Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3HlIOxy3Yc1rejZ0vxVOylnXTt8.cer
File:                     3HlIOxy3Yc1rejZ0vxVOylnXTt8.cer (raw, json)
Hash identifier:          IxC+bud/i/vtVClGRWZ2P6KxLUa/r4RZUTfWDxa7EtQ=
Subject key identifier:   DC:79:48:3B:1C:B7:61:CD:6B:7A:36:74:BF:15:4E:CA:59:D7:4E:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ADD05C2969
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 24 Feb 2022 15:47:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 44648

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746525043049 (0xadd05c2969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:47:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc79483b1cb761cd6b7a3674bf154eca59d74edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1b:8e:fd:a2:c0:f2:7c:e3:38:68:ae:4e:1a:
                    43:4c:41:69:c6:b7:bd:e2:ae:39:9c:0c:31:dd:b2:
                    d8:8e:cc:62:dc:a9:4c:11:8f:89:16:e8:54:04:87:
                    14:61:59:40:f4:4b:22:49:fe:aa:13:bb:53:1a:2c:
                    35:ba:11:c1:b2:5f:d6:ee:70:87:a7:62:a3:6b:95:
                    d7:74:88:8a:9d:4f:a8:a0:5d:47:a5:e5:ca:d4:29:
                    d8:67:2c:14:8a:0c:cf:33:95:f6:7e:d3:35:1d:69:
                    60:c3:55:f4:71:87:43:77:15:51:3d:d7:fa:51:83:
                    62:73:32:ad:b1:fb:9a:5e:d7:0e:11:61:92:02:d1:
                    50:15:5b:6b:c5:fb:aa:69:c5:4c:75:cf:12:5a:0a:
                    a8:91:05:d7:33:ce:4b:a9:48:f5:07:64:b4:54:70:
                    0a:57:82:09:a2:02:00:64:a0:82:fd:f1:9d:6e:5a:
                    ae:4a:04:33:8f:b1:66:6c:c0:b5:0f:b9:65:8a:8b:
                    2a:6d:dd:e2:42:c4:2a:5c:9c:17:bf:a0:71:f1:43:
                    95:02:b3:84:59:f2:61:39:dc:ba:d2:cf:58:fa:f5:
                    8a:6c:49:f5:6f:ef:c3:4f:39:1f:29:67:1a:af:19:
                    e5:26:d7:c2:1f:31:7e:d1:85:b3:ee:06:d9:8b:f7:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:48:3B:1C:B7:61:CD:6B:7A:36:74:BF:15:4E:CA:59:D7:4E:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44648

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:f1:9d:c2:5e:29:75:8f:b0:8f:66:ee:e1:82:5b:a6:1d:
         43:d5:3e:66:c1:f6:ee:35:e9:fb:06:07:9d:4f:9e:b3:c1:29:
         ad:d0:26:d6:98:b1:80:3b:47:35:33:84:bd:2e:c9:84:ee:e0:
         a1:17:30:a8:6e:4c:b0:11:b3:bc:ea:10:24:2d:75:e8:b8:69:
         6c:f1:3a:db:f3:a6:1a:d8:3a:39:64:5f:1d:b5:4e:3a:7a:50:
         a0:da:9b:b3:66:90:c7:94:0a:45:52:cc:38:a6:db:8f:c7:ee:
         eb:b3:7d:c4:d5:64:68:4b:12:34:01:11:73:4d:64:a7:a8:2d:
         07:89:94:48:e4:a7:11:cf:72:21:07:b9:aa:c3:c2:98:66:cb:
         b9:b1:b8:c7:5c:24:63:96:85:9c:75:2d:e1:95:ae:da:e8:11:
         32:f1:ea:1e:d7:ea:12:d0:f5:90:7f:eb:b0:2f:ba:6d:8d:16:
         0c:37:0a:1f:80:65:ce:b1:30:7b:62:61:6f:b7:c8:ce:78:fb:
         e7:25:15:37:1e:b2:7d:f8:a5:73:a8:7e:dd:b6:40:a6:6b:06:
         ff:3f:5e:a1:d9:19:5d:5f:ef:d5:f1:e1:63:90:6d:31:b1:b2:
         c7:de:a2:88:6c:80:89:bf:81:82:19:fb:9f:0e:d0:ae:95:42:
         d2:2a:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----