Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer
File:                     0-eIYY3lhDxjDvPOYo2wXzWwscQ.cer (raw, json)
Hash identifier:          //Qx2I98JNLN64ru9xxXYs7omcCBZ30HnHC+WHVXu1E=
Subject key identifier:   D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AB6C237DF6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:11:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 193.29.108.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736253672950 (0xab6c237df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:11:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3e788618de5843c630ef3ce628db05f35b0b1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:6a:ee:cc:80:c2:7d:21:93:b8:47:fc:f7:
                    57:85:b9:ea:74:ad:5e:57:a7:f8:de:eb:ce:37:b8:
                    cf:cc:17:c4:1a:41:15:ce:65:bc:5f:3a:63:86:70:
                    a6:81:41:c8:3d:e5:3b:31:d6:56:6a:da:a9:5f:cf:
                    b5:16:e4:af:70:27:80:a1:7a:ab:2e:71:9b:1a:1c:
                    b6:d2:74:ef:3f:be:42:d1:44:fd:49:38:d8:64:c9:
                    0d:3d:20:f5:00:9b:5b:c7:0f:40:97:c5:96:e2:c4:
                    fb:47:85:4c:c9:51:36:b7:db:d9:ec:29:5a:4d:07:
                    8a:63:63:5a:ea:c4:67:e3:3b:cd:3f:d8:8e:65:a1:
                    fe:f8:38:62:c1:5d:fa:83:4c:8d:ae:ff:bb:a3:73:
                    1d:d1:de:69:a4:b2:7f:84:b0:37:ac:7a:4d:36:5f:
                    0f:18:de:e3:0a:c7:d2:53:6c:66:c4:f1:84:01:06:
                    5c:c0:e0:52:21:cc:03:3c:66:ac:30:d7:48:d5:76:
                    ef:ed:77:04:bb:d7:ee:40:1b:c3:0f:8e:14:0e:e3:
                    89:f8:98:b6:54:b8:ea:ef:b9:eb:f4:33:ce:7c:ac:
                    2f:9f:19:18:71:30:9c:36:75:7e:34:19:e0:55:5b:
                    8d:e5:d4:b3:ec:a1:f1:a3:c9:50:13:09:bf:c5:a6:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:88:61:8D:E5:84:3C:63:0E:F3:CE:62:8D:B0:5F:35:B0:B1:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc4d4e-b7c4-4256-a679-d24bd164d43d/1/0-eIYY3lhDxjDvPOYo2wXzWwscQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:31:b4:5a:c3:05:3e:2d:e1:fc:8f:f2:6d:5d:8a:8c:99:23:
         09:77:bb:b0:a8:63:db:2b:54:f0:29:d6:70:ee:5e:f0:3b:90:
         fc:9c:5a:47:b5:1e:2a:a9:6e:f9:51:a2:61:c1:15:56:e8:7f:
         03:72:92:cb:0b:30:e8:b5:1a:ed:a8:85:a0:e2:13:e1:be:b0:
         ca:6e:09:07:92:92:7d:54:30:98:35:64:21:97:bc:26:8b:c1:
         01:31:49:6f:2a:33:d7:41:75:ed:6a:84:24:e2:82:ed:51:55:
         19:4d:42:eb:7a:81:dc:54:09:59:52:c2:9d:a9:e4:d4:d6:73:
         2c:e0:90:cd:00:6c:36:9a:6e:88:3d:bf:39:60:14:49:42:d1:
         df:b5:33:a8:37:86:ac:ef:b9:79:bc:d6:f3:cc:36:13:80:f8:
         c7:da:75:82:f4:db:3f:95:3e:d0:f2:ad:a5:4e:0a:0b:05:50:
         3b:50:19:c7:75:ac:41:84:6b:40:5e:4e:e7:c3:63:95:69:36:
         da:80:fa:ac:67:45:4b:38:f3:bd:ad:52:c6:ac:d7:fc:bc:05:
         b2:87:13:bd:25:a1:6a:6c:fc:95:35:33:d5:0e:92:d3:64:8f:
         f2:3a:e0:0f:59:cc:1e:31:03:42:d7:4f:a6:96:b5:c9:1e:28:
         ec:c5:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----