Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8svotu3iVz1CmcTfLg2V7Ia6sbs.cer
File:                     8svotu3iVz1CmcTfLg2V7Ia6sbs.cer (raw, json)
Hash identifier:          7OQjD9KHV4Bc8XZI74Kbtpd3+0mnw6elOTpaX7nOBA0=
Subject key identifier:   F2:CB:E8:B6:ED:E2:57:3D:42:99:C4:DF:2E:0D:95:EC:86:BA:B1:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A3BA113E9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/e43da9-0b1e-4f66-8b65-f4bdfc7ab7c1/1/8svotu3iVz1CmcTfLg2V7Ia6sbs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/e43da9-0b1e-4f66-8b65-f4bdfc7ab7c1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 09:56:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.156.40.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703201361566 (0xa3ba113e9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:56:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2cbe8b6ede2573d4299c4df2e0d95ec86bab1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:5a:51:81:7f:07:b8:45:69:ba:49:d2:e5:
                    14:83:29:5e:a5:79:7c:6e:9b:8f:3b:19:62:f0:e9:
                    10:2f:43:b4:25:c1:46:25:49:7a:0b:c6:c7:b5:15:
                    0e:fc:bd:64:27:0f:af:2a:62:10:fa:f6:ab:85:fb:
                    1e:88:ea:74:be:96:ef:59:ce:43:1c:51:8e:76:1a:
                    8f:45:6d:1b:4e:8e:16:42:3c:7f:57:71:92:fc:e2:
                    4e:a7:98:05:59:6d:d5:3c:a4:42:d8:c5:ed:e9:b7:
                    eb:2c:15:52:e9:71:f0:c0:33:16:13:cf:6a:90:9b:
                    cb:b1:2e:36:c5:6f:cc:66:27:15:06:4a:72:c4:0e:
                    23:6a:20:fd:23:f1:68:04:fc:c0:61:bd:04:7b:18:
                    69:87:12:01:6f:30:e2:a0:a2:9a:40:e9:73:eb:28:
                    b2:8b:e1:b0:90:0a:99:5f:60:55:de:a9:6d:49:85:
                    87:fb:c2:05:98:f3:7a:93:f8:7c:0d:59:f4:ec:74:
                    7d:f9:67:55:e8:31:47:5f:e5:2f:d9:23:4e:45:65:
                    74:29:79:19:4e:7b:5b:a1:c6:2d:97:2d:f8:fb:7d:
                    87:6a:ad:2b:3b:d2:14:9e:bc:77:ea:dc:0d:0e:ea:
                    9d:8c:df:dd:59:7b:33:5c:1c:7b:8c:90:aa:54:74:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:E8:B6:ED:E2:57:3D:42:99:C4:DF:2E:0D:95:EC:86:BA:B1:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e43da9-0b1e-4f66-8b65-f4bdfc7ab7c1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e43da9-0b1e-4f66-8b65-f4bdfc7ab7c1/1/8svotu3iVz1CmcTfLg2V7Ia6sbs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:23:8b:b7:17:88:12:c5:b4:cd:4f:b4:c3:e5:fd:d4:59:
         fe:c7:76:05:17:2e:31:30:59:74:5d:9b:5b:6f:cb:d5:3a:9c:
         87:81:f3:e0:6f:c7:b2:08:f3:50:04:74:ed:32:22:2c:56:e0:
         8f:8e:1a:57:c1:74:52:19:83:19:a7:6e:4f:62:1e:2d:de:bf:
         6b:09:f2:9d:a7:0d:18:a0:88:1c:66:b4:81:c0:96:a0:38:56:
         84:cc:cc:20:42:33:cb:e9:46:98:ec:c4:4d:01:89:34:10:f4:
         4a:d3:87:4f:b0:d7:51:c3:a2:15:dc:97:d2:b5:da:ba:31:3c:
         06:a6:51:a4:28:29:8e:63:18:d6:93:81:a8:c9:b9:b8:85:b7:
         53:3e:e3:96:bf:26:a5:52:74:08:8f:5b:a6:cf:65:e5:6a:98:
         1f:f0:b9:ee:91:eb:40:aa:e3:23:d6:7d:c2:d3:c9:03:3b:e9:
         a1:f0:84:fc:c1:d9:d5:8c:c4:cb:84:1e:48:60:46:8b:2d:ef:
         51:c7:bc:9b:9a:fd:1c:64:cc:37:1b:8f:54:3b:f4:cd:fd:35:
         36:47:87:87:8f:2f:d4:2c:bd:2a:5e:ac:e8:06:b1:21:57:04:
         4f:79:cc:03:ad:ee:94:99:3a:00:70:08:8c:0a:84:5e:f4:a7:
         25:7b:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----