Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.cer
File:                     9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.cer (raw, json)
Hash identifier:          enXFYLZMPvKxnvELoWKwollG2orPtE1HrcC0ehGy/+8=
Subject key identifier:   F5:B2:79:0D:C9:1C:AC:43:3E:07:F5:5B:E0:57:7B:1C:31:29:63:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A844DEF9B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 13:56:41 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 141.98.140.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722709969329 (0xa844def9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5b2790dc91cac433e07f55be0577b1c31296387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:61:2a:24:b3:05:04:94:9d:fd:ec:1f:22:
                    96:62:e0:af:16:09:1f:59:75:86:4a:0b:c4:42:34:
                    0c:fa:c3:11:e0:b5:b1:1e:57:ce:b9:d6:9c:56:20:
                    4d:bb:38:80:72:26:6a:7b:79:2c:11:95:b3:29:bd:
                    6d:56:2a:f8:38:72:49:b3:9f:11:2d:72:f4:f5:e9:
                    52:ab:17:bb:d1:d4:cd:fe:c7:83:4c:5c:98:b0:b4:
                    1f:bd:cf:97:3c:c4:59:af:49:62:22:5f:a1:df:58:
                    38:f3:69:b8:2a:cc:96:72:71:cd:a1:f5:b9:9c:9d:
                    3b:21:9e:11:00:db:e5:b5:9c:2e:c7:6b:fd:49:ed:
                    e0:86:2b:93:31:29:23:48:31:8e:af:4e:68:66:f5:
                    ff:47:57:53:ef:7a:40:ee:ab:51:68:d7:73:33:5e:
                    8f:9b:36:1b:e2:04:fd:45:2a:94:ed:f9:bf:39:8d:
                    15:bf:c6:96:06:19:88:2c:70:fe:6a:71:48:38:05:
                    90:39:25:95:7e:a2:7c:95:13:6f:80:fd:0e:d1:05:
                    1e:15:ea:06:20:86:e1:5b:cf:3f:a2:8f:fd:ca:f1:
                    54:29:c5:35:48:ed:ec:9b:6d:c3:e1:c6:40:2e:0c:
                    83:28:f0:65:14:9a:34:ba:ea:42:ef:bf:ff:12:70:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:79:0D:C9:1C:AC:43:3E:07:F5:5B:E0:57:7B:1C:31:29:63:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/046ae2-f624-4941-b8b2-461ee424de2e/1/9bJ5DckcrEM-B_Vb4Fd7HDEpY4c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:12:94:17:12:cf:46:47:8d:8e:f4:49:c9:81:6e:e5:aa:
         9d:66:2f:44:37:5f:42:b3:5a:31:c5:fa:66:ac:da:87:88:1c:
         44:d5:8d:3c:32:54:26:d2:f4:72:fd:29:8e:76:f4:7f:87:c8:
         0f:c4:a4:54:cb:0d:83:f6:62:6c:7b:22:27:0c:4e:d2:0f:ea:
         be:7e:73:b6:4f:37:c3:5c:45:1d:ff:c9:9a:b9:3e:f3:2f:1c:
         39:87:97:64:b0:8d:8d:02:84:f3:d7:e8:23:ad:c6:c1:12:11:
         35:e2:29:70:58:6a:7f:7e:c1:c8:ef:41:3e:31:7b:7e:c6:45:
         da:2f:54:06:75:76:2f:c7:99:38:69:04:03:3f:a5:3d:17:4a:
         d7:61:c9:7d:54:47:2e:0a:12:04:6c:eb:5c:cc:1f:72:80:61:
         bb:64:29:87:c0:62:74:ff:0b:0c:56:e1:9e:72:55:94:75:f5:
         6e:0f:87:13:55:3e:e2:d1:9b:31:e3:a1:48:8f:ed:51:11:61:
         dc:71:aa:45:78:25:04:0d:79:3e:66:ef:ab:a6:8b:d7:f9:e4:
         2f:1f:92:6a:54:ea:6b:4d:11:ec:9e:ce:82:96:5a:9a:41:eb:
         4a:b9:7b:ae:7b:26:a1:81:d4:5c:93:5f:18:df:0d:3a:ac:2a:
         9b:d2:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----