Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2NLksWdxEdpSGh4sLbPcMyIqPLY.cer
File:                     2NLksWdxEdpSGh4sLbPcMyIqPLY.cer (raw, json)
Hash identifier:          JJlTX2KLHTkE/WzhqlPujX+fhqUapVpFH7IIub4Sl/M=
Subject key identifier:   D8:D2:E4:B1:67:71:11:DA:52:1A:1E:2C:2D:B3:DC:33:22:2A:3C:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A67BCAD095
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/2NLksWdxEdpSGh4sLbPcMyIqPLY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 12:02:57 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.171.216.0/22
                          IP: 2a0a:e900::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715041460373 (0xa67bcad095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:02:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d8d2e4b1677111da521a1e2c2db3dc33222a3cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:88:90:40:f2:d8:13:30:5f:eb:6a:2a:80:
                    f7:49:81:58:66:b2:37:20:c1:7c:eb:23:b3:6a:b0:
                    3f:17:ea:4c:26:9b:18:ab:e4:cd:98:da:c2:45:e2:
                    8b:de:bb:91:ea:0b:ac:00:06:7e:12:9f:af:fc:07:
                    c3:6a:7f:92:95:48:58:09:8c:9e:f3:fc:56:a5:b5:
                    73:c3:a1:24:92:e2:3a:f3:f1:a6:3d:ce:9e:7e:4b:
                    ad:3d:d7:3f:4e:44:38:76:52:ad:cf:9f:d2:24:4a:
                    2c:46:a7:3d:80:7f:99:2c:a7:d0:d3:62:27:b6:11:
                    c8:34:69:93:0c:03:bf:f3:5f:95:9f:74:45:9e:00:
                    5f:f2:d6:09:9a:38:8b:7f:d3:81:b4:32:29:24:14:
                    42:6b:e7:0c:df:53:27:5e:51:6b:8f:e6:71:81:1f:
                    9a:67:5b:13:eb:18:a0:07:a0:33:c0:21:d6:04:1b:
                    b6:f6:2f:eb:b1:be:d2:e1:a3:f6:eb:16:65:b8:b9:
                    1c:89:36:46:31:6f:61:95:93:65:cd:35:d4:60:36:
                    51:40:71:e2:58:8b:b4:94:67:a6:7a:94:5d:18:fd:
                    94:81:9b:49:6c:b9:b4:c2:f5:27:1c:4b:7b:5d:6b:
                    1b:14:bf:6a:7d:dc:5c:ce:35:07:39:6c:77:db:98:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:E4:B1:67:71:11:DA:52:1A:1E:2C:2D:B3:DC:33:22:2A:3C:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/561b1d-9f7f-47e8-8798-2cb8fe15d32e/1/2NLksWdxEdpSGh4sLbPcMyIqPLY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.216.0/22
                IPv6:
                  2a0a:e900::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:c2:51:70:c6:d2:ce:53:c6:34:82:c9:02:f6:23:88:b6:
         f3:cb:7e:b2:6b:c1:d1:f7:8f:4c:13:ea:f5:7c:e7:53:04:36:
         98:2a:6c:c8:63:35:ab:f6:99:29:3f:f7:dd:17:0b:93:cc:dd:
         b0:34:63:81:8a:3a:e7:07:97:76:22:25:68:81:f4:59:e7:f5:
         b3:95:b2:6d:7f:54:14:a0:bd:59:ce:32:76:e9:bb:ef:40:5d:
         e5:be:10:19:4f:32:08:51:c4:b6:c2:50:a4:6c:d4:c5:ee:96:
         0c:bf:f6:5a:cf:88:f7:41:07:76:87:4f:2c:a9:d9:bf:72:73:
         99:0b:a1:e4:0a:97:61:b7:e9:1a:0a:b6:a9:df:27:fd:1f:2f:
         46:72:78:6e:e6:0c:46:d6:1d:42:27:2b:84:4a:20:ad:a3:77:
         5c:36:c6:81:ec:45:55:1d:50:61:cf:e4:4a:5a:ef:a2:47:cc:
         0f:33:c1:b6:d5:ca:35:0d:8c:a9:45:28:16:de:2c:83:5b:3b:
         38:93:dc:49:ef:c0:e4:9c:0d:bf:e2:60:d6:a3:92:31:a2:24:
         fb:69:cf:c2:39:ae:f2:76:42:eb:47:51:cc:5b:67:a8:6a:9f:
         bd:eb:9e:f0:01:db:b4:8f:ec:20:80:3e:1f:18:f9:e8:0e:95:
         67:7d:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----