Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9MndSgYJ49Duv0LjzNZIkTeIn38.cer
File:                     9MndSgYJ49Duv0LjzNZIkTeIn38.cer (raw, json)
Hash identifier:          +UgyQIDFHQdQ4S9GfkLeoFWfOJnHFV8LQr3y9Gf9uKQ=
Subject key identifier:   F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A53A0366BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:59:30 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 212854

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709642905276 (0xa53a0366bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:59:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4c9dd4a0609e3d0eebf42e3ccd6489137889f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:d8:cb:d3:26:fa:b7:79:eb:3d:13:1f:8e:
                    58:c4:c6:0f:9b:b0:73:b7:ce:bb:4d:63:2e:a5:52:
                    73:d8:fc:7e:29:79:2f:94:9a:58:c5:51:f6:1d:c9:
                    18:f1:71:18:88:51:88:3e:e6:b9:99:38:3f:87:05:
                    35:58:78:ed:44:6e:4f:ba:4d:37:e8:cf:6d:b2:9c:
                    e4:f6:09:0d:e9:d7:3b:09:68:25:7b:b0:35:77:d4:
                    fd:8b:0f:f2:c2:ed:2d:a6:e6:be:46:77:21:f3:98:
                    28:1b:65:7f:9e:62:b4:9e:b3:8e:ef:cc:36:95:b3:
                    2d:fa:2b:86:48:1b:73:37:74:7d:1f:55:b7:6c:82:
                    e0:f4:e7:08:21:3b:e8:d4:09:91:f0:3b:db:d3:af:
                    84:1e:52:26:b0:66:9e:07:d1:90:77:d7:1b:a9:9d:
                    e4:c1:d3:e4:96:9c:ba:f7:fa:6e:ff:52:af:74:e0:
                    75:8b:19:02:ea:29:ca:0f:31:bd:57:7a:0b:e9:16:
                    21:17:e1:d7:15:e2:99:e1:88:d1:58:6f:97:88:84:
                    34:72:60:c5:c7:b5:12:c0:58:f0:08:2b:d5:4c:f3:
                    58:76:53:2e:c4:88:c4:69:28:8c:2e:a5:2d:d8:04:
                    da:8e:ac:d4:92:4c:d3:63:12:8e:e7:b5:49:00:0b:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212854

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:2e:9f:89:dd:ee:23:11:9a:c2:9e:f9:85:5a:e7:39:47:
         32:04:3d:b9:d5:e5:2d:d8:65:0a:db:5f:0c:95:b7:c9:69:23:
         be:25:32:92:8a:03:b8:34:d7:2c:23:81:f3:33:68:a6:45:31:
         de:8e:13:ba:49:32:7b:ba:ba:17:f3:da:7b:41:9d:03:29:61:
         86:14:41:f3:b0:50:38:f2:55:6a:48:b3:71:6d:0b:ee:db:f2:
         ed:f3:5f:e5:a4:fe:78:85:6d:04:df:a7:1f:cc:00:df:1c:38:
         c0:3f:a9:ee:69:1a:82:15:58:df:ce:71:be:ac:b0:a2:a6:b0:
         a9:6b:ec:58:d3:c2:88:54:8a:8b:75:3a:13:e5:15:b0:96:52:
         38:50:2d:e5:6d:c7:d9:c9:ff:be:2a:6a:80:35:1c:15:d7:49:
         fa:f0:7c:ec:d1:dc:ea:d9:2c:49:a0:d8:45:08:32:de:8f:35:
         f3:25:db:f6:e2:4c:d3:d3:c8:aa:5f:54:7d:ab:70:eb:12:73:
         38:51:87:40:92:d2:22:16:b0:03:28:ba:5f:af:cc:1f:46:8e:
         64:0d:59:86:53:c8:8c:f0:20:e1:c2:f4:39:98:02:44:67:c2:
         cd:d8:20:8e:d3:c1:df:57:9d:db:18:2c:b3:c2:06:f5:54:63:
         7a:07:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----