Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1HDKxunkoagJpAZRN-zUyrOC4No.cer
File:                     1HDKxunkoagJpAZRN-zUyrOC4No.cer (raw, json)
Hash identifier:          41cP2Clyh+yjv/h05rMZKGjJ6x1fMvW/rKu3F6ci8Xo=
Subject key identifier:   D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0F12F3CB8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:03:01 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 39565

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691241172152 (0xa0f12f3cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:03:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d470cac6e9e4a1a809a4065137ecd4cab382e0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:43:ce:e7:55:58:e0:10:00:50:e2:1e:01:
                    37:df:95:e1:45:5e:23:b7:1c:1e:ca:b1:02:c5:bd:
                    02:f4:0b:86:97:a7:90:33:b3:1f:a3:2e:d2:7f:86:
                    dc:93:98:53:4e:f0:74:1d:a5:dd:11:7d:08:3b:2a:
                    47:7f:51:53:6a:f6:1b:18:d2:75:d1:5a:a9:18:4e:
                    48:27:56:e0:29:85:54:b8:96:1c:36:4e:aa:e0:89:
                    bf:69:0c:8d:ed:b1:a6:30:ca:da:55:f3:5c:47:41:
                    11:7c:97:5f:ad:9a:a2:e7:37:32:57:79:c2:b8:58:
                    37:23:ae:06:f1:af:dc:96:4e:ab:dc:27:d8:ec:42:
                    0a:22:00:42:7f:7a:e2:2f:66:fd:8c:85:8e:d8:a3:
                    6a:6f:90:76:d5:15:9a:d6:aa:54:d1:92:d9:2e:ef:
                    60:35:b4:76:bc:c3:e4:ed:68:4d:c6:ed:0a:44:92:
                    6c:fa:a9:83:44:ed:bc:3b:c5:dc:99:b0:e1:6d:67:
                    d1:91:96:5c:5d:02:08:27:96:3f:9f:1d:ae:a7:97:
                    7b:e6:30:b2:6a:00:d3:82:6a:79:9f:33:bf:1d:5d:
                    08:8c:2e:fa:57:ad:32:6d:b5:7b:98:fd:32:0e:26:
                    57:fc:98:ae:3e:cd:f8:22:88:1c:d5:89:f5:6f:e8:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39565

    Signature Algorithm: sha256WithRSAEncryption
         93:14:b7:4d:11:5d:23:98:9f:84:09:5e:ae:17:e7:04:fa:a2:
         c7:7a:8c:ee:65:6d:1c:5f:39:c4:24:4e:80:dc:f4:5e:b3:8c:
         77:2c:b7:3c:a1:15:43:41:a4:22:be:ec:da:3d:00:5c:42:b2:
         9b:ac:23:82:46:b5:21:37:3b:a7:81:83:f5:1e:37:58:65:5b:
         dc:fb:d1:91:02:cc:03:b2:83:e0:e2:ee:b4:b0:5f:b1:20:79:
         dd:a7:da:ba:11:b4:75:d6:98:45:9c:b8:15:64:ae:b0:22:a6:
         41:b8:5b:95:0b:a2:d9:c2:dd:21:66:31:22:6e:bb:ff:27:21:
         9e:35:1b:10:80:bd:c9:2b:bb:87:3f:d8:cc:01:8d:67:fb:2e:
         c8:18:84:45:b7:41:39:05:bd:e5:f9:22:a2:ad:4b:e8:26:35:
         75:8a:e8:a0:de:dd:cb:97:5d:79:d9:fc:35:15:73:1e:71:5a:
         ee:d3:5a:c7:cc:cc:45:fd:f9:2f:38:50:36:2f:62:ec:e0:26:
         c3:03:62:38:30:95:98:73:b3:8c:e0:1f:e1:b9:0e:e8:ae:69:
         d3:06:56:e2:ad:17:2c:0a:c9:ee:6f:5e:9a:3f:b3:3b:95:d9:
         55:19:8a:a9:de:27:3c:a3:58:a3:f6:9a:94:ec:62:6d:57:b7:
         38:66:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----