cf:0a:e1:ea:b9:a8:d8:ee:d4:2d:cc:06:dc:
         4f:c3:88:41:d9:cd:38:f3:8f:88:c6:c0:ef:e2:d3:97:c7:55:
         5d:c3:0b:6d:ce:45:16:54:89:7c:ae:99:6b:87:6b:2f:16:fc:
         cb:2f:85:dc:95:f8:5f:c4:3a:0d:35:22:1d:7f:48:53:2b:83:
         32:66:42:0d:30:0c:a0:0d:2d:09:ba:45:bc:17:60:ac:89:70:
         ea:62:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----