Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63AkG5zzB3yGUFRnoYsgx0qZZ4M.cer
File:                     63AkG5zzB3yGUFRnoYsgx0qZZ4M.cer (raw, json)
Hash identifier:          GgHtntH/EqxK9WB+UcWM9uu8zRGfGWnvEtR8THLVCPo=
Subject key identifier:   EB:70:24:1B:9C:F3:07:7C:86:50:54:67:A1:8B:20:C7:4A:99:67:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9CAD69E1A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:54:03 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 193.27.86.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672924295588 (0x9cad69e1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb70241b9cf3077c86505467a18b20c74a996783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:9b:44:ba:9c:9d:3a:8e:72:9e:4c:5a:b4:
                    58:61:0f:2b:e0:45:d0:6d:df:6a:c0:e0:a3:22:0f:
                    d2:f0:a6:0a:eb:9b:04:95:c9:e4:2b:4d:bc:c0:ac:
                    08:39:df:59:a9:a2:91:f0:0b:9b:b3:b5:01:d4:52:
                    6b:91:22:5e:8d:fd:52:22:61:c7:3f:8a:1f:a3:88:
                    6f:76:f1:5b:ae:26:45:49:ec:01:ed:b8:14:59:eb:
                    3a:dc:2f:d6:85:e8:52:fe:39:41:c7:6a:e5:20:13:
                    16:e6:64:5d:fe:bd:08:c0:b3:8d:0e:1a:5d:48:bd:
                    80:4a:be:04:cc:85:21:22:68:79:e9:b8:d7:b9:39:
                    e7:94:0b:96:7f:09:74:dd:c3:3e:14:c5:23:65:4a:
                    02:c0:bf:d3:39:87:a0:49:f2:1e:57:fb:0d:eb:83:
                    98:87:b6:8e:57:9f:2e:c8:f7:58:45:7c:a9:62:86:
                    82:25:df:94:1a:85:42:8c:e6:24:ed:d5:c4:c7:07:
                    e8:f3:fd:75:13:00:f6:db:e3:25:fa:c8:08:a4:74:
                    b0:e4:06:23:39:c9:7a:d4:4a:a4:a1:72:42:f1:f5:
                    f6:b8:cf:36:e9:8a:cd:81:da:db:22:7f:b9:4b:0e:
                    dd:84:c9:7d:78:25:85:4f:03:e7:13:72:10:05:90:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:24:1B:9C:F3:07:7C:86:50:54:67:A1:8B:20:C7:4A:99:67:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/66ee08-cb49-4b5e-828a-8c7db7537928/1/63AkG5zzB3yGUFRnoYsgx0qZZ4M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:c8:7c:e1:58:ff:81:14:80:e1:f8:3a:d8:98:bd:b5:28:
         ee:1f:a0:2f:38:3b:9b:ab:47:7a:e0:87:a4:bd:f9:76:1f:c7:
         fb:01:03:f2:41:e6:4a:2a:a9:77:6b:b3:88:6b:74:ba:8b:65:
         e8:56:34:d7:f1:fb:81:aa:61:20:91:c2:48:f7:03:dd:e4:12:
         da:0b:6a:ce:9e:3c:48:09:ae:70:bc:a6:f1:aa:47:ed:9b:86:
         df:12:b6:5f:cd:81:33:55:81:72:66:24:40:e0:20:c4:f2:c4:
         8e:24:ba:26:0c:05:ed:7c:b8:d2:99:0f:9d:0a:cc:c7:95:52:
         1e:80:ea:bf:53:49:7c:be:22:75:38:aa:a0:b8:8d:d9:d4:33:
         77:cc:38:13:4d:35:1e:fa:50:3d:67:0c:64:a0:c0:0c:5a:93:
         9e:94:66:98:19:54:37:9e:97:7c:c1:d7:f8:25:9b:52:02:dc:
         c7:8b:4b:3e:e8:e5:bd:93:9b:ec:bf:2c:d5:f0:2e:5d:72:3e:
         57:44:05:95:64:14:23:35:a1:7e:fb:e3:e7:41:dd:24:a6:34:
         30:b2:6b:35:ce:d3:01:4a:eb:73:a5:31:0d:09:6d:4f:44:a1:
         fa:57:53:da:4c:98:87:4e:3b:99:e0:e6:29:50:4e:10:40:bf:
         0a:6d:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----