Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0-HA7qpdpKnFGVspjCKHJqv-Uq8.cer
File:                     0-HA7qpdpKnFGVspjCKHJqv-Uq8.cer (raw, json)
Hash identifier:          XEt6PCaawbbKFAKTNKkUtYHtvqiDLJ380+dhRJdsRCo=
Subject key identifier:   D3:E1:C0:EE:AA:5D:A4:A9:C5:19:5B:29:8C:22:87:26:AB:FE:52:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F1C61E4DE5E5C9275CBD3D2A0098B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/0-HA7qpdpKnFGVspjCKHJqv-Uq8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 5.181.54.0/24
                          IP: 2a11:3f80::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:1c:61:e4:de:5e:5c:92:75:cb:d3:d2:a0:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3e1c0eeaa5da4a9c5195b298c228726abfe52af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:0b:f8:7a:77:06:ab:61:3a:c0:b5:33:14:
                    50:62:f0:53:e7:b0:86:71:56:7d:a9:c3:fa:c5:9d:
                    9b:0c:0a:5c:67:86:f7:1e:80:16:b3:4a:30:22:e2:
                    02:e9:7b:a5:16:82:59:76:f0:65:ec:a0:be:c9:d2:
                    a6:dc:d5:85:83:72:22:ca:9c:1e:de:36:91:34:f9:
                    48:b2:f5:7e:e5:2b:20:40:2d:95:1f:b2:b6:d7:b1:
                    4a:58:46:f3:ac:79:fb:ae:6c:03:2c:69:ad:3c:d0:
                    f8:16:4b:0a:f8:31:4a:17:6d:de:de:02:26:70:18:
                    ef:8e:2e:6b:08:5e:5a:68:a4:7e:97:b5:24:27:2b:
                    a4:30:06:c0:63:d5:46:d7:86:4b:46:64:e8:86:5e:
                    ac:d5:99:e3:1e:db:93:cd:ba:5a:5e:55:c8:75:f2:
                    fd:91:fb:fe:21:49:63:54:06:43:73:16:4a:99:41:
                    00:5d:7d:c8:53:a3:91:c5:3d:9e:91:ab:e8:8e:a1:
                    77:0a:cb:9d:9f:fc:b0:33:36:31:61:20:73:3a:cd:
                    c6:53:ee:3b:5c:ef:12:f7:31:f6:0d:4e:f2:d7:6d:
                    8a:d2:19:68:84:a1:82:22:73:71:cc:95:55:44:86:
                    75:28:39:c2:05:9b:ed:43:6b:9c:90:32:82:36:36:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E1:C0:EE:AA:5D:A4:A9:C5:19:5B:29:8C:22:87:26:AB:FE:52:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/58b7a5-4ee1-4552-aef2-0d5eaf2a876e/1/0-HA7qpdpKnFGVspjCKHJqv-Uq8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.54.0/24
                IPv6:
                  2a11:3f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:5b:50:5f:5a:37:3f:3e:e4:c0:67:eb:e1:31:b6:5c:0f:50:
         93:72:1f:92:8a:5e:30:b9:db:0c:d0:d8:8d:4e:58:a1:37:2a:
         45:fd:71:82:3e:8d:1e:cc:71:aa:7e:e2:4b:58:7a:8f:f7:57:
         26:00:a1:fb:61:df:2b:52:a2:ab:db:40:c1:26:ea:0a:1a:8c:
         d0:73:c7:e3:60:a5:ac:81:4a:cf:3e:02:4d:05:63:cf:23:ba:
         b8:ea:c0:9c:cd:ba:df:df:e0:fa:38:cb:9a:bf:25:fc:18:39:
         57:81:5a:94:1d:d9:e8:c3:71:dd:e7:d8:80:b1:37:c0:0c:b3:
         da:22:39:be:ee:b4:e6:d2:ec:1b:96:82:b4:da:91:1c:a4:95:
         1d:93:ec:08:e8:01:47:a6:1b:d5:d7:cf:55:0f:4f:9a:8b:35:
         49:84:87:a5:e3:8e:f7:c9:37:c5:24:84:b6:8c:a8:72:b0:cb:
         2b:e7:e6:78:a3:ee:ae:dc:22:64:9b:a0:70:4d:7a:b0:5a:9d:
         44:7c:b2:bd:35:f0:1c:88:16:84:e9:af:af:95:84:ec:4a:08:
         02:85:c8:92:46:f6:25:b6:f8:07:51:14:09:b1:2e:74:ed:b1:
         59:c3:18:89:16:34:5d:c3:0f:c4:be:72:34:2c:30:9d:4d:65:
         9d:e7:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----