Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer
File:                     4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer (raw, json)
Hash identifier:          qFLaLSyStKvuIYKAqycH8IS20PPIQZm85iZdE/ZqqLw=
Subject key identifier:   E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF785955DA2C6BE6828736B157BC573
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/4GAl9h8CgnMqFbS5KFDrzaR0lYU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:36 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.183.0/24
                          IP: 2a11:c9c0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:85:95:5d:a2:c6:be:68:28:73:6b:15:7b:c5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e06025f61f0282732a15b4b92850ebcda4749585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:91:39:58:ef:33:6d:76:0d:00:5d:d1:a9:
                    c1:52:a3:8b:d9:a8:90:5e:d2:11:09:a1:7e:92:ab:
                    66:52:58:56:f2:9c:e6:84:d1:cd:e0:ca:96:f8:81:
                    6f:50:2a:cb:2e:02:f1:3d:6f:b9:0b:30:ac:7d:fb:
                    1d:0b:42:b0:41:a8:0b:93:bf:20:7f:09:39:12:4f:
                    a8:99:97:7b:95:70:1f:6c:60:da:b6:09:1d:de:20:
                    fa:a3:30:11:1d:a4:55:69:33:f6:09:a8:a6:bd:16:
                    2e:0f:95:24:77:93:21:3c:54:a0:9d:2f:82:d2:0f:
                    0e:46:e7:88:13:3e:73:54:1e:98:82:fa:7a:c8:c4:
                    48:cd:6c:b8:1f:db:17:e9:c7:4c:b7:25:5d:db:85:
                    f4:9a:d9:29:5e:7f:06:e9:b8:eb:7b:6c:54:62:c3:
                    6a:b2:dc:0d:c7:e4:06:21:35:d8:3e:0b:9c:fc:e8:
                    cd:57:ac:27:b4:89:64:34:5a:9c:12:32:75:1e:7f:
                    a1:da:0b:40:8e:54:4f:72:35:30:a1:4b:06:d8:77:
                    2d:dd:b9:5e:4f:89:df:97:68:17:38:ae:25:07:44:
                    51:06:e6:d5:7a:12:3f:4b:24:20:82:dd:fb:18:b1:
                    06:5c:56:f0:5d:86:0c:bb:1b:2f:66:72:4a:4c:63:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/4GAl9h8CgnMqFbS5KFDrzaR0lYU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.183.0/24
                IPv6:
                  2a11:c9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:4b:a4:1b:87:b8:77:5c:f4:69:f0:28:44:c2:07:2c:04:
         38:e3:df:98:b9:c9:73:15:e1:66:29:f5:1f:62:14:07:ac:29:
         93:d9:35:44:85:ee:db:12:ec:7b:2d:74:9c:cf:1e:e1:9e:c3:
         bd:f3:12:5c:82:6e:a7:d0:69:2a:5a:e3:56:eb:f5:14:8b:09:
         5a:ea:2e:ed:04:26:ab:c6:e2:c7:c1:98:3f:bc:ea:fd:89:92:
         b5:7c:c4:c3:5d:e4:2b:af:27:92:c5:e6:a0:74:fb:34:ff:98:
         30:97:cc:a1:bc:a0:22:92:e4:75:e7:59:62:c6:82:06:cd:f4:
         3b:5f:4f:8a:5b:cc:8a:99:c6:ac:0c:30:f4:63:52:81:47:93:
         ee:b7:c8:da:13:e2:42:03:60:5d:37:d9:4b:1f:e6:ee:7f:b4:
         e3:8a:e2:83:aa:d1:eb:07:bb:4e:e9:d9:3a:41:04:b1:06:3a:
         72:7b:26:59:e8:67:b5:95:57:32:5e:de:9f:a5:3c:73:b6:93:
         e1:1a:0f:bb:17:40:0f:c5:69:ae:a0:8d:2b:3b:72:e3:d2:b2:
         62:81:c0:19:e0:70:44:0b:9a:98:78:e2:d2:f3:27:25:a5:77:
         a6:9d:5c:cc:ac:70:91:80:4c:3d:7b:e1:21:ec:91:85:a7:92:
         c9:1e:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----