Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
File:                     8t0hgRDW7hhEyEnmcvZhj7rflhU.cer (raw, json)
Hash identifier:          9X5t0vFt3kfTUdZwWjOBI6GNXHQIbpJbgkauz76xU5A=
Subject key identifier:   F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65B7F1F0ACDA66E6DF3F6E072C17CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:58 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.247.78.0/24
                          IP: 2a11:bd00::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:b7:f1:f0:ac:da:66:e6:df:3f:6e:07:2c:17:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2dd218110d6ee1844c849e672f6618fbadf9615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:e6:88:10:ee:61:e5:66:56:2d:2b:79:31:
                    03:95:d2:74:90:4d:cf:09:dd:01:66:d0:1d:ee:62:
                    c8:0d:12:fb:03:76:33:0e:70:eb:3c:38:e3:2e:a7:
                    e0:fc:84:cb:72:ef:0d:20:ee:cc:53:2b:22:ab:01:
                    e7:53:a3:be:4f:93:df:bd:34:64:07:05:d6:0e:89:
                    c9:01:23:d4:1e:a1:fa:e4:42:01:66:32:99:c3:ec:
                    1a:c2:06:da:c7:e2:04:04:0b:bd:60:e2:e7:7f:6a:
                    14:a5:68:11:bb:18:0b:0a:57:c0:9e:0c:72:69:b6:
                    42:64:ce:33:71:f0:19:19:fa:92:d6:73:69:a0:04:
                    5d:3a:d9:ce:8f:1c:79:f2:3f:ec:c4:3a:85:47:da:
                    50:de:82:7b:c5:41:00:9c:0d:b5:0c:44:64:48:bd:
                    13:8c:49:05:5f:10:33:3e:82:f7:2a:e3:09:e0:d6:
                    c7:dc:6d:3c:d8:8e:32:6d:6e:8e:f8:34:d0:52:aa:
                    d1:14:8f:43:fd:56:9b:c7:8d:ca:3b:dd:58:03:fa:
                    d3:d5:44:2e:01:40:1a:44:0a:b5:19:8b:0d:53:98:
                    e1:5e:ce:39:82:b5:e3:d8:2c:d5:81:04:79:09:46:
                    57:ce:2a:63:53:d5:f9:43:2c:a3:d9:3d:dd:ba:79:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.78.0/24
                IPv6:
                  2a11:bd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:0e:ec:83:3f:a0:4f:63:1a:44:37:b9:78:27:9d:7c:67:
         a3:d3:67:bd:4d:2d:8d:ea:d6:b3:87:a0:4d:7c:01:63:8d:8f:
         0b:97:0b:69:a2:52:84:8a:d9:72:37:68:c5:35:8e:0d:a2:b2:
         2c:6a:10:1c:19:48:70:86:91:a3:53:b8:70:c2:1c:2a:b7:89:
         6e:a3:96:f2:20:ac:ab:d6:4b:5c:a1:9d:fb:18:73:46:86:2b:
         de:83:7e:e0:ad:75:29:2a:31:98:83:e8:a3:1a:fe:a1:b9:69:
         6a:d1:c1:90:27:45:f4:b9:ff:52:91:53:d4:13:4c:08:0e:84:
         cd:74:76:fd:9c:76:09:ea:5c:ba:75:83:c6:77:c6:0e:ab:90:
         94:1d:0b:ea:e7:c4:7d:aa:93:9b:72:f8:d3:02:0e:e6:9e:4e:
         c6:91:e8:f3:0d:cf:e9:f1:6e:0d:bb:0b:98:69:af:ff:ef:d9:
         4a:d1:96:e2:d3:e0:fb:02:e8:a5:25:85:e9:77:b8:48:0c:67:
         6a:d9:7f:16:a6:80:99:4c:a9:c1:04:7c:b4:bc:5c:35:82:38:
         e7:9e:e0:ee:05:f1:41:04:18:59:1d:74:c7:b1:3a:e7:2f:cc:
         79:6f:aa:03:65:68:c3:1c:67:60:45:a7:a0:b2:11:29:62:bd:
         18:0f:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----