Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A9q0YeeRPBo7kl8DW9X3oe9dSIc.cer
File:                     A9q0YeeRPBo7kl8DW9X3oe9dSIc.cer (raw, json)
Hash identifier:          eFUaRprwY2s+GEepShl5yfV7e7syq3AqCP95c0pVW/Q=
Subject key identifier:   03:DA:B4:61:E7:91:3C:1A:3B:92:5F:03:5B:D5:F7:A1:EF:5D:48:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A82E027EFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/A9q0YeeRPBo7kl8DW9X3oe9dSIc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 13:55:55 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 28959
                          IP: 194.126.209.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722326421247 (0xa82e027eff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:55:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03dab461e7913c1a3b925f035bd5f7a1ef5d4887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:59:3f:bb:8d:33:f2:61:1d:65:06:23:7c:
                    34:c9:da:41:c7:42:59:2e:5c:3a:e4:5d:b2:04:f0:
                    56:b1:1f:9a:dc:97:70:be:b2:0b:25:c5:38:d1:89:
                    75:6f:95:0f:e8:07:5c:29:f9:7a:b3:c9:68:2e:92:
                    db:f9:6a:3f:f3:75:34:be:cd:5a:63:da:92:5c:bd:
                    ac:30:e1:f9:3f:48:9e:db:81:67:8f:b7:1d:17:17:
                    1b:2c:15:ad:5d:af:a4:5e:96:38:f4:63:c1:ad:67:
                    d4:b9:1d:d1:a3:2d:a2:65:4d:c6:6e:ef:25:10:48:
                    44:ac:91:a8:6b:88:ed:29:bd:31:63:6d:40:44:85:
                    ed:19:6c:b0:80:49:b7:c0:03:01:40:81:81:5b:b1:
                    e0:a1:cb:7f:6e:5b:07:a1:66:8f:e9:0b:7e:60:ea:
                    48:b0:c3:3d:02:f9:c9:52:bb:a2:93:ca:3c:d8:41:
                    9b:4b:50:e9:2a:4c:0d:91:03:c1:d6:a9:c1:d6:fe:
                    e4:6b:dc:f8:14:52:a5:40:db:b5:70:f6:d9:42:60:
                    29:36:f5:66:94:db:97:21:dd:7d:84:e1:94:7b:f5:
                    e5:01:01:44:b7:88:1b:50:39:31:0d:ff:57:c8:91:
                    4e:4e:0e:4a:22:9f:27:b9:e5:ab:30:92:d6:56:14:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DA:B4:61:E7:91:3C:1A:3B:92:5F:03:5B:D5:F7:A1:EF:5D:48:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e44648-cb05-4baf-971b-ce85bd4a4c9e/1/A9q0YeeRPBo7kl8DW9X3oe9dSIc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.209.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28959

    Signature Algorithm: sha256WithRSAEncryption
         16:08:df:51:c7:87:33:8b:c2:92:3b:8d:ea:07:45:a7:3f:ac:
         7a:1e:79:66:48:e0:63:3a:1b:14:1c:b7:26:e7:d7:59:63:9a:
         71:ce:b6:a0:92:c1:a2:b3:74:4b:3c:4c:61:f9:b7:f7:ef:59:
         e8:a9:c0:cd:06:9c:c6:ce:37:33:ac:c0:60:6f:03:84:a8:8a:
         dd:45:6e:cc:24:b9:28:cc:8e:0d:a4:02:da:6b:f5:2e:6d:83:
         eb:fe:f7:a1:16:4c:9a:c8:f0:ce:44:03:0d:af:3e:16:68:c1:
         e5:31:0d:58:a0:f2:22:e7:9c:fd:41:7e:a4:fc:70:00:df:64:
         b5:cb:10:07:a3:e5:65:3a:f6:9d:0d:7e:1c:55:52:18:ca:87:
         17:75:5d:0f:6a:04:eb:9e:c2:fa:fe:1e:ee:36:ca:c3:7f:89:
         bc:33:f2:7a:cf:b0:43:c8:56:66:15:ff:3f:9c:70:66:f7:61:
         cb:e4:e3:fc:8c:7b:c6:c0:89:b3:ba:c2:d8:b7:d3:87:46:35:
         40:61:7e:29:00:32:95:e0:81:53:a3:54:27:23:fc:ae:79:19:
         98:41:aa:ed:f9:95:06:6f:20:31:1e:7a:c3:d5:63:95:ba:10:
         ce:2b:92:e1:59:1d:cb:27:81:22:a7:35:a2:fa:3c:c1:72:10:
         d8:94:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----