Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7_KsBPsz-XaQTqjFrjP91dTKj90.cer
File:                     7_KsBPsz-XaQTqjFrjP91dTKj90.cer (raw, json)
Hash identifier:          9aIoF0eT2ejT/1joPUO/c+6MyMf4HRgQXiMeS5POXxk=
Subject key identifier:   EF:F2:AC:04:FB:33:F9:76:90:4E:A8:C5:AE:33:FD:D5:D4:CA:8F:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AC197C483E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Jan 2022 11:49:08 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 5.252.132.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739161950270 (0xac197c483e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 20 11:49:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eff2ac04fb33f976904ea8c5ae33fdd5d4ca8fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:f2:cd:93:ec:26:0b:23:ac:4d:79:64:94:
                    dd:fc:c1:b9:21:93:cd:25:dd:1b:e7:94:e6:47:4b:
                    07:3f:b5:50:34:6a:6b:56:db:d7:e0:e6:f6:c8:66:
                    3b:a0:4d:64:4a:bd:c9:96:55:25:38:3b:10:1b:30:
                    45:b9:b3:14:8c:eb:41:c7:fa:19:09:15:ff:a6:4a:
                    f8:00:32:8e:82:fb:ae:8a:ca:59:0a:26:ae:b4:bf:
                    e1:10:5b:a5:cf:b2:01:39:cc:75:c1:5f:a7:19:32:
                    90:3e:13:58:6b:d7:69:ed:b7:b8:96:7d:cf:bd:45:
                    79:2f:0b:a4:a3:14:ee:2c:3b:e2:5e:7b:a3:51:09:
                    5f:1a:7c:35:e9:6d:a9:2d:53:f6:06:18:a4:01:d9:
                    ff:2a:fd:ad:82:6f:ec:54:11:84:0c:8a:95:db:80:
                    94:4d:b9:34:a5:35:c6:0a:14:c2:31:dd:e0:d1:9b:
                    b4:6a:87:eb:19:d3:8e:6e:21:30:27:f5:5e:9d:57:
                    17:8e:b9:f3:68:a7:8d:43:ee:37:e2:d8:fb:50:fd:
                    c9:89:4f:8c:24:25:80:94:3d:0d:41:ec:83:d7:98:
                    1a:9d:5f:cb:00:4a:c8:b2:11:b1:18:ce:db:5e:33:
                    8d:fc:00:52:a7:ba:c0:eb:06:5a:91:2a:d1:d0:98:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:AC:04:FB:33:F9:76:90:4E:A8:C5:AE:33:FD:D5:D4:CA:8F:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d73a3-ed48-4c73-8d52-8452009e4538/1/7_KsBPsz-XaQTqjFrjP91dTKj90.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:53:e0:be:d3:d8:cb:81:c6:96:8c:b3:bf:12:00:16:aa:99:
         87:64:3b:ba:e1:76:24:d8:bd:44:de:8a:47:df:79:bf:7a:53:
         df:70:34:10:64:4e:f9:6f:3e:f7:7f:76:00:2d:d1:4a:7c:33:
         bd:27:bd:df:b1:64:79:ef:bb:23:b8:5a:9b:c4:f8:55:e7:83:
         dd:af:fe:5c:41:58:96:66:33:7a:9b:0e:d2:bf:76:a1:23:a2:
         1d:46:02:3b:39:60:fe:03:f4:e4:4a:da:96:5d:65:96:6d:e5:
         4d:8b:02:69:41:32:5f:bd:f6:7e:c5:23:a1:f1:b1:9f:ce:60:
         d7:d3:db:9a:67:7c:14:4e:f5:54:b5:ba:d4:65:f6:9c:2f:21:
         3e:56:27:3c:d7:d1:a9:a5:0b:0d:0e:d9:cd:df:e2:f9:92:8d:
         76:62:4a:19:15:0e:37:46:c4:64:3b:fd:e3:b7:4d:85:0b:97:
         fb:b2:ec:92:34:b0:fa:37:28:49:f4:5b:1e:17:ee:86:bb:c2:
         32:ad:fd:0b:fa:1b:37:b2:78:86:53:2f:b1:69:30:c7:b7:53:
         a6:9e:bc:a7:2d:0c:90:93:84:48:8d:14:34:10:1f:8f:bd:af:
         09:6b:93:a0:eb:6c:0d:c4:ab:61:07:31:00:2a:e9:fc:a0:5b:
         8b:a9:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----