Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8MYFBA--3le-PFI1F_NbCIryRkc.cer
File:                     8MYFBA--3le-PFI1F_NbCIryRkc.cer (raw, json)
Hash identifier:          W0aiajX3kJjGq4W7jOFCEeR2+3zKXUWO8OFajDsRFY0=
Subject key identifier:   F0:C6:05:04:0F:BE:DE:57:BE:3C:52:35:17:F3:5B:08:8A:F2:46:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A93FE0AABA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:55:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.236.12.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726921161402 (0xa93fe0aaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:55:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0c605040fbede57be3c523517f35b088af24647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:e5:c5:44:58:6c:de:31:b2:5a:4a:3e:f0:
                    21:d3:58:fc:7a:0c:33:37:d0:85:5c:6e:75:e4:10:
                    13:d9:22:33:d6:69:fc:37:36:7d:d2:df:7b:79:96:
                    57:5e:d0:d7:d5:d7:7e:f1:d1:82:cd:c1:d4:f6:dc:
                    95:b2:89:48:ef:36:9f:fd:8c:dc:8f:ad:7a:6a:db:
                    cb:1b:5b:6a:04:be:4e:b3:9d:7a:c5:a3:4b:ec:59:
                    1b:60:44:2d:b0:56:22:a7:63:fe:31:7c:7b:69:19:
                    63:1d:ee:5a:ab:ab:6c:65:27:ed:5c:04:41:19:64:
                    9a:cb:64:3a:fa:64:22:df:78:21:3f:b0:35:ee:2b:
                    79:d4:f0:67:cb:95:a0:e5:24:2c:88:1a:ad:a7:cf:
                    e2:a0:49:4f:18:84:4d:35:2f:b5:6a:41:92:33:66:
                    d4:2b:db:15:af:02:d4:8d:5e:23:a4:3b:4f:9c:13:
                    ad:a4:c8:54:4f:6e:92:69:28:ab:23:d6:b7:a3:86:
                    47:08:6a:42:5e:eb:b4:ab:59:d9:9a:8d:1d:50:1f:
                    d4:8f:13:38:fb:e1:25:fe:be:de:f6:2d:75:c7:50:
                    e2:b1:0c:d5:36:55:ad:cc:3f:55:25:cd:60:00:36:
                    b9:ab:96:28:9e:0f:f0:5a:75:28:e4:19:59:4b:f4:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C6:05:04:0F:BE:DE:57:BE:3C:52:35:17:F3:5B:08:8A:F2:46:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0e1f2a-38d8-4a0e-aa28-e2ef03d74af6/1/8MYFBA--3le-PFI1F_NbCIryRkc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:35:27:59:6e:a0:14:68:75:34:cc:3d:80:78:04:6b:74:
         d9:ba:d2:23:43:fa:62:e7:f9:f7:b7:f2:47:22:0c:23:76:b3:
         a6:11:37:d2:79:4a:43:ef:d0:36:db:e8:19:b4:d8:c6:ed:a5:
         65:33:f7:bd:a8:51:7c:ee:b7:f4:77:89:11:1b:3d:64:42:00:
         56:c2:ea:b3:84:b1:87:09:21:e5:fc:18:07:33:34:06:69:4f:
         21:eb:e0:4b:64:25:bd:c2:34:eb:b1:8a:03:86:0a:8b:c7:d9:
         1e:43:b4:e9:af:63:aa:31:58:a6:b7:f9:5a:b4:e5:88:80:99:
         2e:91:5a:d2:a6:73:ee:ea:c8:f7:38:21:c4:f2:fc:45:2f:d4:
         9f:16:fe:83:9a:c7:50:66:c7:09:09:99:aa:f8:7c:32:5b:b4:
         d8:2b:1d:dc:11:d5:1d:c8:9f:d4:8c:c3:37:76:66:07:eb:6b:
         51:11:c0:2e:44:9a:aa:7b:60:ad:f8:23:2d:ea:d4:9c:1c:b6:
         b1:00:ec:2a:8a:a0:a4:21:91:80:c8:c2:17:35:d5:2f:8a:5f:
         d6:28:5a:64:a6:d2:67:76:6b:e4:a1:25:fd:68:30:6d:ad:5a:
         70:1f:57:00:f4:42:b9:7b:07:91:9f:31:9c:1a:df:11:53:80:
         b9:e6:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----