Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06f0l-YbkSjf_T71pUXJB-lFf_8.cer
File:                     06f0l-YbkSjf_T71pUXJB-lFf_8.cer (raw, json)
Hash identifier:          ezBqOC9Om1L67yupZFOHhDJn7UfMz6HKNYKe7P/9d40=
Subject key identifier:   D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A8FB617414
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:06:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.135.176.0/22
                          IP: 2a0e:9240::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725771973652 (0xa8fb617414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:06:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3a7f497e61b9128dffd3ef5a545c907e9457fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:c8:5e:2d:38:93:bf:d5:20:97:5f:3a:6e:
                    ea:a4:05:b4:5d:07:35:d1:b1:1a:f0:98:05:d6:ae:
                    88:c7:a2:29:50:60:12:cb:79:34:3d:52:c2:d8:0c:
                    9e:f1:02:62:83:82:41:d2:2c:30:b9:0e:47:f5:e8:
                    3e:a6:4f:98:d3:71:f7:4f:00:44:cb:1b:65:24:95:
                    65:c1:4b:76:e2:c6:2c:fe:e5:45:01:3e:ea:79:7a:
                    39:e3:ca:9f:24:35:e7:ba:32:db:7d:b6:7b:35:77:
                    33:e6:7f:91:78:7f:69:b5:84:04:8e:46:e4:01:01:
                    a1:c3:a9:c9:4a:f0:8f:65:ea:3c:ab:10:e8:20:35:
                    e1:4e:ae:b0:13:ad:41:7e:82:d8:6a:19:2d:6c:68:
                    37:52:b8:65:51:e7:43:17:26:6f:9a:cf:d4:0a:4c:
                    9b:28:e0:10:00:6b:d8:d5:81:45:6d:f5:f0:02:43:
                    42:bb:e6:86:69:a1:55:93:3f:30:03:b0:fc:b3:a9:
                    51:25:36:cd:52:1b:35:9a:8f:d6:fd:97:64:b7:ce:
                    ba:f9:db:4e:ae:c6:b8:ba:a9:ed:ad:6a:db:f7:b2:
                    3a:61:36:48:12:4e:6f:4e:62:07:6c:8d:1a:38:7a:
                    3d:74:ae:45:81:2e:8d:e8:a0:f1:88:ac:87:f6:9a:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:F4:97:E6:1B:91:28:DF:FD:3E:F5:A5:45:C9:07:E9:45:7F:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d95e94-d2a2-4802-a3d5-ef5bcd7c9a7e/1/06f0l-YbkSjf_T71pUXJB-lFf_8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.176.0/22
                IPv6:
                  2a0e:9240::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:5e:d1:a7:6a:be:84:41:47:51:22:e7:7d:75:09:2a:f7:
         16:38:56:48:07:a6:85:a2:37:b3:cf:d0:62:09:b2:d7:88:9f:
         3a:66:db:67:03:cf:2f:9e:03:2f:47:4d:ee:2e:d5:51:97:62:
         fe:e7:91:68:d3:7a:52:14:2c:80:b0:75:5a:a0:81:5d:7f:e1:
         d5:fc:d1:5d:be:24:d0:52:63:a7:47:72:a9:05:ac:ce:e4:87:
         21:4e:76:90:cd:5e:e9:c5:ea:09:a9:ae:a2:cb:fc:e0:22:19:
         c4:10:0b:3c:da:0d:aa:6d:e7:d5:47:ff:82:20:03:40:b7:41:
         7e:7e:65:4f:46:2f:07:e3:37:86:19:b1:65:8b:a4:e8:aa:67:
         b9:45:97:33:b7:1c:02:89:5d:77:2a:f2:52:97:a5:11:2b:33:
         ca:07:a4:81:82:a3:fd:2f:10:db:b3:e0:08:29:07:5c:61:ce:
         a8:09:a3:ef:ce:7e:8e:63:c1:43:69:8b:7d:86:be:a4:8f:2a:
         83:e7:be:52:4d:da:09:4b:e9:13:09:4a:05:60:a4:19:2a:df:
         fe:53:15:a0:34:1e:14:63:43:0f:84:40:33:d2:52:4d:03:5f:
         86:11:cf:7f:cb:db:ce:3f:c7:66:53:ce:4b:74:9e:75:c7:dc:
         01:3c:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----