Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44UGNJxssOxG3uvOtFHZSYLH7ZE.cer
File:                     44UGNJxssOxG3uvOtFHZSYLH7ZE.cer (raw, json)
Hash identifier:          qO35RBjzXi2sZVSbQnDm0ewMTXOGQZI1rcywHFrLHxE=
Subject key identifier:   E3:85:06:34:9C:6C:B0:EC:46:DE:EB:CE:B4:51:D9:49:82:C7:ED:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A99A08BA96
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/a54b77-78f6-460b-8f99-ba1704c483bb/1/44UGNJxssOxG3uvOtFHZSYLH7ZE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/a54b77-78f6-460b-8f99-ba1704c483bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:59:04 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205359

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728433736342 (0xa99a08ba96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e38506349c6cb0ec46deebceb451d94982c7ed91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:df:9f:4d:77:15:10:51:0a:6e:ec:56:0c:
                    89:ae:34:1a:a4:8b:ed:c8:67:4d:ab:a8:11:bc:72:
                    48:1e:f7:02:1f:73:fd:0e:e1:f5:7f:a0:c9:8f:82:
                    91:d7:be:76:f7:f3:92:7c:f8:ed:50:7e:32:48:44:
                    22:5e:82:e1:70:21:cd:9b:7e:7a:40:a9:f0:36:14:
                    da:45:2f:c9:e3:cb:29:fc:2f:84:ff:31:57:1d:fe:
                    15:06:35:ba:95:13:8c:80:b5:f3:be:58:8d:44:4c:
                    fe:4d:f1:c8:be:26:04:2a:5f:97:e7:00:9c:22:96:
                    6b:03:4f:27:05:04:1a:69:0a:75:de:fe:fa:59:26:
                    f6:e4:af:e2:a2:88:65:e0:5d:d1:44:a8:16:f0:43:
                    dc:fd:92:2c:ff:fb:88:41:8a:c6:be:a2:c0:f1:c4:
                    46:02:f1:42:34:7b:38:49:27:6b:9e:5d:1f:81:c9:
                    a3:c8:f5:27:18:30:3e:7e:fc:29:60:ab:0f:6d:94:
                    0a:82:8d:1f:ef:36:55:e9:ed:cb:23:c9:78:64:1a:
                    51:f9:c5:1f:a0:29:7a:92:23:27:0c:7b:0f:60:00:
                    1b:5d:c2:13:59:23:39:60:19:30:eb:29:8c:f6:e8:
                    82:ae:4f:5f:57:f9:89:b7:93:d1:d1:a4:d9:8f:9c:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:06:34:9C:6C:B0:EC:46:DE:EB:CE:B4:51:D9:49:82:C7:ED:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a54b77-78f6-460b-8f99-ba1704c483bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a54b77-78f6-460b-8f99-ba1704c483bb/1/44UGNJxssOxG3uvOtFHZSYLH7ZE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205359

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:0d:f2:6b:50:a5:19:56:82:41:cf:2f:71:aa:cf:11:d2:
         2c:cc:da:a5:fe:6e:e3:a8:8c:c5:00:f3:7c:af:45:42:eb:36:
         91:55:7c:54:11:57:91:a4:01:c7:79:23:4e:70:11:6b:7a:8e:
         32:52:cd:34:36:a0:5c:fa:79:b0:84:c9:87:67:f4:40:70:bf:
         4d:7c:a8:0c:b1:b7:a9:6e:80:e0:9d:0f:2d:17:a4:d7:56:c6:
         13:15:18:a4:70:2c:c0:2d:a3:2f:c6:40:64:05:df:92:f6:86:
         48:84:37:2a:41:af:68:39:5c:fa:a7:3a:4a:27:c7:1c:90:76:
         37:16:ba:27:ba:cb:53:98:b8:a1:3a:fc:dc:ba:87:ad:fd:7e:
         31:1c:5b:54:27:9c:5a:a9:6c:ea:71:8a:95:ed:39:31:81:1c:
         0f:da:2e:03:a8:ae:1e:1e:64:91:86:da:05:61:6e:21:2a:b7:
         fd:a7:7a:ec:30:c1:7b:bb:0a:26:d7:c5:7a:ba:1e:e3:ce:2a:
         b7:ed:f3:37:d3:fd:ee:77:f2:d2:14:8d:d2:d9:16:90:37:bb:
         98:82:c9:ad:23:27:b9:6b:b9:d1:83:b3:be:aa:04:11:df:99:
         6d:65:af:6b:7c:e6:02:ab:ea:7f:6e:67:e1:e7:aa:9c:18:b2:
         33:45:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----