Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8r54vjUVrLCeWDF_BpUNjogfN6c.cer
File:                     8r54vjUVrLCeWDF_BpUNjogfN6c.cer (raw, json)
Hash identifier:          xmxqS41Y/UWomfy182XuHchhR0shEGZ8NpbQ7jOw8Bk=
Subject key identifier:   F2:BE:78:BE:35:15:AC:B0:9E:58:31:7F:06:95:0D:8E:88:1F:37:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A5B3A75C70
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/8r54vjUVrLCeWDF_BpUNjogfN6c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 11:05:08 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 195.254.144.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711683693680 (0xa5b3a75c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:05:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2be78be3515acb09e58317f06950d8e881f37a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:fd:27:aa:2e:ae:6f:b6:9b:2f:b9:e2:c1:
                    aa:e4:aa:17:53:44:c6:e5:56:92:05:10:6b:4b:54:
                    93:30:45:3e:a7:0e:79:4e:ca:ef:63:15:46:a0:cc:
                    0e:51:65:6c:0a:95:69:7e:1e:58:e1:9d:6b:93:53:
                    57:ba:73:65:27:4b:43:6e:8b:e8:64:40:81:38:5a:
                    e1:d8:bd:e3:6f:86:dc:a9:e5:c9:6b:57:fc:6f:59:
                    6e:4b:be:62:5a:f3:ac:1d:83:e0:e0:d0:0b:7d:f1:
                    bb:46:5f:7f:c2:8c:ff:a5:05:71:15:89:55:17:c0:
                    6b:4f:92:51:6b:f2:7c:2f:c9:53:3c:5a:8e:af:70:
                    8e:b7:0e:44:ef:ef:67:85:0f:66:d8:18:6c:72:b3:
                    99:61:4a:5d:8f:2a:ca:d7:d8:47:16:cc:79:f5:34:
                    69:ae:66:11:e6:96:f3:62:43:e1:55:7a:46:c3:5e:
                    2d:3d:74:d7:48:40:04:bc:9c:d7:39:5f:82:ce:f3:
                    f7:bb:ec:1c:6f:35:3a:0b:0a:24:26:3c:55:15:d8:
                    97:d1:50:3c:2a:ba:a3:4e:25:f4:78:d2:87:54:06:
                    f5:83:d4:ee:71:1b:dc:65:d7:63:c8:ab:bd:1c:0c:
                    10:8c:2c:41:6e:fe:aa:7a:5f:0d:38:39:33:34:92:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:78:BE:35:15:AC:B0:9E:58:31:7F:06:95:0D:8E:88:1F:37:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2e9c8d-0afe-4f34-ba6b-4fc4354d873a/1/8r54vjUVrLCeWDF_BpUNjogfN6c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.254.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:c5:39:8e:97:39:53:ed:60:34:fa:bc:0d:8e:84:fe:a0:
         5e:8b:f7:e0:41:44:96:6b:ca:b5:d2:50:d1:a8:9b:aa:f8:c9:
         3d:38:31:19:10:dd:d6:45:d8:0e:65:b2:d7:5b:a0:9a:19:c4:
         1b:d0:e8:36:96:8e:cd:16:cf:99:b2:2d:95:79:8a:59:bb:f6:
         06:6b:5b:21:75:29:b6:38:85:a2:fc:21:3a:60:eb:d9:ae:d8:
         7a:d7:c6:8a:64:a3:70:94:37:78:ff:b5:e6:80:d2:fb:91:a5:
         2c:b9:d2:84:3f:54:4e:74:cd:42:5e:f4:fe:68:ce:d3:82:e0:
         55:4b:53:5d:33:f7:ed:ac:23:28:64:0d:fb:ab:32:73:4f:2d:
         90:4a:e9:75:1f:a3:fd:0a:15:f1:12:c8:b6:f5:50:46:09:03:
         01:69:81:cc:a5:4f:72:40:50:10:ba:49:f7:2a:66:43:d5:f0:
         44:3e:2e:0e:6f:45:0f:dd:14:3d:ad:71:59:72:a8:57:9c:43:
         c9:aa:79:02:f0:27:03:fd:ed:ae:02:09:eb:85:8d:dd:86:be:
         b6:29:5f:d0:fa:80:b6:33:4b:98:a0:4b:36:1e:b1:e2:d2:61:
         33:ea:11:2f:e5:e9:3b:c8:06:79:d7:8e:56:23:5b:ca:99:a5:
         45:25:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----