Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7MlHlV43wyQHE6BjZ7DLTm84sfM.cer
File:                     7MlHlV43wyQHE6BjZ7DLTm84sfM.cer (raw, json)
Hash identifier:          jnGh+MSTu+FJ2Ba4zMnnaA628ZIeCqdwFk7tjZ48JP8=
Subject key identifier:   EC:C9:47:95:5E:37:C3:24:07:13:A0:63:67:B0:CB:4E:6F:38:B1:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A180F3484D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:57:18 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 85.235.72.0/22
                          IP: 2a0d:b740::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693653162061 (0xa180f3484d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:57:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ecc947955e37c3240713a06367b0cb4e6f38b1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:24:8b:8e:5a:95:6b:47:bd:89:84:80:06:
                    e8:18:15:ec:ca:e3:a1:c2:36:d7:60:53:f2:62:75:
                    d6:e3:3e:3d:d8:23:2c:94:56:20:c5:10:d4:2b:dd:
                    af:c1:f6:15:04:c9:eb:ed:97:e6:92:26:16:20:6d:
                    ae:1f:ca:af:61:35:57:b6:ac:b5:83:2a:d2:03:37:
                    ea:52:1e:9f:44:26:09:f4:51:83:d4:d7:89:cf:c5:
                    b9:57:c2:8e:24:24:4c:16:fb:96:54:be:a5:8b:f0:
                    66:5f:85:94:92:e8:37:19:39:7a:00:20:ae:43:3d:
                    a4:fb:8f:7c:49:6c:6a:df:ca:a7:01:f0:1c:00:3e:
                    f6:e0:cc:19:59:28:7e:bb:6c:b2:30:f4:be:44:39:
                    6c:73:cc:14:22:c6:92:63:88:fa:8e:5f:75:fd:10:
                    50:10:87:96:dc:03:3a:bf:34:83:60:ac:86:19:b0:
                    ad:71:95:c6:fe:6e:79:1d:eb:d7:eb:56:08:fc:4f:
                    b0:73:76:e4:8f:6e:28:29:cd:3d:bb:f6:d9:28:fe:
                    b9:45:13:06:c1:af:ad:8d:12:93:33:0f:e0:14:f7:
                    05:b0:6f:1e:00:11:b3:6b:8c:3d:53:28:75:a5:05:
                    72:19:79:53:93:56:0b:92:dc:9b:b8:48:d0:b9:3c:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C9:47:95:5E:37:C3:24:07:13:A0:63:67:B0:CB:4E:6F:38:B1:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.235.72.0/22
                IPv6:
                  2a0d:b740::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:90:43:29:e5:a8:ee:4f:8a:fa:fe:d9:55:44:5c:19:42:01:
         c4:83:5e:24:64:7c:69:d0:43:04:a1:40:ae:16:f2:c8:db:d3:
         bf:47:67:a4:05:72:b8:9a:67:b0:79:45:2d:a0:c8:7f:97:f0:
         2a:60:a9:ea:61:e7:7f:ee:7c:73:0d:f4:7e:6d:7a:eb:63:59:
         64:61:d2:a3:c1:a3:26:8e:a7:96:c5:27:70:ea:a7:80:bb:7a:
         0a:bd:4c:ff:be:25:bc:e4:dd:10:6a:6d:31:68:f1:14:1b:da:
         ea:2a:44:11:97:47:8d:9d:90:f9:f4:1a:00:9e:91:5d:eb:3b:
         91:98:e3:3e:f5:fe:c1:b6:cd:a9:25:a8:96:f9:a8:fb:f9:0e:
         41:1a:d9:4c:f9:f1:74:f6:13:84:9c:29:9f:f6:6a:d4:58:0a:
         3b:14:03:7b:76:e3:0f:4d:12:d7:7c:66:4c:02:dc:f2:c8:82:
         36:2a:08:2b:91:19:6f:88:c4:7c:1a:78:15:ff:77:88:90:db:
         d3:ee:4c:56:61:2b:fa:69:28:da:b2:98:73:51:91:e9:c2:d3:
         6b:d0:28:59:0e:66:7f:03:18:af:47:d5:9e:41:04:29:01:47:
         c0:4e:c1:13:51:1e:90:a7:0e:38:63:ee:6b:0d:73:9c:32:50:
         4d:91:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----