Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer
File:                     3qVl-s_KijdP5vDNpHENUpBdrJw.cer (raw, json)
Hash identifier:          HapzJNCqKyN8FAErgDNEoCv/rXYubhhRXzqotgQwxew=
Subject key identifier:   DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B3766ACE90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 22 Jun 2022 14:13:17 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 197737
                          IP: 2a01:6de0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770785857168 (0xb3766ace90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 22 14:13:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dea565facfca8a374fe6f0cda4710d52905dac9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:b2:5b:b1:eb:06:24:ae:c7:53:51:24:4f:
                    7d:7b:29:e5:4c:ba:68:39:02:a7:6f:f4:b6:f7:8a:
                    76:83:5b:f6:f0:d0:05:b1:04:a4:36:de:17:8b:21:
                    b8:b9:ff:dd:05:34:d4:ed:a2:cb:2f:e7:d6:12:c4:
                    ba:44:ee:6c:40:b1:d0:ce:d2:1d:38:fa:f1:76:d3:
                    f9:9c:d5:0d:77:35:b3:7c:8b:dc:c8:b5:3f:9b:55:
                    62:71:a9:5a:a0:cb:a4:47:82:50:ad:bb:34:14:94:
                    cc:be:07:3f:c3:4f:29:05:12:3a:cd:7e:e6:be:ba:
                    4e:39:a8:23:b5:8d:00:c0:3d:bd:0d:74:75:80:01:
                    c1:eb:fc:b6:49:43:7c:46:17:c2:3c:36:27:03:df:
                    8e:b0:fc:cb:6f:7a:80:b8:3f:8d:16:74:99:26:56:
                    ec:4e:10:eb:92:cb:97:c4:8f:c8:1c:9b:c8:5e:8a:
                    a4:8e:18:03:88:f0:8f:2c:ba:93:dd:9d:5b:0f:c8:
                    66:87:48:36:c8:95:ef:7e:b2:3e:6f:a0:85:11:db:
                    7c:5b:97:93:81:ec:cb:3e:03:8b:4a:05:15:32:71:
                    f6:92:8a:e0:b4:6c:2b:b4:fa:0b:89:47:60:51:fd:
                    2c:46:5a:b3:ef:40:66:1f:a2:0e:43:e6:55:3c:1b:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197737

    Signature Algorithm: sha256WithRSAEncryption
         6c:36:42:44:07:69:8e:ef:af:fd:f2:eb:40:43:63:4f:8d:3a:
         76:10:43:cb:c4:e2:17:1d:58:e8:94:cb:6d:2e:8f:03:c8:f3:
         b4:48:0b:4e:1f:ed:7b:cb:87:f5:df:d3:23:d0:af:e4:35:3b:
         7d:8a:7d:83:47:5d:8e:58:f5:c5:ff:36:b2:96:18:99:19:13:
         ff:02:eb:a0:c6:8d:e0:91:0f:ae:3b:cb:61:91:fd:01:b0:9c:
         93:e6:fb:00:4f:57:93:07:55:fc:1d:e2:83:17:80:fb:f8:1c:
         d9:3a:df:08:11:a9:7c:6a:54:2d:3b:8d:a0:e5:15:5f:ae:85:
         27:4c:dc:49:48:a0:d0:3b:4b:a2:ae:30:c6:f6:02:20:21:a3:
         d0:1e:a7:43:f3:98:15:a2:32:52:68:03:91:82:fb:66:46:2f:
         8c:4c:0b:85:9b:ec:10:a9:30:a1:63:6d:ef:35:c5:87:88:0d:
         da:6e:7b:81:8b:88:c6:76:0c:3d:6d:24:8c:2c:97:d6:38:42:
         3a:b0:fb:62:8a:ab:c2:d6:72:fd:cf:8c:ab:c6:d8:56:0c:19:
         22:d8:88:14:cc:e0:28:16:15:9f:08:a0:16:53:67:58:c6:bd:
         c7:d9:76:b7:f1:a6:ba:24:14:51:1e:a5:dd:ec:a5:4c:32:95:
         14:58:0d:23
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIGALN2as6QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjIyMTQxMzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkZWE1NjVmYWNm
Y2E4YTM3NGZlNmYwY2RhNDcxMGQ1MjkwNWRhYzljMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAot2yW7HrBiSux1NRJE99eynlTLpoOQKnb/S294p2g1v2
8NAFsQSkNt4XiyG4uf/dBTTU7aLLL+fWEsS6RO5sQLHQztIdOPrxdtP5nNUNdzWz
fIvcyLU/m1VicalaoMukR4JQrbs0FJTMvgc/w08pBRI6zX7mvrpOOagjtY0AwD29
DXR1gAHB6/y2SUN8RhfCPDYnA9+OsPzLb3qAuD+NFnSZJlbsThDrksuXxI/IHJvI
XoqkjhgDiPCPLLqT3Z1bD8hmh0g2yJXvfrI+b6CFEdt8W5eTgezLPgOLSgUVMnH2
korgtGwrtPoLiUdgUf0sRlqz70BmH6IOQ+ZVPBuY7wIDAQABo4ICoTCCAp0wHQYD
VR0OBBYEFN6lZfrPyoo3T+bwzaRxDVKQXaycMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzA0NjE5Zi0yNWRlLTRkZTct
OTZlNi05YzAxMGU2YjZjMDgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMDQ2MTlmLTI1ZGUtNGRlNy05
NmU2LTljMDEwZTZiNmMwOC8xLzNxVmwtc19LaWpkUDV2RE5wSEVOVXBCZHJKdy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAKgFt4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDBGkwDQYJKoZI
hvcNAQELBQADggEBAGw2QkQHaY7vr/3y60BDY0+NOnYQQ8vE4hcdWOiUy20ujwPI
87RIC04f7XvLh/Xf0yPQr+Q1O32KfYNHXY5Y9cX/NrKWGJkZE/8C66DGjeCRD647
y2GR/QGwnJPm+wBPV5MHVfwd4oMXgPv4HNk63wgRqXxqVC07jaDlFV+uhSdM3ElI
oNA7S6KuMMb2AiAho9Aep0PzmBWiMlJoA5GC+2ZGL4xMC4Wb7BCpMKFjbe81xYeI
Ddpue4GLiMZ2DD1tJIwsl9Y4Qjqw+2KKq8LWcv3PjKvG2FYMGSLYiBTM4CgWFZ8I
oBZTZ1jGvcfZdrfxprokFFEepd3spUwylRRYDSM=
-----END CERTIFICATE-----