Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rl1fu9QnfgIpfs0Btc1-G_Kfx1k.cer
File:                     rl1fu9QnfgIpfs0Btc1-G_Kfx1k.cer (raw, json)
Hash identifier:          LeY8ivyRnRfbz+xJ6mEWen+Ls4MX47xyLMs4shpau08=
Subject key identifier:   AE:5D:5F:BB:D4:27:7E:02:29:7E:CD:01:B5:CD:7E:1B:F2:9F:C7:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAE9F7E42F85C53E54DF1170A17843E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/44f32f-8723-41a0-8014-376292d8b2fe/1/rl1fu9QnfgIpfs0Btc1-G_Kfx1k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/44f32f-8723-41a0-8014-376292d8b2fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:33:13 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.234.75.0/24
                          IP: 2a11:9a80::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:ae:9f:7e:42:f8:5c:53:e5:4d:f1:17:0a:17:84:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:33:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ae5d5fbbd4277e02297ecd01b5cd7e1bf29fc759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:12:b6:3b:4c:89:d6:6a:2e:d8:82:b3:ce:
                    48:c3:bf:c5:2e:c3:d2:2d:c6:be:86:00:85:ba:c7:
                    44:ea:55:72:6d:d3:4e:9b:9f:ce:ba:81:d5:cb:d0:
                    f7:40:ae:29:53:4d:be:37:99:6e:71:fd:98:37:b5:
                    bf:85:05:39:30:a0:06:b3:75:7d:8e:8f:ea:ff:99:
                    42:f2:55:93:67:ff:23:6d:e1:c8:a4:7f:c4:32:d4:
                    38:b0:2d:70:fc:93:e3:9b:2f:08:e3:82:89:b6:e0:
                    4d:3e:4f:76:2e:5a:18:44:71:93:a0:b3:e0:9c:19:
                    32:09:d8:90:44:9b:10:97:79:ca:52:3d:fc:9e:61:
                    c2:eb:b5:37:0a:84:01:c4:83:a9:00:90:fe:54:2a:
                    fc:0b:d8:ad:b2:1b:79:5a:83:69:af:a7:85:42:35:
                    4e:e1:32:ed:ed:89:fe:e5:d6:06:02:22:8d:99:7a:
                    d6:b6:34:f7:2d:16:4d:11:87:02:82:04:a2:0c:92:
                    b3:67:56:4a:61:43:e4:6d:ef:13:19:e5:31:8e:46:
                    3f:62:67:5a:7a:50:da:20:88:3d:9f:88:40:8b:aa:
                    34:f3:35:34:10:96:6a:8e:80:bf:7e:71:69:28:84:
                    8d:36:80:ac:15:6c:ba:e6:72:f7:f6:99:83:9b:5f:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:5F:BB:D4:27:7E:02:29:7E:CD:01:B5:CD:7E:1B:F2:9F:C7:59
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/44f32f-8723-41a0-8014-376292d8b2fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/44f32f-8723-41a0-8014-376292d8b2fe/1/rl1fu9QnfgIpfs0Btc1-G_Kfx1k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.75.0/24
                IPv6:
                  2a11:9a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:95:be:44:bf:3e:3b:1e:0e:a1:73:fb:9d:73:d9:ad:6e:
         4f:05:f6:6a:48:34:2e:0b:f3:b5:8d:78:69:94:1d:fc:07:83:
         49:1b:77:fe:ed:03:8c:d3:8b:fe:aa:27:a4:4e:1f:2c:03:0b:
         c7:eb:f5:74:9b:b4:96:65:0d:d8:2b:c7:2a:b7:26:8d:52:54:
         62:5d:89:16:8b:2f:e7:57:2a:aa:88:ec:e4:38:ca:1a:b6:4e:
         57:35:08:8c:19:2c:00:10:6f:d0:14:40:4c:d6:ab:03:b5:7f:
         80:02:16:f9:8f:a2:6e:75:e1:25:f2:7d:51:8b:ee:62:24:a9:
         f2:8f:66:eb:f2:34:48:05:a0:d1:02:1f:a9:85:bc:5d:ed:eb:
         40:84:cf:7d:a2:f5:18:43:43:e9:e7:2b:f8:72:85:a7:f3:3a:
         01:17:86:77:cb:e3:54:9f:0a:e2:91:ef:c9:06:81:9f:1f:83:
         37:f6:1b:1a:76:f8:dc:29:12:2b:26:d7:ce:33:46:a6:36:ef:
         ff:a4:d9:d3:e3:a4:e7:e3:4a:79:25:b1:42:7a:30:ae:dd:b5:
         2c:8b:20:0e:3e:4b:ff:a8:4a:72:7a:0f:b5:32:58:db:ae:e4:
         56:c0:7a:48:cf:f0:87:cd:50:7f:49:68:ff:5c:77:f7:ae:68:
         9b:ca:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----