Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9vmNt_6EyWkKm2MOwnNfZXqaWHg.cer
File:                     9vmNt_6EyWkKm2MOwnNfZXqaWHg.cer (raw, json)
Hash identifier:          rxy72GAR+/nPAV2PpoOS5NxjCLVMddkz3hwXkQBTQ4M=
Subject key identifier:   F6:F9:8D:B7:FE:84:C9:69:0A:9B:63:0E:C2:73:5F:65:7A:9A:58:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A1A348F95C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/9vmNt_6EyWkKm2MOwnNfZXqaWHg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:58:35 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.236.19.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694229203292 (0xa1a348f95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:58:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6f98db7fe84c9690a9b630ec2735f657a9a5878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:18:8a:1d:61:48:3c:ff:42:00:3a:77:2f:
                    b2:73:ab:cf:31:b7:03:c7:8c:4a:83:5e:76:3b:80:
                    e3:84:04:f9:b5:b4:6a:36:00:82:47:f8:2c:ad:31:
                    29:94:5b:df:4f:f2:df:b1:0d:5c:55:d6:8b:d1:f9:
                    d4:2f:d1:46:7d:80:85:05:3a:2d:00:e0:60:76:e3:
                    80:5f:f1:5e:d8:d8:f4:4c:82:47:9c:25:47:4f:e9:
                    d5:06:18:77:27:01:0d:9c:55:21:57:dd:e8:94:fe:
                    71:65:e8:e6:c6:a9:23:00:b8:d3:28:7f:8b:ab:1a:
                    af:57:34:e4:18:3f:51:93:26:3b:9c:d9:42:c7:88:
                    c3:ca:bc:1d:cc:d6:01:df:c1:31:b9:c0:94:eb:bd:
                    eb:c4:9a:c9:59:de:f9:d2:2a:06:9c:d2:ca:ea:da:
                    90:0d:db:23:4a:8b:3e:52:60:db:9a:74:09:17:e0:
                    c9:45:dc:35:8e:b6:b3:4d:13:8c:23:0a:f9:e6:4b:
                    d3:48:fd:9a:a0:a6:5e:8b:0c:ec:25:76:13:bb:18:
                    d4:e8:2d:6e:da:82:23:3c:2f:fc:aa:c9:09:fb:e5:
                    00:55:28:82:84:53:52:cd:8f:9d:58:4c:9d:44:3c:
                    78:30:bf:c2:ad:ca:f3:e2:d7:9d:63:7b:66:d0:1e:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:8D:B7:FE:84:C9:69:0A:9B:63:0E:C2:73:5F:65:7A:9A:58:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/9vmNt_6EyWkKm2MOwnNfZXqaWHg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:87:19:01:37:5d:fa:ca:06:fe:da:b9:c4:3a:0b:ba:3e:47:
         43:c8:ee:ec:d9:9e:63:b5:1f:a1:01:38:84:d1:53:22:a9:1e:
         f7:2f:cc:d2:f1:d6:66:2d:20:95:8c:81:ea:98:9f:ee:3a:25:
         25:4e:47:c4:08:1e:48:e3:0e:b1:c6:3d:69:3d:33:96:5d:97:
         37:c9:ff:7a:21:83:f5:da:b4:a5:9b:3c:d8:8e:f3:96:4e:10:
         b7:71:62:4f:b7:89:1c:0b:66:e7:8a:1f:71:60:d8:bb:af:a0:
         e0:7e:07:46:ac:8c:7d:f1:01:cd:6e:48:63:c6:33:0f:b6:8c:
         84:53:a5:13:f2:26:84:4b:df:d1:5f:85:5a:d9:87:ed:6e:35:
         32:3f:db:67:6a:b8:b3:c7:21:08:a3:b9:01:6b:ea:68:58:7e:
         64:70:47:78:b7:4b:d0:29:8b:df:d9:47:a6:16:d5:92:74:d4:
         5a:ce:2d:33:36:aa:d5:1d:14:a5:dd:7e:6a:9d:d9:c0:33:90:
         ff:ee:51:1e:6a:4f:55:89:c1:bd:41:31:a5:49:8a:d8:56:f3:
         c6:9b:3d:2c:bf:11:57:4b:8c:a0:a5:11:b4:45:d1:e2:22:e7:
         72:d2:8c:e9:97:89:27:d1:dc:be:f9:73:18:d3:bd:02:a6:76:
         3b:d2:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----