Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13HnL4WIdAoYhEK-z9BNNBC27kY.cer
File:                     13HnL4WIdAoYhEK-z9BNNBC27kY.cer (raw, json)
Hash identifier:          CI7bXFWsjdiOsaLpSPVAIR1rXwEKNJdbV1/+E/qSOrs=
Subject key identifier:   D7:71:E7:2F:85:88:74:0A:18:84:42:BE:CF:D0:4D:34:10:B6:EE:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A159791129
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:55:03 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 51928

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692990841129 (0xa159791129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:55:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d771e72f8588740a188442becfd04d3410b6ee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:ae:52:c3:a7:e9:4c:3d:81:25:f0:7d:99:
                    eb:ab:b4:8b:9e:f3:22:a1:90:05:68:37:4e:d7:a3:
                    9d:6b:ed:76:c5:60:33:35:2c:40:ed:a0:48:bf:17:
                    8c:20:74:db:2c:ee:b7:71:87:3e:5e:be:9e:18:13:
                    98:9c:ba:29:66:01:64:6c:51:22:74:6a:7f:78:8d:
                    01:c2:a3:78:ba:2c:0c:96:24:ff:0e:d1:83:c3:70:
                    b1:a2:3b:9b:a4:0e:95:77:bc:2e:17:ce:1b:e8:bb:
                    74:d5:45:42:f2:60:e2:88:a7:c2:87:49:a2:c6:2e:
                    d8:5f:61:2a:f4:1b:87:50:af:a7:c5:17:47:21:8d:
                    92:4b:84:35:3f:8b:47:40:96:86:84:e8:cb:3b:cb:
                    25:5a:d3:a6:fe:e1:d8:ab:0f:bc:39:71:26:f5:92:
                    27:47:1a:78:1b:04:c5:18:d9:10:e5:4f:af:b9:d7:
                    12:b6:90:52:dc:9d:b3:ae:d2:87:8c:94:d5:36:c8:
                    5a:d6:ed:cd:51:7e:53:63:37:8e:e8:0b:14:cb:dd:
                    44:b6:81:06:03:c9:58:23:da:64:36:ab:ef:51:f8:
                    cb:62:f4:a3:1b:1b:f4:ad:4c:6d:02:54:4c:c7:05:
                    55:bd:29:c1:6d:d1:a1:c5:88:35:37:b8:24:9c:19:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:E7:2F:85:88:74:0A:18:84:42:BE:CF:D0:4D:34:10:B6:EE:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51928

    Signature Algorithm: sha256WithRSAEncryption
         58:42:02:3f:96:08:c3:bf:65:4f:2c:67:74:89:4e:bb:23:a3:
         e5:04:eb:87:fe:a1:ce:76:cf:29:74:96:c1:d5:e0:f1:0f:24:
         34:5f:71:5b:09:c0:e6:32:d7:10:56:d5:ca:de:ce:37:2c:a7:
         27:ed:55:68:ba:9a:72:65:7f:a9:f7:00:85:ee:6d:bd:08:f2:
         3b:c1:28:8d:af:30:21:f5:83:b0:c2:e9:52:ee:ea:84:fc:7c:
         7e:d7:a1:b5:ef:17:2f:36:e7:9a:9c:b8:95:00:dc:53:2e:05:
         12:3c:6f:98:47:0a:50:6c:f9:35:97:da:0d:48:df:e7:14:f7:
         64:90:c3:56:53:23:24:a4:a7:29:5a:21:9f:8b:b0:ea:1b:dd:
         39:24:6a:e0:45:b4:1c:b7:4f:fc:d1:d7:0d:e1:65:b6:bf:ff:
         59:f4:f8:7d:ec:25:b3:90:e5:f5:cd:da:15:a9:b5:d2:1d:87:
         cc:f9:95:91:5d:fd:6e:4a:85:94:a6:7c:fb:5d:d2:58:51:fb:
         fc:c3:a0:56:42:94:50:ec:fe:19:06:ca:5c:8d:51:6f:64:7c:
         bd:8a:32:1f:3d:22:b6:bc:41:e6:3e:ca:4e:53:23:e8:67:d1:
         be:3c:0e:96:89:ef:3f:62:01:f4:e2:69:67:a9:32:9d:a1:97:
         cc:65:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----