Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FgRnaPi9jNP_nTtV-f87yfllc0.cer
File:                     7FgRnaPi9jNP_nTtV-f87yfllc0.cer (raw, json)
Hash identifier:          X/WRAwyDCsTCJ7yK/EJlAFyFe02qWlnj/MezyHGqKKQ=
Subject key identifier:   EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AB49CE40F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/7FgRnaPi9jNP_nTtV-f87yfllc0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:07:24 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.217.52.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735677661429 (0xab49ce40f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:07:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec58119da3e2f6334ffe74ed57e7fcef27e595cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:aa:23:b1:a0:f6:68:f9:52:c0:0e:81:4b:
                    a7:e5:e4:01:64:29:05:16:56:ee:69:2a:63:32:45:
                    66:3b:d8:35:fa:f0:da:a3:c6:f5:92:2e:96:46:f4:
                    3e:b4:56:de:8a:8b:2c:af:68:9e:ef:63:d5:3e:42:
                    59:2e:ec:52:c9:93:e1:ec:a5:41:95:ed:0c:4f:70:
                    17:c2:93:cb:be:2c:04:fd:80:c9:2e:e4:1c:e7:57:
                    1f:fd:ca:3e:d3:06:86:4b:67:98:b1:09:12:62:20:
                    da:d7:f0:ca:10:f7:02:9e:76:ee:4b:4b:d9:9e:e5:
                    ee:58:04:01:6c:86:ba:b7:fe:c7:dc:e8:15:f6:44:
                    a6:09:60:17:c4:3b:2c:22:04:31:e7:84:aa:77:67:
                    46:96:be:54:e9:73:3d:6f:ff:79:bc:3d:db:2c:02:
                    db:54:70:8f:52:80:fa:21:47:93:6a:90:42:01:bd:
                    b5:91:1c:03:8c:0e:bd:66:2a:fa:f3:ad:94:ad:c1:
                    41:19:a2:b4:39:11:2e:a3:b7:a7:4a:58:6a:d9:40:
                    b2:06:c2:8a:f0:01:e7:4a:ab:6c:59:99:b3:49:a3:
                    60:aa:83:81:36:0b:b1:8f:fc:3b:1f:1b:59:84:79:
                    b0:45:ee:c9:fd:ee:21:0e:6a:c4:6c:94:c7:22:71:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:11:9D:A3:E2:F6:33:4F:FE:74:ED:57:E7:FC:EF:27:E5:95:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/02916f-7731-4bb6-bf44-9cd4c6231bdf/1/7FgRnaPi9jNP_nTtV-f87yfllc0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:39:e7:8d:a8:a7:d3:cd:f6:96:02:03:6b:b8:9b:35:d0:
         a7:a9:37:e5:b3:ae:99:0e:b2:80:65:a7:44:a3:bd:11:81:d3:
         bc:91:31:40:65:6c:8e:2c:f0:b3:11:6b:e8:58:e9:d6:e1:4c:
         93:6d:db:51:d7:87:8b:1c:8b:46:7a:56:c6:d2:15:ee:84:9d:
         30:62:d8:d5:07:49:d7:3b:3e:a6:d1:6e:5c:66:08:d4:67:dd:
         22:f9:11:b2:14:25:6b:99:f8:c6:a1:5b:70:60:11:48:2e:66:
         06:c6:25:85:7a:a5:17:f1:e4:da:ca:51:42:b2:b2:5b:7f:bf:
         61:1c:c5:2d:ac:fa:1d:ca:b9:11:ae:ee:62:5b:41:5a:53:bc:
         fc:2a:c5:b5:2a:17:b9:98:7e:71:a0:01:8f:2c:48:fc:d7:51:
         48:3d:11:18:d1:4c:d5:5c:b5:aa:74:03:7e:8f:f6:de:96:1c:
         67:4f:a3:33:7a:c9:b4:7d:a2:65:d7:dd:10:73:52:32:92:f9:
         ad:86:8a:a7:26:25:d5:60:dc:2d:68:cc:d4:8c:a2:05:0c:29:
         ae:c4:1e:27:44:75:41:36:08:c5:dd:f1:e3:b7:04:3c:a6:a3:
         8b:dd:87:73:9c:88:d6:cf:08:db:e7:ec:f4:76:b9:30:b4:c3:
         2d:b0:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----