Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5mXoB6mj47gAi3NQniRmWgNbIP0.cer
File:                     5mXoB6mj47gAi3NQniRmWgNbIP0.cer (raw, json)
Hash identifier:          bVWBxwbt0Vahfsoc34bLqBQZbozmEn+VAEKJ3vd7uBQ=
Subject key identifier:   E6:65:E8:07:A9:A3:E3:B8:00:8B:73:50:9E:24:66:5A:03:5B:20:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01851A9BEEA81B9C9940472B024609059053
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 16 Dec 2022 11:05:04 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a10:8d00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1a:9b:ee:a8:1b:9c:99:40:47:2b:02:46:09:05:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 16 11:05:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e665e807a9a3e3b8008b73509e24665a035b20fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:12:2d:73:f2:a7:ee:b4:9b:29:2f:86:f8:
                    c4:21:00:d1:a1:cf:62:2d:61:69:7d:5c:af:82:23:
                    0b:4d:0b:94:4e:e3:b5:1b:e7:49:87:71:63:62:98:
                    33:52:d9:16:a6:97:6c:5a:b8:54:2d:2b:78:3c:33:
                    09:fe:99:6b:e1:ca:cc:4b:b9:93:ad:dc:e4:59:36:
                    a3:c9:62:ef:34:dc:df:23:c2:39:11:bd:31:58:17:
                    9a:da:70:1d:3c:42:d1:fb:0f:8e:63:ce:af:37:81:
                    cf:62:2e:dc:26:73:72:56:6f:21:c2:5b:41:af:3d:
                    64:c0:57:2b:df:12:64:aa:f5:3b:49:12:cf:0b:c1:
                    43:99:2c:6f:a4:79:7e:d8:28:f6:ef:b2:5a:88:11:
                    90:6c:32:bf:bf:9a:78:5a:62:87:f4:57:e8:25:ea:
                    c6:76:24:80:54:26:35:ea:8c:a8:d5:45:41:73:7a:
                    71:5d:ec:94:6e:2c:f5:44:6f:d4:95:e1:ad:53:69:
                    2c:1f:71:6e:d7:45:b5:75:c9:4a:8c:ab:d8:8b:2c:
                    73:52:30:a6:8d:ad:ee:cc:57:df:3a:3c:b4:08:62:
                    b6:0b:f4:d0:f7:bf:63:fd:f2:97:0a:6b:a9:6d:6e:
                    f7:37:08:9d:e3:79:ce:4e:b3:76:0e:87:87:ad:29:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:65:E8:07:A9:A3:E3:B8:00:8B:73:50:9E:24:66:5A:03:5B:20:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1ac443-9a03-4fd5-8a88-662fc4051c54/1/5mXoB6mj47gAi3NQniRmWgNbIP0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:45:ed:51:1f:d1:5a:49:e0:4d:ae:35:84:93:52:ff:e1:12:
         6c:e6:11:4a:f2:2f:04:10:55:7a:66:a4:a5:bb:77:57:e8:85:
         59:b4:58:30:ca:bd:48:6d:7c:76:f6:ed:0a:e4:e3:17:6b:9b:
         99:c5:0c:c0:f6:d1:23:ce:f2:42:94:38:22:bb:73:cd:b8:7e:
         22:1e:a2:71:d8:e3:4f:b3:2a:69:ef:71:ef:fa:50:f3:82:66:
         73:95:b3:b5:52:3c:91:1c:3d:28:4f:a6:7c:41:9e:e6:f6:7a:
         cb:5f:f3:9c:93:4d:01:d7:dc:ec:bc:f5:4c:a3:ce:dd:4c:56:
         39:86:9e:4c:fa:c2:99:d1:33:e8:62:0e:12:e6:22:9c:a2:ec:
         4d:ba:92:d4:f5:4d:94:10:b8:e8:3f:ce:f7:a6:81:cc:15:d4:
         4a:0d:81:70:25:e0:40:b5:1f:dc:8d:40:df:2a:c8:40:ca:c2:
         51:8d:36:24:58:50:b4:77:ce:62:14:2a:8e:a5:d7:d6:20:1d:
         e5:8f:d9:3e:2e:1f:09:10:d4:36:8e:f2:4f:0e:28:d1:d0:92:
         37:7b:c5:0c:2a:be:6c:0b:9c:1e:f0:f8:c1:00:c2:0b:95:f3:
         4b:c0:f5:b5:3d:b1:f1:62:43:61:1d:a6:d9:cf:c4:e3:98:ba:
         96:a7:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----