Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-stv_NpOKroCyhO6CA_98y8uzhE.cer
File:                     1-stv_NpOKroCyhO6CA_98y8uzhE.cer (raw, json)
Hash identifier:          q1w1iV1pDv06StFBxKwEnt4InqazKVeRYRa9rTwRu7c=
Subject key identifier:   FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A72C4CCF0A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 12:56:51 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 42755
                          AS: 51749
                          IP: 46.21.160.0/20
                          IP: 91.195.200.0/23
                          IP: 91.196.168.0/22
                          IP: 91.198.27.0/24
                          IP: 185.138.208.0/22
                          IP: 195.184.64.0/23
                          IP: 2a02:27f8::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718002769674 (0xa72c4ccf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=facb6ffcda4e2aba02ca13ba080ffdf32f2ece11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:98:30:3b:df:7a:91:6a:a7:f6:b3:77:75:
                    43:38:ef:23:d4:bc:22:4a:7e:f4:41:48:34:8a:7d:
                    97:58:ae:ce:0f:79:7c:9f:27:4f:49:90:11:77:26:
                    93:5c:c7:a6:3f:3d:cb:6b:5b:e8:b1:62:de:9e:45:
                    59:d6:a7:de:52:11:26:82:bc:17:7b:7e:22:35:9a:
                    28:20:50:3c:c6:d1:02:bb:48:2f:c2:dc:65:af:e5:
                    cd:61:26:83:04:9e:74:fc:22:9e:2b:80:5a:0a:ae:
                    43:0a:31:62:fd:b4:ed:a6:66:73:cf:5a:ce:0a:96:
                    4d:f2:82:71:c4:99:76:ad:49:76:02:d0:cd:43:0c:
                    1c:0b:9a:79:36:48:89:0b:ac:1d:30:6c:e8:52:37:
                    34:0f:24:8e:15:25:23:4e:84:03:ce:a1:75:8b:80:
                    52:09:42:dd:34:ea:df:6f:99:85:71:1e:01:3f:3f:
                    94:b9:c1:98:78:30:63:c2:b5:42:ca:98:36:5c:dd:
                    7c:93:44:ce:0c:4c:51:03:dc:fc:00:0d:fb:76:56:
                    1c:fe:a6:a7:68:44:ea:07:4f:a3:97:ff:83:65:54:
                    d5:36:5f:f7:1c:74:63:84:4c:d3:cc:67:04:1a:dc:
                    63:51:b9:19:67:07:73:01:28:89:08:21:1d:dc:e8:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.160.0/20
                  91.195.200.0/23
                  91.196.168.0/22
                  91.198.27.0/24
                  185.138.208.0/22
                  195.184.64.0/23
                IPv6:
                  2a02:27f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42755
                  51749

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:89:04:68:2d:ea:a3:11:6e:ff:36:57:c4:0a:6d:b6:c8:
         4e:37:61:c8:31:cc:f1:53:81:23:be:9b:e1:bb:85:6d:8b:01:
         09:36:a6:95:8a:66:4b:4e:44:dc:80:91:ed:29:fa:81:a8:83:
         4a:5c:eb:a6:a2:43:11:dc:92:e9:d6:fb:b1:22:98:55:d5:73:
         7c:5d:0f:09:f4:cc:a9:12:31:2f:e1:91:d3:d9:7e:2b:97:e2:
         d1:ad:8f:e9:8b:0b:11:57:a1:05:98:51:d7:0d:25:e0:c3:5e:
         c0:5a:51:ea:e1:bc:95:1e:a7:2d:74:5c:0d:56:25:5b:ea:20:
         c8:75:8d:30:09:01:d7:fd:31:18:bf:5d:f9:27:05:24:5e:e3:
         8a:18:7f:49:2d:e3:7b:f4:13:1e:9d:b5:4c:9d:c8:f7:3a:c6:
         41:9f:0e:f7:68:48:1e:9e:56:a7:a4:a2:2e:c1:06:3f:42:d1:
         e9:b5:da:96:5d:0c:5a:d6:5e:16:b2:10:9e:04:57:ac:46:6d:
         3b:d0:0d:32:47:5a:41:2e:0c:72:b4:65:0b:23:b2:47:a8:4c:
         5e:07:db:7b:e3:a4:e4:ab:17:df:3f:dc:59:d7:d0:fb:d6:fb:
         50:6f:b5:71:fb:af:75:eb:12:68:04:6d:92:78:43:a8:07:84:
         08:38:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----