Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7QT1NZewV3WZ8PPmT8GWGKDgN3c.cer
File:                     7QT1NZewV3WZ8PPmT8GWGKDgN3c.cer (raw, json)
Hash identifier:          uLPGvI8csmu4xXNt22q8ulLCH7b6LwF8V+z7o6ZfOzo=
Subject key identifier:   ED:04:F5:35:97:B0:57:75:99:F0:F3:E6:4F:C1:96:18:A0:E0:37:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AB26C85CFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/04ba8a-6374-43d9-b589-213e5183301c/1/7QT1NZewV3WZ8PPmT8GWGKDgN3c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/04ba8a-6374-43d9-b589-213e5183301c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:05:47 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 51821
                          IP: 91.216.62.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735090072829 (0xab26c85cfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:05:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed04f53597b0577599f0f3e64fc19618a0e03777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:86:ce:11:e7:96:7d:32:52:56:ef:e8:4c:
                    84:37:bc:9f:f9:66:9b:34:92:a2:15:d5:c2:55:be:
                    4b:89:48:2b:84:89:7f:41:45:cb:a5:88:fc:d3:24:
                    d0:bb:80:20:b7:70:49:64:90:b6:d6:da:49:03:48:
                    97:b6:4a:c2:0a:de:9b:5f:47:7e:f5:a0:22:82:9f:
                    bd:e1:fb:fe:5e:0c:c5:96:16:b7:18:09:20:74:88:
                    16:81:a7:55:5f:fb:8a:6f:99:07:ca:68:81:c3:08:
                    5f:19:dd:f4:eb:a6:2d:3a:e3:a3:5e:7a:4a:3a:be:
                    02:bd:2e:21:ea:3f:78:c7:73:17:73:cf:d1:b0:53:
                    86:e2:40:ba:b4:c7:77:34:70:fd:06:a4:9a:97:53:
                    b9:98:d3:90:87:c9:0c:93:b3:f4:bf:2b:13:cc:7d:
                    f4:ef:08:15:d0:5b:dc:8e:e6:c3:17:e3:e8:49:aa:
                    03:26:c2:aa:ac:bd:79:ed:92:c0:56:a3:ad:12:3e:
                    03:72:5f:af:57:c7:0e:2f:9e:45:37:0d:64:b1:e2:
                    7b:f1:82:1b:d8:8a:2b:eb:c2:c8:e2:dc:7b:92:ea:
                    1d:3d:0a:16:4e:aa:e3:de:e9:c5:6f:54:11:ad:62:
                    a1:0a:8d:cf:50:28:7d:4b:ba:51:68:43:38:14:c8:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:04:F5:35:97:B0:57:75:99:F0:F3:E6:4F:C1:96:18:A0:E0:37:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba8a-6374-43d9-b589-213e5183301c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba8a-6374-43d9-b589-213e5183301c/1/7QT1NZewV3WZ8PPmT8GWGKDgN3c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.62.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51821

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:a7:49:7c:f0:c9:cc:db:12:b5:0b:04:40:88:ec:1e:15:
         19:cc:d7:80:91:40:6c:17:2b:69:84:33:97:dc:1a:21:78:4a:
         43:ed:8d:34:44:d2:cb:1d:8f:31:9d:9d:4f:d2:6b:34:ab:e3:
         42:a5:d2:ad:d8:11:b2:ea:b6:d1:b1:21:34:cb:ec:da:4e:39:
         04:49:21:0c:e2:0b:b6:a8:40:1d:79:59:13:3a:70:36:8f:39:
         fb:72:5a:c7:79:e1:9d:9b:99:a5:a4:d1:46:ae:86:45:5d:d5:
         df:1b:a8:c6:90:b4:c5:47:36:f8:68:d3:d7:80:4d:ec:8a:73:
         6b:9f:d2:dc:1d:d2:90:46:5b:40:c1:41:20:1a:c7:6d:df:c0:
         52:43:8a:eb:7c:36:20:65:d1:ff:f9:65:6b:ed:0a:62:92:49:
         1e:d7:cb:4a:e8:e5:0f:f6:64:1c:1a:3f:0a:1b:5c:42:13:74:
         54:47:f8:c7:a3:96:75:77:8d:31:c0:b0:0f:25:d7:90:8e:2c:
         9d:79:80:ab:6e:e3:06:b5:88:5a:24:d0:38:5e:30:88:2b:5c:
         5d:71:97:f6:c9:95:b1:14:09:5b:18:81:47:03:5b:35:14:70:
         7d:05:2a:6f:20:83:12:fa:c7:cd:f4:03:33:9b:80:db:fa:f1:
         67:05:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----