Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9G4sNB8bPBtjWkgJjBed7Jo8ya0.cer
File:                     9G4sNB8bPBtjWkgJjBed7Jo8ya0.cer (raw, json)
Hash identifier:          KTqd8+jdH+czBvfk1IOuzJYNLX9eVcH9CJbYIq9L/e0=
Subject key identifier:   F4:6E:2C:34:1F:1B:3C:1B:63:5A:48:09:8C:17:9D:EC:9A:3C:C9:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9E4AF21C1D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 05:01:12 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 204655

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679862213661 (0x9e4af21c1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f46e2c341f1b3c1b635a48098c179dec9a3cc9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:32:f1:4f:81:9d:b4:77:ec:67:7a:e4:b5:
                    cd:fe:29:9d:87:4b:03:f3:ca:d1:ba:68:97:ff:38:
                    3b:21:34:0d:c8:e4:1d:b0:3c:01:e3:99:24:09:1a:
                    0d:5d:a6:e4:74:c7:b5:53:80:d1:74:7a:49:80:4f:
                    e0:c6:8f:0a:30:93:9f:7e:cc:6d:19:f9:41:61:eb:
                    2a:d0:82:a2:c0:f3:c4:9d:dd:4f:1e:da:e1:ce:83:
                    f4:b3:d9:d9:ef:6f:4f:4d:33:e0:94:0d:02:70:a5:
                    a9:4f:9c:71:52:61:f4:91:70:61:45:8c:23:86:47:
                    71:c8:51:38:26:43:16:94:6a:1d:3a:2c:af:51:1d:
                    fc:34:b8:18:d6:ac:cd:2a:1e:8d:6c:9c:7d:d8:3d:
                    93:2a:26:83:6e:2c:3a:68:61:38:56:f8:e8:0a:11:
                    84:dc:a0:69:a6:52:7d:47:32:99:9f:c5:c2:4e:a4:
                    ae:60:b4:1a:db:07:c9:84:09:b9:fa:46:37:98:47:
                    84:67:42:ff:6b:e9:8e:31:4b:b0:ec:7a:4d:c3:d0:
                    96:60:5a:48:de:bc:c3:f3:eb:a3:59:b7:85:94:a8:
                    e6:07:ae:08:eb:a8:2b:87:9d:5a:7e:7f:4d:7b:82:
                    72:4d:8e:1d:a8:31:cd:97:2a:65:d4:34:ac:83:c8:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:2C:34:1F:1B:3C:1B:63:5A:48:09:8C:17:9D:EC:9A:3C:C9:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3ec813-a77a-423f-820f-58c2da2959a8/1/9G4sNB8bPBtjWkgJjBed7Jo8ya0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204655

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:43:e3:c9:0e:ce:9b:1a:c6:5e:03:95:9d:02:b8:47:ce:
         25:57:8f:01:99:fa:fd:19:dd:3b:cb:10:d2:b4:e6:53:2c:4c:
         b4:f3:70:07:b1:43:2c:c0:7d:bc:b2:76:c3:20:10:92:cb:94:
         37:6b:0b:36:9b:c5:49:56:88:f8:0f:50:7c:90:3d:a0:7f:56:
         35:f7:e0:d2:b8:04:f3:5b:82:ec:86:9e:bb:c7:cf:31:ca:84:
         ef:38:63:aa:ea:cd:52:3d:4c:bc:9b:0b:b1:e4:c2:a4:86:d6:
         af:10:a7:7c:fc:a2:ef:d3:86:75:b5:b5:f4:34:b7:f0:7f:aa:
         b4:06:32:25:2c:7a:2d:af:c8:7c:bd:89:d8:0c:54:06:af:26:
         f5:dd:20:09:39:92:fb:14:34:68:76:d9:c7:3d:f6:1e:05:13:
         84:2d:2d:84:a6:fa:e1:03:29:b3:99:b3:a2:92:99:47:ef:1f:
         71:40:75:bc:52:86:a1:8d:79:c4:6c:00:a0:48:31:20:8f:51:
         5a:06:4f:99:51:14:e3:4d:45:17:e0:c9:f7:3d:c9:14:fb:76:
         07:4e:63:55:c7:f0:38:77:eb:54:f1:a7:33:ac:db:97:9e:53:
         69:86:4a:7b:cf:92:fc:dc:53:f1:20:5e:28:57:5e:da:7c:14:
         c4:57:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----