Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6k8FZJRWIv_c5sMRJsuxNKzXEm0.cer
File:                     6k8FZJRWIv_c5sMRJsuxNKzXEm0.cer (raw, json)
Hash identifier:          DJRzopo50k1rRE0X8oqIxuTp69OOEhjD8KB1f3Ehet8=
Subject key identifier:   EA:4F:05:64:94:56:22:FF:DC:E6:C3:11:26:CB:B1:34:AC:D7:12:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A080C81911
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/ecad1b-48bf-4964-86f9-48d6965e5ea9/1/6k8FZJRWIv_c5sMRJsuxNKzXEm0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/ecad1b-48bf-4964-86f9-48d6965e5ea9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:58:30 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2001:678:ae8::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689355364625 (0xa080c81911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:58:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea4f0564945622ffdce6c31126cbb134acd7126d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:86:a1:23:8b:bd:e0:e0:7e:30:d2:89:ff:
                    4a:85:bf:18:78:c3:b0:9f:1f:27:21:71:7c:03:f6:
                    1d:73:da:03:61:37:69:30:77:d7:ec:3c:1f:48:62:
                    4d:f8:39:46:4e:22:7c:2b:87:74:55:23:f6:dc:e2:
                    72:69:84:12:e8:8c:3c:e1:2a:8c:ae:40:cb:f9:ed:
                    e0:b1:52:66:15:60:66:5c:ce:aa:c0:40:52:c4:a1:
                    e7:7a:e2:58:a9:6a:cc:29:ed:a7:5b:8a:f4:3a:d8:
                    9d:49:1d:20:4b:eb:b2:a7:45:a5:08:dc:49:57:36:
                    ce:cb:ef:54:30:f8:eb:17:ea:12:a2:6d:35:98:60:
                    77:2b:a7:05:8a:e8:55:27:02:d2:67:e2:d2:6a:d9:
                    40:f7:bc:76:07:e5:7e:e9:85:18:e8:57:48:c7:35:
                    2d:d7:5d:a8:f5:e4:91:e7:09:c8:3d:95:b0:8e:95:
                    ca:fc:8c:dd:82:de:fd:8d:d1:48:8d:d8:91:d1:67:
                    8a:5e:19:a9:e6:69:a3:12:23:51:2a:9f:c7:de:da:
                    7b:cc:7f:0a:d6:f8:74:9b:1f:32:f0:f9:bb:8b:5a:
                    d2:6f:42:9f:73:a4:e8:c9:e0:3d:a5:23:73:dc:63:
                    97:3c:3a:05:69:9b:fe:7b:23:85:c3:50:69:c8:87:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:05:64:94:56:22:FF:DC:E6:C3:11:26:CB:B1:34:AC:D7:12:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ecad1b-48bf-4964-86f9-48d6965e5ea9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ecad1b-48bf-4964-86f9-48d6965e5ea9/1/6k8FZJRWIv_c5sMRJsuxNKzXEm0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ae8::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:67:38:ce:02:3b:fb:46:2f:29:7a:3d:7d:4a:7e:cc:ba:
         ef:bf:3b:ab:8f:44:1e:bc:df:9e:83:5f:ae:6e:38:b3:ac:01:
         b8:26:19:dd:a8:d4:9c:a5:5e:85:a8:c1:92:a9:ef:93:83:a7:
         94:4b:c3:ec:0e:dc:9f:f0:c7:a9:b0:20:52:64:64:62:72:83:
         2d:11:01:12:d9:76:3a:83:59:ed:fc:35:06:4d:4e:8d:55:fc:
         1f:26:83:9f:58:0a:89:56:f9:6e:03:a5:3f:5a:a3:38:c0:ab:
         84:27:aa:c5:23:d3:d5:c0:3a:c3:cb:1d:ff:d4:0d:34:70:7e:
         da:29:32:fa:65:76:2b:09:ce:20:a0:57:87:61:ae:cf:df:cc:
         66:01:19:63:30:e1:3d:73:89:99:e4:b0:8d:11:5c:ff:26:ed:
         2d:04:53:40:8f:8a:66:25:17:99:1d:70:3e:9a:81:70:00:0f:
         e8:16:1c:1f:ae:f5:fa:19:7a:f0:20:6f:3a:32:bd:a8:32:87:
         04:6f:d1:51:d8:e2:bd:ae:e9:09:c7:4a:14:f4:41:f9:55:35:
         6e:b2:31:e7:2d:fe:57:19:da:98:94:2b:c5:a7:c3:da:b6:c2:
         f9:0d:70:63:26:30:71:8d:53:6e:51:e4:7d:12:ef:41:5a:6e:
         39:2c:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----