Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer
File:                     1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer (raw, json)
Hash identifier:          bmJF5oR8pcU6ANe+9hCERfGm/BITac3RG0o/ixqt7LE=
Subject key identifier:   F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B1A35C4DF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 12 May 2022 13:07:07 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 50135

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762949946871 (0xb1a35c4df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 12 13:07:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8e4848058901d3f564f28094fd52581bf16d6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:02:1b:1e:bc:92:97:88:c6:a0:bd:23:44:
                    c8:12:a3:fc:0d:78:ef:7d:85:a4:d2:85:2b:79:fa:
                    15:0f:80:a8:79:e2:36:cf:f2:da:5b:99:55:2d:07:
                    6d:e1:0f:90:3c:ff:96:b7:22:ff:8f:13:0c:50:41:
                    b9:eb:37:34:1f:5d:b5:47:4a:78:19:21:5c:e0:39:
                    e4:4c:b9:7d:8e:7c:40:c9:ba:96:13:3a:04:65:ec:
                    7a:22:73:ff:58:00:e8:18:7c:f9:b3:94:4c:60:c3:
                    96:28:1e:6c:10:82:79:6a:e6:b2:d3:6d:48:df:c2:
                    34:59:a9:5d:1c:fc:bf:98:8f:ca:34:98:9d:2c:76:
                    7c:ad:89:a7:44:2d:2a:25:60:09:8f:18:03:b7:95:
                    d7:93:a5:1a:6c:31:71:7e:63:c1:93:b6:d3:bb:cb:
                    0e:ee:bf:89:f1:ca:90:8a:a0:82:00:57:b1:65:7e:
                    0a:38:49:9b:18:74:0a:59:b9:f4:3e:d8:0c:09:78:
                    a5:e5:1a:61:77:84:39:31:2d:2c:ad:d6:24:c6:b0:
                    18:11:20:77:83:aa:c9:46:25:99:6a:ad:7f:b7:61:
                    94:89:97:c3:b4:c9:fa:c7:19:a6:e7:9a:ca:0e:63:
                    a1:a1:c0:b4:88:41:65:db:a5:63:3d:19:b3:9e:37:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50135

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:7f:02:e1:33:89:3f:d3:59:eb:7d:c9:b1:6e:90:e7:41:
         a3:b8:cd:df:28:cf:8b:ba:2b:66:84:b8:fe:f6:43:f8:1a:e3:
         b0:d0:24:fc:62:7e:89:fb:b8:7e:ac:b4:78:97:d5:5c:7d:31:
         55:da:9a:0d:f3:08:3e:45:dc:1c:c4:cb:6e:f6:7f:12:1b:53:
         49:81:b7:64:88:91:f1:1d:fd:8e:ea:54:eb:15:ce:b8:7e:13:
         85:d4:9d:8b:16:52:b9:77:9d:5e:dc:d6:a2:4f:26:18:b3:eb:
         83:46:9f:b3:0f:e6:1a:31:ce:3a:73:12:c9:95:00:41:c4:ba:
         5a:7c:27:26:97:f9:46:70:75:e5:8b:79:2a:94:1e:60:14:53:
         87:91:54:d5:30:19:00:8f:a6:a1:4a:03:c6:8a:d6:88:df:e0:
         f2:12:8d:06:5a:93:b1:40:a0:f0:ae:82:cd:35:4e:3a:97:50:
         f5:15:ce:41:94:2a:45:e5:78:fb:de:d5:66:57:c8:08:18:61:
         87:5c:1f:63:bc:10:54:e3:d6:5d:d1:3d:42:f8:02:2d:8c:e4:
         13:d2:ab:b8:bb:03:be:ab:f1:c5:fe:cf:ec:c7:98:b6:0b:67:
         09:c6:ac:b1:86:93:07:68:1e:c0:f0:95:dd:b2:73:5e:cb:1f:
         a7:0e:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----