Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ift-HrRQvW4uuJDCsl1gel5Cddw.cer
File:                     Ift-HrRQvW4uuJDCsl1gel5Cddw.cer (raw, json)
Hash identifier:          /2D7kwL52vKvgliPUUeK67JGy0bFlFFespBXS12rOHw=
Subject key identifier:   21:FB:7E:1E:B4:50:BD:6E:2E:B8:90:C2:B2:5D:60:7A:5E:42:75:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F46CECCC86E8F2930F69E6C26FE69
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:44 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.194.149.0/24
                          IP: 2a11:35c0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:46:ce:cc:c8:6e:8f:29:30:f6:9e:6c:26:fe:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21fb7e1eb450bd6e2eb890c2b25d607a5e4275dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:6c:77:65:cc:95:76:2b:0b:6c:80:3a:d8:
                    73:ac:97:33:a6:dd:0e:aa:4b:28:b7:e8:2f:8e:db:
                    c4:dc:7f:df:b0:0d:0e:be:7d:0e:48:61:c9:a1:e3:
                    64:dd:ac:30:73:72:ae:20:26:24:3c:5d:07:94:d7:
                    72:ca:b7:f2:18:af:4e:a7:47:e8:59:46:bf:ac:63:
                    e7:1f:86:fb:84:4f:9a:26:79:b0:b8:01:96:7b:41:
                    d1:27:2d:62:3e:b6:77:01:f2:d3:e0:14:70:b7:bd:
                    fe:e6:44:30:93:83:a5:5b:a2:df:db:1b:6c:c4:49:
                    7c:cd:a2:04:78:fd:44:53:73:c1:ab:31:31:30:d2:
                    0d:e5:35:41:c4:50:ec:e0:0d:e3:2d:3f:9e:96:83:
                    da:c7:12:23:47:da:c2:b3:7a:60:79:d8:71:05:74:
                    dc:c2:78:1b:8d:1e:7c:f9:c8:19:5b:d1:c4:33:2a:
                    3b:7f:b4:1e:57:9f:b7:9d:89:eb:81:72:10:62:14:
                    4e:08:2e:ac:1f:66:41:3e:a0:9a:98:b8:1b:3e:66:
                    e7:f6:a2:27:47:a5:79:46:57:1e:d9:b5:08:c1:5c:
                    82:60:06:7d:8d:ff:a1:fd:b5:ba:71:93:1b:cd:db:
                    67:a1:0e:b7:9a:4c:c4:5c:31:e2:fb:d8:0f:03:07:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:7E:1E:B4:50:BD:6E:2E:B8:90:C2:B2:5D:60:7A:5E:42:75:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.149.0/24
                IPv6:
                  2a11:35c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:67:13:9f:56:d4:04:04:64:fd:48:ab:36:ed:a4:fb:65:f8:
         1c:b5:80:91:05:fe:35:4f:7f:1f:72:09:82:12:e4:58:7f:1c:
         81:f5:86:b2:d0:bf:da:f6:21:66:28:cb:a4:b0:99:07:57:7a:
         67:7d:86:68:55:fe:2b:d1:04:66:e2:58:47:05:d5:28:6d:c3:
         f6:4b:39:84:54:29:68:b8:78:86:a3:19:d5:3d:19:ac:63:5d:
         2d:a5:74:88:94:76:f8:58:f2:28:2f:fe:d3:08:3c:e8:ee:f9:
         8a:87:a1:13:22:eb:85:b1:ac:59:2b:38:15:51:49:20:ba:d2:
         6a:f8:cf:2c:a2:c0:07:3d:50:d0:d2:66:ba:11:34:28:bb:1c:
         c4:68:1d:98:de:06:c7:20:96:8f:36:96:8e:fc:0b:7e:f7:cf:
         54:3d:13:d6:4c:e7:9b:d2:5c:de:4e:8e:aa:07:2c:41:d4:fb:
         5f:b7:f6:60:c9:4c:8c:b2:65:cb:af:36:34:a0:55:30:91:e4:
         86:36:88:4f:c9:37:b7:3f:8c:1e:f7:a5:9c:20:4b:cf:89:4c:
         ac:a8:46:d1:19:d4:4d:28:f2:f8:d6:eb:97:d3:97:b4:37:ab:
         f4:3e:90:ac:7f:8d:78:8e:84:f3:73:ae:83:b7:39:90:e6:7f:
         38:8d:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----