Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3VjWutuV333aBZf_8M7Y_cQSxE.cer
File:                     A3VjWutuV333aBZf_8M7Y_cQSxE.cer (raw, json)
Hash identifier:          cDZUmqcdzSzB8xq/zDwmU2pyiM83X/Uo+aj9RgdhO4M=
Subject key identifier:   03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A998BEB4D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/A3VjWutuV333aBZf_8M7Y_cQSxE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 14:59:01 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 83.142.52.0/22
                          IP: 193.187.92.0/22
                          IP: 193.202.8.0/21
                          IP: 193.202.80.0/21
                          IP: 193.203.8.0/22
                          IP: 212.119.40.0/21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728412107987 (0xa998beb4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:59:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0375635aeb6e577df768165fffc33b63f7104b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:2b:8f:17:8a:2c:2f:08:a9:8f:20:1c:b4:
                    7f:2f:a4:c8:35:4b:6e:9e:41:f8:b0:46:a6:e3:42:
                    01:e9:da:00:d6:98:a9:76:de:1d:57:f3:13:ea:fc:
                    69:7a:7b:bf:11:91:48:20:49:16:44:aa:f5:61:87:
                    00:1b:52:f7:e9:74:cf:04:5b:2a:cc:7f:99:ae:4d:
                    12:e5:f7:ef:57:fc:3d:4a:8a:a0:01:d6:45:49:e5:
                    d3:88:28:c5:d3:e1:2d:d7:f5:f8:8e:1a:8b:10:b4:
                    0f:cb:13:45:c5:4d:2c:64:67:c3:23:80:5e:2e:9b:
                    7e:a4:f3:51:6b:17:18:46:b1:13:28:8f:f8:84:46:
                    55:df:f8:22:3e:ee:94:8e:af:c8:29:1b:7f:04:71:
                    e3:eb:99:b3:ec:c6:fd:62:49:55:68:26:ff:13:f6:
                    c9:d6:1e:bd:9e:aa:51:75:c2:a3:bb:04:7b:d9:eb:
                    dd:78:59:e0:9c:7e:32:49:c5:41:20:9c:f2:fc:de:
                    b7:ed:5d:91:3d:f0:0a:cc:56:39:24:87:0b:4d:6c:
                    c2:35:d0:d4:5d:14:6d:31:90:ee:c7:38:0a:ae:0d:
                    83:18:3c:25:17:48:cd:bb:33:17:85:09:7f:4d:5b:
                    c3:51:b5:87:64:6c:66:8f:82:02:54:17:b9:2b:a2:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:75:63:5A:EB:6E:57:7D:F7:68:16:5F:FF:C3:3B:63:F7:10:4B:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95e64c-7958-4a7c-a3ac-48caa0b1bf10/1/A3VjWutuV333aBZf_8M7Y_cQSxE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.52.0/22
                  193.187.92.0/22
                  193.202.8.0/21
                  193.202.80.0/21
                  193.203.8.0/22
                  212.119.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:8b:02:62:ef:37:a4:dd:c3:2f:54:3c:91:8a:6b:d3:b2:
         14:bb:cf:18:84:b6:36:8e:a4:83:fa:64:22:e4:69:51:dd:96:
         c4:67:4f:0b:bd:8f:90:a4:c4:92:36:79:23:80:46:16:2c:77:
         5e:df:a2:f3:47:6e:b8:5f:98:a9:ba:a5:43:8e:dd:0e:0a:b5:
         71:30:24:3c:b5:b4:9e:93:7b:73:16:15:e6:88:01:b1:c7:e5:
         12:ec:8a:3e:8b:f9:83:24:98:7d:ab:43:c4:94:dc:82:ce:95:
         13:d9:7d:45:92:91:4f:83:f1:bc:5d:ca:70:69:10:99:90:78:
         7f:86:d7:ca:e4:a0:84:76:dc:2a:d6:c1:28:ea:14:63:ec:d5:
         cb:8f:6b:c4:12:83:f3:d6:c7:97:e2:45:c5:ad:9f:e9:02:a6:
         99:2f:9b:8e:95:5e:f4:f4:3f:12:36:d1:42:00:26:60:41:8f:
         81:f9:98:01:a2:6c:dc:bb:8b:9a:31:fd:3b:a4:a0:05:e8:b1:
         01:13:66:1c:f5:09:91:93:e0:d2:fe:b7:8b:ce:6d:9c:b4:ff:
         0e:3d:f2:df:ef:59:35:a7:f7:e5:12:78:26:94:d8:f1:55:ce:
         78:83:91:21:bc:31:e7:81:78:8f:48:1d:00:38:c1:fb:9f:16:
         16:5c:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----