Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AExYLFrAXvauhH8I3wBatlt7C0I.cer
File:                     AExYLFrAXvauhH8I3wBatlt7C0I.cer (raw, json)
Hash identifier:          +78HnT+6SDsFJFuPOSFBpljGLhGv2J3A5HoHLFhkY+I=
Subject key identifier:   00:4C:58:2C:5A:C0:5E:F6:AE:84:7F:08:DF:00:5A:B6:5B:7B:0B:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B345292F7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/9e1f95-a5de-4f47-8eb6-44ad5f1766ec/1/AExYLFrAXvauhH8I3wBatlt7C0I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/9e1f95-a5de-4f47-8eb6-44ad5f1766ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 16 Jun 2022 16:15:47 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 206271

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769959473023 (0xb345292f7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 16 16:15:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=004c582c5ac05ef6ae847f08df005ab65b7b0b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:94:57:fb:24:e4:c9:7b:07:48:32:2c:26:
                    6d:46:fb:fb:df:92:66:9f:1e:b5:97:d9:b4:45:2d:
                    ba:31:47:a6:58:2a:98:fb:16:3f:b7:3d:b7:f0:f2:
                    dc:14:06:11:4b:f4:98:c8:49:b5:79:37:e9:68:43:
                    be:d8:74:5b:1c:c9:b9:63:72:17:c0:5d:ef:ef:1d:
                    1b:53:35:a9:c0:e2:d4:79:67:f1:c5:ed:dd:86:cd:
                    65:bf:b6:79:90:48:3a:df:1f:38:1b:d2:e3:48:a2:
                    4a:79:ef:b9:6c:ce:d9:24:36:00:d4:7e:51:61:ae:
                    15:89:ee:9a:aa:81:d3:4d:2f:df:86:e4:53:2e:d5:
                    a9:7e:1b:2a:ca:81:c0:f1:7c:67:b1:23:5b:d6:bc:
                    30:c2:ed:20:ea:3c:4a:2f:e2:f0:df:17:fb:88:b5:
                    92:8c:22:08:51:87:50:82:8d:50:60:dc:32:f5:c6:
                    6a:8c:e6:59:0b:22:bb:fc:92:24:b2:9f:1f:46:f1:
                    fd:f0:66:f5:1c:42:9e:81:36:02:cf:76:a9:30:e7:
                    d0:4e:b9:8a:33:b5:cb:0b:ab:97:57:cf:15:41:d5:
                    12:c8:19:1f:90:63:94:ce:e8:c2:ce:96:22:6c:c3:
                    99:d7:99:14:b7:3e:03:e6:88:f9:6f:5f:ea:b6:bf:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:58:2C:5A:C0:5E:F6:AE:84:7F:08:DF:00:5A:B6:5B:7B:0B:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9e1f95-a5de-4f47-8eb6-44ad5f1766ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9e1f95-a5de-4f47-8eb6-44ad5f1766ec/1/AExYLFrAXvauhH8I3wBatlt7C0I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206271

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:43:a5:1c:ad:1d:61:63:04:e2:bd:d9:0f:71:ab:5f:fe:
         55:3e:5a:03:5e:57:42:7f:06:4e:1b:42:91:a2:1a:9b:d2:ed:
         06:e6:b9:cc:2b:23:3d:b4:7e:0c:16:19:cb:f9:e8:f8:4b:c8:
         d1:1a:55:61:07:97:ed:8a:ac:a9:47:d6:98:cb:ea:90:61:77:
         95:09:93:ef:d1:a0:e2:4b:b9:11:6c:3b:fd:e6:82:76:c9:eb:
         60:e1:ec:9d:25:02:be:a2:e6:31:bb:24:b8:30:4a:a6:bd:c9:
         c9:e1:7c:b0:13:f8:3b:bb:80:9e:10:ff:9e:30:2e:44:78:6d:
         91:bb:85:d5:34:89:86:fc:11:3b:0f:c4:0d:9b:32:dc:9f:2f:
         d8:2f:35:4b:40:7b:f3:a5:ff:bf:1b:77:04:0a:09:bb:ca:dc:
         45:53:97:e5:dc:1a:b5:a8:3a:b1:55:8d:21:e5:3f:22:5c:fd:
         2a:82:68:ef:b0:ef:ab:1e:11:7f:e6:a1:22:3c:6a:99:c6:67:
         f1:eb:be:6b:f0:a9:5f:c5:03:0f:52:e0:07:a3:ce:72:1d:87:
         43:50:20:e5:0f:a0:af:3b:11:f6:d9:c1:51:6d:7e:06:a7:ae:
         ce:f6:d9:10:d0:4e:68:50:72:e9:dd:d4:2d:e5:a5:07:2f:2c:
         6e:7e:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----