Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
File:                     6s663cAhDsbySQXR-c68s-DAEsg.cer (raw, json)
Hash identifier:          QL4ZP1Po0FTjThU1DE345T5mwsffdg/FYFntYeDnaQA=
Subject key identifier:   EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9CE4DECBAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:56:12 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 195.85.201.0/24
                          IP: 195.85.205.0/24
                          IP: 195.85.207.0/24
                          IP: 195.85.216.0/24
                          IP: 2a07:af80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673854704556 (0x9ce4decbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:56:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:eb:3d:3b:2b:4f:76:e5:8d:6d:eb:40:29:
                    27:99:35:21:ae:f7:32:7a:45:28:0c:f6:83:d4:fa:
                    0d:8d:f5:79:9e:fe:d8:ad:f9:2e:f6:f6:02:09:a4:
                    29:24:95:70:9a:e5:68:0f:8d:79:e1:aa:db:23:9a:
                    fe:85:5e:86:aa:e0:60:21:24:50:c7:e8:a1:89:cb:
                    5e:71:a8:d1:de:08:6b:7a:ef:61:1a:38:48:54:a2:
                    15:5b:1f:5a:0d:39:2b:72:6c:5d:a3:0c:f3:c2:4e:
                    a0:76:ba:0f:ff:5e:94:9c:fa:d2:6f:a5:83:67:76:
                    37:09:ab:b6:fa:50:c4:70:47:d2:1f:bd:07:20:18:
                    ae:3d:c8:e2:44:6e:d1:f3:86:9f:4a:71:82:3d:59:
                    e8:0a:61:0c:3e:f8:be:d8:d0:26:4d:87:39:81:90:
                    fa:26:97:b3:68:9d:90:22:30:33:e9:4b:99:55:76:
                    62:88:1f:69:a6:c7:78:66:c3:2c:8f:d9:e1:90:93:
                    76:bf:12:79:ad:96:54:88:60:95:d9:d6:de:54:33:
                    35:06:e4:a9:58:5a:a4:db:a9:ae:cf:2a:2e:99:28:
                    48:19:a2:58:87:b4:9b:79:ef:67:b3:4a:27:b9:c1:
                    4e:cb:f1:10:d5:04:88:b6:96:ae:b8:91:e4:70:78:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.201.0/24
                  195.85.205.0/24
                  195.85.207.0/24
                  195.85.216.0/24
                IPv6:
                  2a07:af80::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:24:bb:c1:0e:be:4d:76:da:52:88:a1:29:c3:6b:b2:fc:a4:
         ab:7b:4b:ec:3d:4f:14:e1:74:0a:b6:7f:e0:e0:2f:40:73:3c:
         27:a5:52:67:34:80:60:45:85:84:dd:10:60:bf:1e:4d:0c:79:
         3f:08:3a:37:67:eb:99:06:24:e3:d3:98:c1:a4:4b:37:46:57:
         9b:e8:d9:ed:31:93:e6:a0:44:0f:d3:66:07:fe:1a:51:94:0f:
         e2:b6:ba:95:44:8e:4f:cd:43:91:1a:5c:e9:68:bb:e3:03:ba:
         f4:35:01:88:ff:0c:1e:1c:05:ac:0a:ce:f1:76:68:b1:c8:2b:
         98:6b:4a:ab:ad:91:24:cc:47:8e:d6:df:9c:f2:07:07:23:91:
         4e:b0:d5:f5:c1:f2:ee:56:e9:96:79:60:ef:d5:ce:de:8c:fe:
         f8:ba:10:19:d9:cb:ea:e0:31:a9:d4:bb:32:ce:0f:09:09:b8:
         05:8e:9d:ad:3e:89:b5:4f:cf:78:79:08:85:58:1c:b9:1f:0c:
         6c:75:12:fa:7a:0f:d4:04:40:f7:7a:e4:3b:ef:42:87:08:a3:
         79:bd:0c:db:48:dd:ab:27:53:a1:37:8f:83:fd:23:28:8d:4a:
         25:a4:10:a2:a1:3d:95:18:0e:ee:e8:13:97:f4:23:71:65:71:
         db:00:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----