Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0DpR14I8xRNDC_CMWryJiX_bge0.cer
File:                     0DpR14I8xRNDC_CMWryJiX_bge0.cer (raw, json)
Hash identifier:          6GHyfvvrxnNq/xF/0Hx82bwunV/vuCCWGZKByVVfrXE=
Subject key identifier:   D0:3A:51:D7:82:3C:C5:13:43:0B:F0:8C:5A:BC:89:89:7F:DB:81:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9DAC97B52B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:53:08 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.146.12.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677205488939 (0x9dac97b52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:53:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d03a51d7823cc513430bf08c5abc89897fdb81ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:54:40:49:c1:6c:c7:76:d9:36:57:b6:bd:
                    64:00:0f:d2:68:5b:56:fa:99:de:9a:8f:64:2b:6d:
                    47:fa:b3:4b:f3:af:81:32:7c:9d:88:74:07:c5:95:
                    2f:7c:ec:94:69:86:f9:da:db:54:1c:89:bf:b1:35:
                    3b:32:93:3e:de:6b:bb:11:23:3c:70:f0:a9:30:e7:
                    7e:82:65:4d:3d:d7:c9:40:4c:d5:7e:97:c5:fe:1a:
                    a6:a7:50:3c:51:93:c4:3f:ff:d3:c6:d0:2a:da:21:
                    df:6e:40:69:00:9d:43:10:68:66:b3:67:4f:cd:0c:
                    3c:63:12:5b:28:78:8e:a5:ab:03:4c:df:75:da:fe:
                    76:47:70:b5:1a:d0:08:3e:f2:01:1e:15:36:c8:3c:
                    ae:20:08:30:0f:f9:c8:68:ed:b7:9e:28:cd:ad:d6:
                    3b:28:7e:a7:fb:ee:89:5e:81:27:83:de:04:a4:dc:
                    8e:35:77:f7:a2:94:5d:31:26:0c:6a:ac:01:43:b8:
                    95:ef:95:06:21:c4:18:9f:cb:a0:ff:0c:4f:9d:ca:
                    86:63:7c:2b:4d:87:37:c3:90:f3:66:2f:5c:bc:a9:
                    2a:a1:e0:7d:88:57:7f:4d:8d:d7:f3:89:01:0b:70:
                    af:41:f1:3a:ad:31:01:b1:82:cd:f5:62:00:02:d7:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:51:D7:82:3C:C5:13:43:0B:F0:8C:5A:BC:89:89:7F:DB:81:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a1b79e-4a93-41cf-b7c9-b60aaa0f949e/1/0DpR14I8xRNDC_CMWryJiX_bge0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:53:c6:8c:ca:22:b9:c1:94:0d:9c:38:e8:7e:49:a4:76:9a:
         c2:fd:c9:82:32:9e:d5:3a:1f:db:09:89:19:f1:63:d6:55:db:
         d5:c8:00:13:83:45:10:d5:51:17:81:cf:30:c9:60:9d:3d:2c:
         87:ae:3f:e6:e9:7f:ca:cf:d5:0c:9a:6b:80:6e:fc:13:8c:79:
         ec:0f:bc:ac:0c:af:0b:35:42:cd:60:03:b5:93:51:8f:65:f6:
         6a:4c:c0:79:61:39:a2:70:1f:6c:8f:07:b6:05:d9:07:55:19:
         04:6d:c2:c5:e3:b4:78:82:30:1b:d1:c3:59:73:cf:0c:5e:8a:
         cd:a4:1c:7e:0a:bd:da:91:88:f1:b6:48:b4:d1:d7:88:aa:66:
         1c:b9:6d:b6:15:01:28:8e:4e:c6:3a:5d:91:49:82:e4:c5:8c:
         7c:9f:76:cb:59:ff:4d:ae:00:59:1d:7e:6b:5f:1a:ea:e0:0c:
         30:f7:2b:37:04:14:f8:6d:fe:62:b2:19:bc:db:59:01:11:9b:
         06:30:d7:93:86:ef:48:f7:73:34:57:52:a9:97:bf:ec:eb:b0:
         8d:de:15:ec:36:5e:70:d2:c9:02:cb:c1:66:00:7d:b7:13:12:
         0f:5e:eb:0c:a6:d2:6d:77:50:0a:57:d5:e5:d5:f5:a2:f5:78:
         94:89:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----