Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
File:                     15Oo1za-uSvhbRk7EB-TvlUyWRk.cer (raw, json)
Hash identifier:          Mz+X473m6LwLdGNE6fpvwsWudjnSBjL46P6vc7bQH20=
Subject key identifier:   D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AF0F8E32F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Mar 2022 11:41:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 5.180.152.0/22
                          IP: 45.12.12.0/22
                          IP: 45.145.96.0/22
                          IP: 2a10:4bc0::/29
                          IP: 2a10:8840::/29
                          IP: 2a10:bdc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751880254196 (0xaf0f8e32f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 11:41:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d793a8d736beb92be16d193b101f93be55325919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:e2:8e:f5:16:a3:bb:42:4c:ee:fb:a8:9e:
                    2f:e3:36:9d:f5:7a:b3:77:cc:eb:0f:c8:e9:65:96:
                    33:0e:ab:fc:5e:fa:b4:84:31:af:0c:d0:50:b7:a2:
                    8e:bc:da:33:09:7b:48:3b:37:bf:14:e4:28:a7:b7:
                    e4:1d:d6:f0:e6:a0:3b:d1:28:75:3c:d4:bf:80:f4:
                    90:9f:c2:9d:f2:a4:fc:2a:2f:65:59:74:dd:14:ab:
                    fe:cd:5d:b3:32:be:82:df:fc:06:00:fe:f7:8f:e1:
                    4b:f2:e7:b4:bf:b8:97:f2:62:8c:e5:12:89:35:6c:
                    99:4e:1d:ff:30:76:0b:1f:0f:b9:f2:5a:ca:b0:47:
                    98:95:c8:9a:43:6d:d5:34:80:d7:93:17:4c:47:04:
                    e3:04:5f:8b:23:5a:00:2d:b1:36:5d:b1:19:45:78:
                    a5:22:4c:66:b2:18:90:ae:d3:d2:ab:99:12:31:de:
                    e1:0b:ad:77:1e:6a:5e:c1:b2:4b:33:14:af:e3:bf:
                    9c:0e:08:9a:24:14:fc:09:74:99:68:f5:c5:f7:e1:
                    f5:77:47:6b:95:23:62:be:49:c9:40:cf:65:29:8f:
                    be:53:ee:67:82:52:f3:64:05:a1:64:26:81:e5:d5:
                    78:68:96:7f:f6:b6:6f:ba:88:6a:d8:46:cd:42:82:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.152.0/22
                  45.12.12.0/22
                  45.145.96.0/22
                IPv6:
                  2a10:4bc0::/29
                  2a10:8840::/29
                  2a10:bdc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:ea:d7:66:14:20:f4:4f:f5:02:34:b8:46:7e:1b:be:39:
         5d:90:3c:01:46:ca:b3:54:28:5a:eb:79:e4:99:e5:47:a1:6c:
         38:1b:ae:e1:28:ed:85:22:d4:3e:53:a6:0f:09:5a:2d:c1:6e:
         06:a0:51:e4:1b:c1:dc:f3:9f:66:d4:78:24:4a:57:58:ac:79:
         9b:1c:d2:bd:5b:0b:95:63:92:d3:0e:36:af:25:8c:9e:bb:88:
         ed:b5:cc:46:00:f6:e2:bd:ba:11:78:8f:8f:0f:eb:93:4e:c6:
         a6:63:33:ba:76:bd:0c:d7:98:54:c0:5f:b9:ca:2f:c2:40:a8:
         12:3c:86:13:5c:9e:e8:23:7f:af:d2:02:e1:f1:5b:39:c9:c0:
         a9:13:00:cf:75:ab:73:4a:5f:67:b7:b9:8d:44:7f:71:8a:54:
         24:b9:4a:66:d0:95:6d:59:d2:3b:b1:5d:eb:7c:3d:9f:1a:9c:
         85:9b:b3:5b:40:27:6e:da:c5:e4:5a:06:60:10:bc:21:a6:a0:
         bc:f5:16:f0:cb:cf:2f:db:72:e4:51:c2:4e:97:ec:25:0d:2b:
         3a:eb:05:b5:91:af:66:79:e8:53:6c:e9:52:9b:18:1b:7d:f2:
         ea:a4:70:dd:c1:fa:fc:42:06:5d:3e:f9:20:b5:07:05:4c:ac:
         26:0d:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----