Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
File:                     9CeuFzuErzmhDrvQfdY8LVzo_cY.cer (raw, json)
Hash identifier:          +wmQS9LOg4ZpSY0d3eiGINOlaFFj6PXbeNr9g2gX/+4=
Subject key identifier:   F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0EE2CED85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:02:49 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 193.25.207.0/24
                          IP: 2a06:99c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691190689157 (0xa0ee2ced85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:02:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:e0:fe:31:43:8d:09:55:5a:b5:ac:38:c5:
                    53:07:f0:35:7e:f0:75:3a:f4:38:99:25:0a:e3:43:
                    b9:2a:f2:4a:0e:26:98:51:2d:e4:19:b8:51:07:e2:
                    aa:1c:13:10:3f:9b:f3:ac:e3:24:7b:37:a1:db:0f:
                    22:3a:07:3c:8d:82:e3:79:f3:9b:d1:7d:14:9a:d7:
                    c6:cc:59:c7:3b:aa:61:1c:3c:90:13:38:da:63:b4:
                    c0:33:d4:b0:c4:7e:e8:ca:33:54:9d:9c:51:e6:20:
                    0b:5a:71:ef:97:4d:36:8e:c3:64:55:90:6b:38:99:
                    a1:05:91:37:9f:4a:b2:f3:c5:f4:48:ce:70:f5:dd:
                    aa:06:7a:cd:81:bd:fa:26:05:85:08:1a:5a:87:5b:
                    31:c6:10:fe:80:4d:66:f7:ae:df:69:0c:f9:69:46:
                    f2:60:f1:b4:0a:cd:00:de:85:23:8b:1d:99:39:2f:
                    e2:96:4a:39:ca:b7:9c:45:a1:61:e8:b5:54:ab:59:
                    de:37:87:cd:06:c2:90:20:70:65:54:8b:f2:5c:e2:
                    17:43:5e:8f:74:5f:6b:9a:70:84:14:bb:9c:de:61:
                    ae:3e:4d:86:fc:ed:23:4f:84:fe:7f:f8:a9:ea:3e:
                    d7:d5:80:30:0d:1f:62:30:6d:20:cb:69:30:c8:d6:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.207.0/24
                IPv6:
                  2a06:99c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:ec:88:06:e0:5c:9b:5e:44:4e:22:b4:d0:8e:76:71:8e:
         de:8e:ac:60:cf:ca:44:6c:26:fb:be:3e:69:0a:f6:b3:8d:ad:
         8a:d7:47:7c:23:48:34:18:83:1d:6e:5d:c1:f9:49:ca:e5:b6:
         55:9e:73:e0:a6:0c:5f:95:67:bb:56:6a:d7:6d:8b:71:e2:50:
         1d:95:24:dc:1f:cf:3d:23:02:be:21:06:f9:2b:5c:b8:99:55:
         45:c7:56:dd:ec:a1:c5:e5:8e:c6:00:d5:28:fa:04:fa:ba:2b:
         b0:fd:e2:37:c2:ff:1e:fe:11:9a:9b:4d:40:ba:7d:a4:07:41:
         22:94:fb:db:3b:c3:15:a4:c8:79:c5:23:69:d5:e3:71:a1:3b:
         8e:23:27:87:b3:e0:3e:b3:1f:20:63:cd:52:ed:23:4d:0b:6b:
         60:3c:fe:29:00:a2:c8:20:e6:e4:c2:88:72:37:46:7d:d5:ad:
         36:8e:e6:41:ee:f5:b4:a8:6d:33:cb:b0:a3:f9:0f:de:cf:83:
         b9:f8:42:57:80:1a:c3:20:19:45:b3:37:a2:1f:fc:07:ec:2d:
         b2:80:fb:cf:1e:c3:3b:01:39:a6:5f:c7:25:d0:3e:05:60:40:
         9a:c6:12:1d:dd:9c:2d:77:22:90:e0:62:df:17:f5:02:72:1d:
         b9:56:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----