Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer
File:                     A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer (raw, json)
Hash identifier:          ZU1ou0i46WlSD6zgwf/VikQHh/x+EbDCisE/bxSLgJc=
Subject key identifier:   03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A123F295A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:53:11 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 57722
                          IP: 37.26.64.0/21
                          IP: 185.248.172.0/22
                          IP: 2a07:b200::/31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692092835240 (0xa123f295a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:53:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0394a3c46ec087b0d09770d18706107d2c7c17da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:de:50:10:66:da:30:13:51:82:1e:24:0c:
                    a7:7c:0f:54:d3:48:64:da:d0:11:d4:dd:f2:cc:10:
                    eb:cd:5a:32:d2:bf:40:65:56:c6:c7:55:b9:87:cd:
                    62:69:80:79:00:78:92:ef:2b:63:f6:2e:a0:04:cf:
                    78:12:77:65:bc:db:dd:cb:95:f3:eb:0d:2b:75:22:
                    44:31:9c:26:38:c7:f9:13:05:f9:99:b3:4b:23:51:
                    2d:e1:e2:d2:76:29:ce:ba:0d:de:33:04:fd:1a:69:
                    80:75:fe:26:6e:a5:e9:87:47:2f:85:08:ea:af:c5:
                    46:bc:cd:0a:bd:a8:e6:ff:4c:5a:99:3c:34:02:2b:
                    bb:b4:dc:58:86:25:b4:dd:ec:ad:fd:81:84:3e:4a:
                    93:71:96:c9:ec:44:75:8e:22:67:af:01:5f:b1:a7:
                    18:25:6e:ab:64:63:70:2c:74:5d:63:ca:87:55:48:
                    2d:96:b3:ba:b5:e3:f5:57:5a:72:ac:a1:6c:c9:7c:
                    f1:d4:85:05:21:31:f0:31:3a:a1:3a:4b:11:e2:fe:
                    a4:f6:56:01:b9:40:b3:8b:fa:69:f0:e6:35:12:8f:
                    ad:ae:52:95:c6:0e:5b:47:13:c0:ed:0f:51:c8:19:
                    a9:32:c7:05:f2:99:d6:94:83:0d:23:23:ff:a8:7a:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.26.64.0/21
                  185.248.172.0/22
                IPv6:
                  2a07:b200::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57722

    Signature Algorithm: sha256WithRSAEncryption
         02:07:e7:7c:7b:87:8a:02:5b:ef:65:91:c4:71:14:66:63:d6:
         1d:db:24:b1:bd:58:88:cf:4d:9d:e0:75:b2:84:a9:be:53:fb:
         9e:67:ba:38:23:81:4b:10:c2:bf:64:13:66:44:cd:09:00:9f:
         8c:0d:83:54:54:95:2a:4b:39:ff:83:8c:b2:f3:12:d1:d1:b5:
         26:18:64:e7:ea:33:1d:2c:63:eb:e3:b2:3a:0f:53:25:3e:b4:
         b7:d4:c8:33:93:67:c3:ba:cf:08:4b:39:a8:13:eb:08:2a:3f:
         3e:ef:6a:20:75:ad:3e:da:4c:78:04:bb:18:05:46:06:74:3f:
         f8:f1:17:02:f5:50:35:5e:83:97:78:e3:23:29:ab:25:76:1b:
         e8:db:33:fe:0a:2d:af:fa:c6:f2:57:a8:18:6a:ce:65:e8:aa:
         ad:fa:66:18:93:48:d8:3d:00:27:43:b0:ff:64:0b:ca:ee:2c:
         6d:c9:97:6b:4d:46:f7:87:e1:3a:ac:56:98:a4:71:6b:ba:2c:
         0b:c7:85:6c:3c:e6:61:19:a2:95:e1:50:f1:14:b4:6b:b1:1c:
         f8:f3:57:22:70:ca:f1:6b:e3:20:86:7d:db:15:fb:c9:bd:97:
         6f:df:c0:32:b1:04:0a:80:51:81:06:05:70:09:15:09:22:e3:
         9d:42:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----