Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer
File:                     5luh6QGtWet75MM3UjaJelTEMp4.cer (raw, json)
Hash identifier:          CkUP/k3GU42WrP6oa+kSw2PKS9wRXlfTRjAbQWfcvsE=
Subject key identifier:   E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A982AE06DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:58:06 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 212215
                          AS: 212356
                          IP: 193.162.35.0/24
                          IP: 2a10:fd00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728041916123 (0xa982ae06db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:97:b6:fa:fe:6c:34:92:37:dd:50:77:8c:
                    c7:67:c6:67:32:2f:bb:9f:fb:dc:42:de:5f:d5:26:
                    03:94:27:de:a1:1e:3a:ba:7b:f1:dd:f6:88:ba:d2:
                    af:6a:fa:77:67:17:a0:33:29:85:2d:fd:37:04:3d:
                    8e:c3:5e:82:23:5d:68:51:41:63:8d:5d:a7:fa:6d:
                    7d:49:c0:93:51:68:9d:58:b2:b7:29:c3:1c:ec:c2:
                    e5:dd:08:28:a9:21:35:ef:77:bd:c4:a5:85:5f:6d:
                    c9:e8:04:d0:bd:17:29:50:01:5a:3b:c7:3b:8c:c2:
                    6c:49:5c:1b:f1:c0:a1:14:92:46:77:d1:be:17:b8:
                    37:9f:5c:c8:7a:ba:96:f4:14:a8:08:47:4e:1e:f2:
                    e7:bc:13:ad:38:58:26:99:7b:f1:2a:1f:c4:e5:0d:
                    90:93:97:e9:99:cc:3b:bd:58:67:3a:7d:a2:a7:59:
                    5e:56:c9:9a:8c:08:d7:29:76:05:21:78:32:db:b3:
                    fd:60:d0:3e:ea:2e:7c:cc:82:8f:c1:80:72:de:f0:
                    a1:e7:ad:4e:ca:cb:65:0d:3a:33:7f:08:a6:ef:9b:
                    91:b1:58:5f:22:43:fa:b0:cc:ab:e8:27:91:0f:de:
                    48:1f:19:14:c7:8d:95:bc:7d:24:10:26:06:4e:f6:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.35.0/24
                IPv6:
                  2a10:fd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212215
                  212356

    Signature Algorithm: sha256WithRSAEncryption
         09:08:34:fa:f9:15:35:f3:24:8b:3a:97:d0:bd:f0:05:1b:7c:
         df:ab:74:99:ef:89:2f:e1:5f:c8:0b:7d:ae:c8:81:d6:18:19:
         49:fe:a1:b0:bb:e5:81:a4:56:cb:46:f7:f2:ec:9a:e5:e1:46:
         57:92:02:56:cb:f4:a9:4a:c6:49:eb:88:f7:24:5b:3f:2d:9b:
         79:38:fc:11:f3:be:d0:a2:df:cc:a1:a6:fe:3a:43:cc:b9:02:
         61:ca:0a:84:b5:96:40:7f:3a:64:0c:c4:be:50:af:0b:43:3a:
         4f:2c:7b:f6:75:83:8e:63:b7:71:93:cc:dc:f1:88:a1:86:b6:
         e9:6d:16:63:7e:d6:71:cf:79:9b:d8:92:fe:8e:84:15:8c:ea:
         cd:7c:72:c8:01:53:b0:81:9e:7e:6c:c4:34:11:8a:12:84:ac:
         b7:3c:f1:8b:32:57:c7:a6:f6:29:63:33:c0:38:79:27:d8:87:
         a4:eb:92:d0:a2:c6:fb:c8:91:42:91:7b:e8:ca:d6:21:c1:88:
         17:7c:00:6b:45:57:2f:d1:03:a9:74:fd:10:2c:10:0a:f4:f9:
         41:37:ba:11:47:36:83:82:27:32:cb:e7:62:d8:f3:a8:f0:7e:
         56:15:db:2c:e2:e1:c7:00:35:1f:df:73:b5:0e:31:44:62:b5:
         88:b6:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----