Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
File:                     7oeoFd918q19IuC-v3bzjEmz_8U.cer (raw, json)
Hash identifier:          zxaO6Wyi30PexNDXtiZkG9DrzKPp2/pggh9M0XR+DwE=
Subject key identifier:   EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A9D01A9392
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:01:43 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.139.100.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729340875666 (0xa9d01a9392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:64:fe:bf:8e:ed:a7:ff:bb:a5:f3:9b:93:
                    ad:cf:c9:07:07:e5:02:c2:05:13:46:08:62:77:31:
                    c8:2e:44:85:bd:06:57:d1:95:4a:0b:eb:53:22:c9:
                    d5:87:d4:ec:10:5b:86:ae:b5:ec:7f:85:96:3e:f2:
                    99:60:ac:f9:0e:62:a5:0a:27:c8:0a:06:08:80:d7:
                    64:8a:8e:8e:3a:7c:4d:16:9b:71:ac:95:49:35:63:
                    29:93:81:cf:74:63:a2:0c:37:d5:a6:a0:0f:73:ea:
                    83:8d:75:ea:0b:80:97:da:cf:41:f3:3d:02:73:d8:
                    56:9f:9c:73:66:ca:e0:f8:37:6e:22:43:7c:84:e0:
                    f2:d6:f7:0a:37:aa:40:65:87:0a:7d:30:dc:c3:eb:
                    bb:05:a1:35:47:c8:35:5d:33:b7:77:d1:e6:31:f4:
                    ff:4d:74:34:8d:b4:41:26:33:3f:7b:b1:0c:1e:94:
                    4a:28:31:6b:75:dd:0a:b9:ee:1e:c7:70:c0:d9:e6:
                    f0:cf:ac:26:62:8e:59:39:5c:50:92:77:2f:b9:52:
                    56:d1:8e:c9:f1:f9:54:a4:e8:91:91:28:94:fa:d7:
                    9b:ee:49:42:ae:db:8f:8d:a4:7e:b1:c0:cc:be:62:
                    0c:fb:0f:5f:17:22:ff:80:90:a1:90:20:62:c1:3f:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:da:62:45:33:23:6f:f5:89:e9:f3:1b:b3:53:6d:9e:5b:21:
         5d:8d:3b:d1:e1:e1:c8:31:62:98:ed:c2:ca:43:04:43:2c:dd:
         74:16:a4:ae:1b:fa:f9:b2:a9:9a:3b:72:79:b1:b3:a8:35:cc:
         92:05:19:ba:38:b6:d9:a0:89:1d:7f:21:c4:9d:b3:9d:25:4f:
         16:5c:4b:15:ae:c9:c4:5c:2f:91:f6:84:b3:f1:66:be:84:4f:
         ee:fd:f1:52:87:4e:c6:67:2d:0f:00:bd:04:29:af:69:d3:b0:
         05:47:26:44:5e:a8:43:1d:cf:3d:51:45:c0:5c:99:92:f3:7b:
         7f:32:2e:d5:fd:4c:e3:8b:eb:1a:4f:9b:65:ba:a1:61:29:18:
         eb:b9:0f:6d:51:fc:c1:0c:84:4f:a4:25:3f:6d:8e:67:db:14:
         0e:f9:9c:ad:c2:42:45:4c:12:3e:27:9e:0d:02:83:aa:fc:7b:
         d4:d0:01:66:c4:ed:85:ea:bc:51:d4:17:71:0c:c0:bf:ea:ff:
         08:47:88:82:0d:48:ae:53:ce:83:72:f2:ee:42:f4:5b:34:fe:
         fe:74:c8:0e:dc:17:e7:52:d6:d7:14:f1:f9:bf:80:71:70:50:
         35:68:82:f6:6d:f5:40:6e:93:ab:0a:fb:b4:6d:34:59:ae:b6:
         4c:49:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----