Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-HTD8iA53R9DW2B53zFyz3nHVBU.cer
File:                     1-HTD8iA53R9DW2B53zFyz3nHVBU.cer (raw, json)
Hash identifier:          4ImJ7YLJlr2im1x5pKzY7vfMblr1B29so3kT4IdOakI=
Subject key identifier:   F8:74:C3:F2:20:39:DD:1F:43:5B:60:79:DF:31:72:CF:79:C7:54:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       98FD6603A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:52:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 199864
                          IP: 2001:67c:1948::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657086350243 (0x98fd6603a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:52:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f874c3f22039dd1f435b6079df3172cf79c75415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:3a:f3:eb:34:00:de:c6:9f:d3:fd:09:7b:
                    b8:92:6b:44:21:35:16:00:9e:9c:a5:db:6e:f9:4f:
                    e0:84:68:4b:32:b5:60:73:ed:57:84:6d:ab:60:e4:
                    d6:2b:56:ec:fd:08:82:2c:ef:8a:14:6f:69:e1:ae:
                    1e:3c:46:65:5e:5b:71:ce:83:1a:74:a8:19:57:2c:
                    ec:25:a1:91:9f:50:c9:39:dd:03:0e:cf:21:4b:c8:
                    dd:1c:8b:50:cd:91:a2:1e:35:82:22:10:63:ae:bc:
                    b6:9f:fb:5f:59:e1:18:96:7e:9b:1a:5b:e4:a8:77:
                    77:d3:39:7e:1a:06:ed:57:32:d1:38:0c:e2:c8:56:
                    cf:30:44:0a:1c:d5:d7:03:5d:fc:3e:4d:3c:f4:73:
                    d3:98:b0:ef:68:b0:67:7d:03:70:57:a1:f7:00:1a:
                    91:34:c9:6f:b8:0d:d4:4b:e6:65:b8:2c:86:59:fe:
                    e6:86:9a:e7:71:13:cd:a5:b5:ba:0f:18:43:79:b5:
                    d2:84:3d:a3:80:a3:cd:aa:91:ec:fa:49:03:c4:02:
                    84:d8:d9:91:e6:38:3a:dc:79:c6:c8:87:43:c8:31:
                    00:70:06:09:7e:05:35:b6:5a:2f:4a:ec:65:07:a0:
                    cc:15:56:32:b0:09:7e:a4:e9:bb:2e:ae:d3:51:39:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:C3:F2:20:39:DD:1F:43:5B:60:79:DF:31:72:CF:79:C7:54:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3a8829-af07-4648-9218-ab145b590c2a/1/1-HTD8iA53R9DW2B53zFyz3nHVBU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1948::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199864

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:05:b2:b5:41:11:78:d1:99:1a:e2:b6:a4:a5:eb:b8:26:
         58:e7:0c:7a:07:c1:67:4f:06:a4:08:8b:46:7c:77:20:b7:4b:
         d9:43:cc:c3:2e:3a:80:03:75:c8:4f:24:f0:2f:f8:03:85:8c:
         ee:8c:cc:e2:03:3e:fd:c9:7b:cf:f3:1b:83:e5:54:01:5d:be:
         9d:61:66:ad:cb:c2:0a:4c:8f:a5:1d:77:50:f4:ea:56:09:c5:
         7e:58:42:31:79:0f:2b:2f:c0:ab:a9:ae:9d:ab:b7:68:3d:ff:
         bb:cd:cc:ba:1b:34:fe:f8:47:0a:40:c4:65:75:50:30:3e:2c:
         21:a8:af:f4:6e:50:b3:9f:ea:c2:18:d2:3c:87:04:fb:7a:01:
         f9:81:d1:30:32:fd:6d:75:32:6e:d2:6f:09:40:cc:fa:18:a5:
         ae:84:bf:14:6b:0d:98:c3:31:fc:a4:53:87:8e:3d:05:5e:04:
         d4:d1:39:49:61:00:30:24:49:e7:1a:c6:47:7f:7d:2f:da:26:
         c0:de:b1:48:cf:9a:ff:c1:af:c3:86:df:31:83:d8:15:ee:53:
         e0:a0:37:fc:8b:af:b8:9b:f6:38:a3:15:af:af:3f:00:9b:24:
         e1:d0:63:6f:23:8d:89:34:b8:f4:d3:58:a0:d8:fa:81:37:1b:
         4c:0f:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----