Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2aKoHZPNrYhRejvN5RF4TqzxUI.cer
File:                     A2aKoHZPNrYhRejvN5RF4TqzxUI.cer (raw, json)
Hash identifier:          FPu/hCNNsNlZYyUPn8547Lfx0pVRpXTocXxcI/NMlZY=
Subject key identifier:   03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ADAF6436EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 22 Feb 2022 21:07:35 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 213327

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745971922666 (0xadaf6436ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 22 21:07:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03668aa0764f36b62145e8ef379445e13ab3c542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:6d:40:bc:55:36:e4:69:33:f9:52:fa:ea:
                    74:2f:11:a0:bb:59:9b:9d:fb:c4:e3:a6:89:b2:a5:
                    f6:73:2e:b9:b8:d5:42:7a:8a:d2:c6:21:eb:89:92:
                    49:50:be:94:5f:01:1a:9c:d3:0f:bc:52:c1:05:f3:
                    d8:cf:27:8b:83:26:1f:d0:14:eb:cc:c1:f6:df:1c:
                    43:60:16:22:83:c0:bb:6a:01:43:ef:0a:13:f6:64:
                    e4:32:cd:2d:fd:2b:e0:f7:a2:42:7a:fc:25:a8:7d:
                    b9:a5:47:91:14:57:15:5d:aa:1e:f2:89:a7:4a:a5:
                    32:9d:67:72:89:25:cf:a1:4b:d7:09:c2:39:d1:c4:
                    f1:85:61:d4:9b:4e:2d:92:e4:73:e0:be:ae:c1:34:
                    ca:42:51:12:4b:8e:79:2a:a7:4f:dc:33:d4:10:47:
                    d3:ea:03:ee:cb:f4:57:fc:e3:af:a4:2c:f3:33:ed:
                    a4:43:5d:c4:93:60:40:3b:0e:93:37:e0:7e:3f:4c:
                    c7:31:93:ed:5d:de:3d:1d:d5:4a:2f:52:33:23:a0:
                    83:4e:1e:70:fa:8e:c8:4e:fa:84:ca:ec:47:bb:de:
                    56:11:18:e9:b8:37:a2:cd:0b:13:11:1e:a3:ad:30:
                    ef:a5:62:f4:3f:a2:c2:1f:40:62:49:da:2b:2f:ca:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213327

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:72:fe:01:fb:36:ea:70:35:e2:cc:fc:71:4b:3f:d0:0a:
         3a:67:9f:36:57:d3:35:0a:2d:cf:7b:67:36:b6:c4:46:c1:b9:
         9f:e0:63:be:d7:b0:bf:f6:cd:af:f1:fe:02:6a:53:a3:3b:15:
         43:27:74:a7:4a:f8:3a:0e:57:70:d3:23:a2:d5:d5:51:6e:e8:
         6f:62:ed:97:d2:bd:92:9c:86:46:c7:67:1e:2a:23:91:da:db:
         77:48:e1:01:df:7c:d8:ac:d2:74:67:dd:79:2d:f7:33:e5:05:
         79:dd:56:bb:b8:ef:5c:38:a5:fd:e4:bb:c9:4f:eb:1f:b7:b9:
         70:b0:4e:26:a0:23:1b:4b:da:29:9a:70:34:c3:99:ce:45:2b:
         9d:6e:90:c2:cb:ca:db:07:5a:78:86:d9:32:78:ab:14:43:10:
         27:09:9a:a6:c3:e4:0b:ba:a6:56:09:d8:ed:bd:e9:2b:eb:d8:
         fa:b5:16:a7:8f:40:21:71:0d:ec:3e:cc:4b:12:6c:ac:d7:b2:
         4b:ee:08:23:ba:9d:e2:0e:c7:b3:29:9b:89:b7:16:7b:af:bd:
         22:26:8c:86:0f:f3:8c:8b:9a:94:b6:a9:8b:31:47:fb:99:b2:
         c6:a3:36:98:67:33:81:89:eb:a9:35:03:56:c4:37:d7:78:ac:
         bd:36:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----