Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-H1MaLeiVP2fduOJTeLU62D3OnA.cer
File:                     1-H1MaLeiVP2fduOJTeLU62D3OnA.cer (raw, json)
Hash identifier:          e6JvRHY93Oogy+u9Wjqw6ZXXP4lSe89NF8DKcKUFSd8=
Subject key identifier:   F8:7D:4C:68:B7:A2:54:FD:9F:76:E3:89:4D:E2:D4:EB:60:F7:3A:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B295F6BFA3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 May 2022 18:59:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 211389

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767020154787 (0xb295f6bfa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 31 18:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f87d4c68b7a254fd9f76e3894de2d4eb60f73a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6c:7c:9e:a2:8a:80:ea:f4:df:01:07:78:7b:
                    e7:d6:85:27:73:3b:96:71:71:84:f6:a2:91:7e:79:
                    ee:c0:8c:a7:9d:4f:aa:35:2b:c6:3c:6f:04:2d:af:
                    77:48:78:16:e6:0b:b0:b9:0c:72:6a:01:af:45:59:
                    f0:6a:23:bc:57:c8:eb:cb:c5:ff:f3:b3:a4:37:31:
                    01:80:66:d6:36:9b:2d:f6:36:51:2d:e0:fb:d9:73:
                    f0:20:0e:24:90:9a:2c:c2:0e:68:9c:6d:96:09:c2:
                    05:51:36:ee:cd:ae:5b:3f:88:45:59:2d:12:19:06:
                    d7:f9:ba:43:e7:9c:ee:1e:07:c7:9b:6d:85:58:e1:
                    e0:4e:42:84:34:8c:f7:e9:0d:55:06:0a:df:5d:23:
                    03:fb:83:d8:ee:aa:7e:3c:63:99:0e:56:86:dd:47:
                    2a:ee:d8:b3:8c:36:75:b9:b6:14:78:b5:a8:4f:ea:
                    f5:37:54:97:92:b5:2b:ef:41:7c:c0:72:11:84:4a:
                    6b:2f:ee:3e:b7:93:36:9a:12:17:6c:14:31:ac:89:
                    b8:91:cb:87:72:96:57:06:f5:26:0f:bc:0a:8d:c9:
                    2a:14:57:44:fa:5e:5d:d0:ad:f0:38:f0:8a:31:bd:
                    5d:9e:b8:c3:c5:51:62:ac:59:1b:7d:4e:13:56:0a:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7D:4C:68:B7:A2:54:FD:9F:76:E3:89:4D:E2:D4:EB:60:F7:3A:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/98d036-8260-46d0-99fa-fd915cc7c0d2/1/1-H1MaLeiVP2fduOJTeLU62D3OnA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211389

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:88:1d:96:9f:c4:1c:9c:a5:3f:cb:39:97:6c:56:86:7d:
         b2:be:ff:4c:40:99:58:39:eb:e9:1c:33:3e:c3:0c:e6:cc:9e:
         26:23:a9:20:3f:52:e9:1e:44:79:93:07:54:41:df:bc:8a:83:
         00:40:51:ec:25:a0:40:67:8b:d5:6b:6b:b1:50:fa:17:e0:a7:
         51:ec:e9:c1:46:a4:b2:78:cb:5d:76:9c:d0:ce:44:8d:30:44:
         1a:42:9a:57:55:78:c7:b8:84:98:99:bd:d7:17:bb:76:3a:47:
         a2:a9:6c:ea:b8:a2:bf:94:e5:96:37:9d:9c:3a:74:8e:95:6a:
         5c:57:3d:09:fa:a2:bc:2c:c1:0f:3f:0b:ad:c2:0f:cc:c3:94:
         51:c6:23:f3:ee:97:18:6d:8b:07:e9:13:57:f1:33:16:fa:00:
         b3:8c:16:6a:c3:df:b3:3a:0e:31:5d:30:9d:6b:a9:0b:d6:7b:
         c0:23:c4:52:d2:20:6b:d2:a3:34:be:57:06:8d:1c:ef:e5:b9:
         1f:0c:08:20:5e:b3:98:d9:0a:ec:13:52:be:32:c4:be:08:9f:
         1d:e3:2e:ee:a0:7d:2b:7f:44:68:c0:82:e8:ab:f7:74:1c:7a:
         73:77:62:85:2e:36:71:f4:f5:bf:3d:6c:45:e7:90:66:68:3f:
         58:97:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----