Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3QmtgBBlvGtmNuJx-OeVzXGqjrw.cer
File:                     3QmtgBBlvGtmNuJx-OeVzXGqjrw.cer (raw, json)
Hash identifier:          uiEHG5uPWwMcv+8IrMBciswlQoDqVSE+GnCMZyKW3iA=
Subject key identifier:   DD:09:AD:80:10:65:BC:6B:66:36:E2:71:F8:E7:95:CD:71:AA:8E:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0A69332FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/3QmtgBBlvGtmNuJx-OeVzXGqjrw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:59:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 209186

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689989432062 (0xa0a69332fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dd09ad801065bc6b6636e271f8e795cd71aa8ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:7a:86:5a:30:ef:1e:65:97:3e:67:2a:45:
                    6a:4a:b3:50:93:00:d6:de:da:be:a2:e2:fc:b4:6c:
                    6e:0f:6b:fe:fd:6f:ac:74:63:8e:bc:54:3f:dd:63:
                    9c:0b:ff:a8:3f:6c:42:d8:a8:db:ee:38:b3:9b:88:
                    d3:1d:04:bc:38:73:64:a9:44:9c:90:a6:12:74:59:
                    14:7d:a5:53:b5:dc:65:d6:92:8d:d9:dc:9a:b3:08:
                    05:77:5c:ed:9c:d0:88:9e:46:78:28:98:7b:57:bc:
                    65:c6:a7:81:ef:a4:32:ad:63:f0:4e:8e:24:29:f4:
                    57:29:20:3c:f7:3b:b6:19:0a:7b:09:f2:74:73:10:
                    25:fa:d9:fa:3e:ff:b7:a8:01:6e:03:52:46:ba:f0:
                    86:86:ea:07:d7:cf:b3:e4:38:f5:ce:97:6c:56:68:
                    f4:94:13:26:81:ff:3b:ea:94:43:ea:42:3f:20:95:
                    60:90:f1:ef:c0:c7:04:68:9c:ff:f8:03:52:57:3e:
                    15:d7:93:88:88:cc:ba:1d:ce:4a:33:22:47:91:d9:
                    a8:05:8b:4b:68:11:f5:74:dd:17:30:37:b0:4b:bb:
                    5e:39:85:34:7a:84:aa:3f:85:40:e5:67:e4:e2:87:
                    7e:9d:2e:a6:d8:6f:d1:d3:5e:cf:92:5b:6f:dd:b4:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:09:AD:80:10:65:BC:6B:66:36:E2:71:F8:E7:95:CD:71:AA:8E:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9c9692-da1f-4fb1-a5fc-2789790c2ecf/1/3QmtgBBlvGtmNuJx-OeVzXGqjrw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209186

    Signature Algorithm: sha256WithRSAEncryption
         67:89:eb:8a:ff:4e:cf:d4:53:85:e7:59:e8:61:61:8e:59:5a:
         7d:44:cd:09:23:75:d2:f7:e2:a3:e1:fb:8a:8b:be:1c:fb:c9:
         99:57:82:58:15:bc:6b:47:af:21:02:f9:2f:c0:98:f3:6b:52:
         85:ac:b5:87:8c:75:70:d5:d7:06:94:38:0e:1c:99:8d:81:f7:
         57:ab:45:57:dd:03:75:2d:11:66:b9:76:48:eb:98:52:54:ef:
         77:5c:bb:7e:18:ee:5c:ad:ec:c3:b8:20:f3:33:b3:54:bf:ba:
         db:3f:99:df:b8:b2:c2:27:6e:0d:27:96:fa:df:df:18:9f:78:
         a6:db:48:2e:05:ee:30:14:ed:55:b3:dd:a4:2a:ef:c1:0c:09:
         3a:0a:ab:6b:c0:8d:71:0a:d5:0a:8f:39:6c:53:ea:cd:90:37:
         21:ec:8b:0b:c7:cf:8a:df:51:b5:8c:57:27:50:4e:22:db:4b:
         0d:fc:3f:37:47:df:03:66:94:21:f3:48:ee:e3:b4:36:d8:50:
         f7:a2:e7:b0:70:b6:57:07:57:96:39:70:ef:d2:80:fb:d8:d5:
         b0:6e:5b:8f:55:20:23:53:6e:2b:0a:37:b2:f5:40:94:7e:81:
         ca:78:96:98:8d:82:09:df:6f:99:48:a9:8b:8c:05:7d:83:f8:
         d2:ab:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----