Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07-ucJpTeCozFlUluXWFVBGgiXw.cer
File:                     07-ucJpTeCozFlUluXWFVBGgiXw.cer (raw, json)
Hash identifier:          Rg62Sxm6xQNqHqHLOsbT3V5oJtEluC0tf3NFHIqdzsY=
Subject key identifier:   D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B056E1C7CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 21 Apr 2022 09:39:14 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 198964
                          IP: 5.104.80.0/21
                          IP: 2a06:1cc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757371881418 (0xb056e1c7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 21 09:39:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3bfae709a53782a33165525b975855411a0897c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:b0:a9:fe:cf:bc:22:08:1e:00:34:b5:f3:
                    84:b8:a6:51:8b:ac:fd:37:40:20:5f:9c:89:dc:74:
                    76:7c:95:18:4d:be:2b:a8:76:e3:7c:e8:b1:5d:75:
                    bb:d4:e9:94:4b:15:49:b7:79:1f:cf:75:9f:0f:52:
                    36:8c:99:4e:b8:9b:37:13:b8:c5:96:0d:e8:d6:52:
                    b2:5f:57:35:82:ba:83:33:26:65:2a:33:15:6d:37:
                    ec:32:0c:86:5b:26:23:eb:51:1e:11:c9:f5:31:29:
                    ad:93:4a:c5:cc:30:8b:34:27:92:33:20:19:87:08:
                    9f:1a:94:b2:33:46:61:9e:23:02:4e:25:2f:3e:28:
                    2b:55:61:aa:78:b4:f7:39:8b:b0:53:2f:3e:1b:1d:
                    4f:f5:fe:1a:ef:7d:ea:ce:cf:a7:b0:d6:22:57:30:
                    39:69:a2:66:05:14:4a:a7:a6:50:ea:c5:57:32:6d:
                    55:5c:4b:b0:8b:ff:53:64:bc:1f:a7:10:cd:d2:35:
                    b6:4c:9d:5a:f2:29:51:2d:04:aa:b2:cd:96:21:bb:
                    7c:66:bb:7c:9a:c0:d9:7d:9b:46:52:17:de:bf:16:
                    c9:f0:13:5f:39:5b:38:5e:1f:53:68:83:aa:3f:4d:
                    b1:14:60:c6:e6:a1:c0:7d:3f:50:ee:b8:23:e4:51:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:AE:70:9A:53:78:2A:33:16:55:25:B9:75:85:54:11:A0:89:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ba007b-ae45-4c54-90b6-fab382535f20/1/07-ucJpTeCozFlUluXWFVBGgiXw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.80.0/21
                IPv6:
                  2a06:1cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198964

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:1b:11:8e:ec:40:b2:b3:2d:ac:4f:4c:04:9f:53:8b:f7:
         9e:b4:1c:9a:e9:9e:4f:ba:66:4a:91:36:5a:4d:0b:7d:28:ce:
         17:9d:a8:15:b3:14:9c:09:29:9b:b2:c0:8e:fd:6f:78:c9:66:
         64:04:6d:1b:23:95:f8:c5:90:9f:6e:2e:b1:78:7b:55:09:0f:
         ad:4a:24:53:9e:74:e8:b0:77:30:55:13:6e:fd:dc:14:17:80:
         2b:88:72:48:46:51:03:c9:e8:d0:f4:5f:ed:90:ec:00:21:0f:
         cc:e5:a1:3d:fd:6b:f3:a3:68:90:48:c4:bf:af:50:66:77:64:
         a3:c7:43:cb:41:48:0d:50:b0:2b:f1:bb:06:9d:0d:15:20:75:
         f8:28:e3:d1:dd:95:57:e1:bb:c1:92:61:ad:a7:77:e9:96:f9:
         32:26:92:eb:e0:13:42:28:74:6d:bb:d8:b3:66:c8:21:76:6e:
         84:4e:20:96:90:0d:d8:91:1e:7c:3e:b4:da:db:ed:87:ae:1f:
         29:da:c4:d6:38:9d:1a:4a:1a:56:a0:88:e5:27:54:e7:69:fe:
         cd:86:43:da:da:ac:41:a9:d4:cf:7b:e9:ea:a2:d3:c5:2a:87:
         2f:f2:7c:df:88:5b:d4:70:ad:d9:73:8c:55:12:9c:47:bc:9e:
         8a:e3:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----