Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
File:                     6rZxTXGRgev8zV3N5s1ildd43tk.cer (raw, json)
Hash identifier:          4gg5j0t7ybm7BLAGMbxDVngjNWaQcy+8+FpZX61PXsA=
Subject key identifier:   EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F40C1277AC0E5292300CBB380569B18
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:33:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 188.244.118.0/24
                          IP: 2a11:4c40::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:40:c1:27:7a:c0:e5:29:23:00:cb:b3:80:56:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:33:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:16:1d:a7:4e:b5:70:e0:fb:cf:c7:69:9c:
                    93:76:4e:ef:ca:34:f2:b3:12:4d:ca:84:b3:e0:e5:
                    2a:37:bd:e1:10:ff:ec:f6:e9:99:50:f7:38:fe:59:
                    0e:75:02:9c:52:93:90:02:39:47:1d:01:dd:8f:2b:
                    2a:f7:f0:d4:a7:24:81:79:0e:ad:b0:1b:95:37:17:
                    ee:48:75:e7:15:99:0d:55:46:0e:20:04:6c:3e:d9:
                    0b:80:c3:83:28:21:8f:7a:ab:b5:ab:1b:b1:5e:0a:
                    b7:18:ba:73:90:ef:bb:a6:6f:6f:1b:95:91:29:f7:
                    1c:3a:cc:b8:82:ce:9e:d4:fc:83:a0:ed:de:73:1a:
                    3f:3a:2f:0a:49:4b:c0:5b:d4:ba:1a:93:69:8a:c1:
                    f5:3a:6a:50:25:ed:e7:78:2e:b7:25:7b:3d:98:e8:
                    6a:56:42:89:05:b9:41:34:81:50:6c:31:af:a5:13:
                    28:a9:00:34:06:34:91:7c:d5:4a:18:cf:0c:0c:96:
                    be:7c:21:5e:e6:06:64:18:65:23:6e:2e:c0:94:a4:
                    20:e6:45:30:4e:27:0e:ab:a4:65:06:14:9d:0a:b5:
                    ad:0e:47:6a:31:bd:2f:34:86:72:08:07:8f:66:ff:
                    21:18:75:f8:91:85:bb:66:8d:15:9b:80:54:75:ac:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.118.0/24
                IPv6:
                  2a11:4c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:5d:91:a2:db:24:f0:2b:23:7f:97:d7:62:51:29:9b:08:
         1b:04:30:c3:43:e7:98:d3:ef:e8:b7:45:96:83:36:fa:b7:c9:
         6e:2d:42:ec:b0:f1:5c:e5:3f:3c:63:7f:a0:7b:15:23:2a:25:
         f1:5a:90:3f:79:17:ba:84:93:72:b0:dd:35:a8:be:56:0c:9d:
         54:00:72:c4:cd:22:22:71:3a:d6:e2:9a:91:63:0b:c3:54:7e:
         db:19:f1:4d:e4:62:bd:e0:46:26:b3:3a:01:90:c8:8c:32:e0:
         dd:2f:95:22:b1:be:ba:f7:1a:33:86:74:14:91:94:64:67:56:
         d7:8b:a7:30:37:5b:18:d7:bf:9e:92:27:a3:85:2a:65:6d:a8:
         c5:80:3e:a6:3d:f2:1e:91:21:61:49:ca:e3:7d:43:f4:da:20:
         94:32:40:02:ea:ad:e5:e8:33:c1:2f:34:fa:c0:e4:e9:8e:4c:
         33:d8:53:e2:a0:d1:53:2f:1a:0b:63:4a:7b:f9:ab:8e:0a:84:
         e1:55:f8:c1:0c:8c:3b:32:4c:0e:26:e9:bf:bf:d6:2b:ce:b6:
         6e:87:bf:5f:61:59:35:b6:9a:3e:65:46:79:00:3c:05:8a:14:
         b3:76:b4:fc:1e:b0:c6:33:76:cd:f7:a9:b0:a4:7b:fa:20:7e:
         ca:0f:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----