Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AQ0K92hAeGzI9xZNcwC6q7E-c-s.cer
File:                     AQ0K92hAeGzI9xZNcwC6q7E-c-s.cer (raw, json)
Hash identifier:          9uxVqOg3VWjkyYi5TU2yXIW8mYT3Sy5azlVqlTO6AYw=
Subject key identifier:   01:0D:0A:F7:68:40:78:6C:C8:F7:16:4D:73:00:BA:AB:B1:3E:73:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       82AF27A843
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/44635e-520a-4751-98be-1092945b1541/1/AQ0K92hAeGzI9xZNcwC6q7E-c-s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/44635e-520a-4751-98be-1092945b1541/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:42:54 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 52167
                          IP: 185.216.144.0/22
                          IP: 2a0b:b840::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561284360259 (0x82af27a843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:42:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=010d0af76840786cc8f7164d7300baabb13e73eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:9d:d6:13:f5:23:2b:4f:74:14:3f:4e:89:
                    76:95:d7:f0:e4:24:9e:c8:b5:c9:19:7d:0d:ee:24:
                    f9:d8:17:c9:e1:94:87:d7:ce:b5:39:2a:ee:b9:0c:
                    e4:51:72:0c:84:e4:1f:52:89:83:b2:65:17:b6:78:
                    b7:76:0d:8e:bb:c5:39:c5:3a:c1:5f:10:d7:de:86:
                    d4:45:83:7c:e7:fe:84:d9:d2:1f:f4:42:4c:cf:e0:
                    6a:c8:61:e5:cc:61:2c:3f:79:2f:77:19:de:4c:06:
                    5c:7f:f8:5d:de:73:8b:4b:46:26:19:bd:e8:5f:bc:
                    a6:99:89:94:28:fd:da:fd:7c:21:12:0c:fa:23:4d:
                    78:26:e2:2a:72:24:cf:59:7b:d8:6c:36:74:f5:70:
                    2b:40:b2:df:28:a6:54:df:3f:2e:a9:b7:7c:82:f0:
                    11:7a:c9:08:f8:13:7e:92:68:ea:47:c6:69:f2:32:
                    87:85:56:11:bc:22:77:ad:7d:40:3b:ee:07:92:c7:
                    e0:14:42:06:c0:e4:69:e7:51:f1:1f:a4:b4:81:51:
                    72:be:84:54:86:30:43:b2:d6:a5:76:16:8c:da:b3:
                    4f:3d:83:24:62:80:7a:c3:29:f6:0c:7d:b4:cb:3c:
                    aa:ae:a3:35:47:35:74:de:ed:4c:d6:e7:dc:59:4a:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:0A:F7:68:40:78:6C:C8:F7:16:4D:73:00:BA:AB:B1:3E:73:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/44635e-520a-4751-98be-1092945b1541/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/44635e-520a-4751-98be-1092945b1541/1/AQ0K92hAeGzI9xZNcwC6q7E-c-s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.144.0/22
                IPv6:
                  2a0b:b840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52167

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:12:18:7e:13:b9:f3:92:7b:d6:7c:e5:1a:fa:1c:1d:8b:
         28:e4:12:6b:c6:91:f0:0a:74:ef:ba:fb:0e:bb:e4:0f:60:0a:
         c6:fb:f8:3c:9e:52:50:3d:6f:bc:7e:08:ae:2c:24:64:6d:32:
         6a:89:e5:2e:c4:98:b3:ac:b2:77:ac:9f:3c:03:7f:04:24:15:
         f4:9a:d6:81:55:c8:2c:2a:28:91:aa:81:cc:3b:51:69:dc:89:
         29:7a:69:e8:9a:c4:69:37:be:b8:d9:c2:52:e4:95:6c:af:35:
         96:50:f8:4d:05:c5:b5:51:cc:ee:0d:24:11:fd:30:e0:47:9e:
         b3:69:d0:5c:4a:6f:26:79:c6:e5:5c:b4:35:4e:81:b6:e0:4b:
         d4:63:8c:64:11:bc:ba:78:66:c7:cf:e8:d3:c7:da:b9:32:f8:
         ec:4b:76:55:b6:7a:47:83:ec:f9:1a:e8:ce:5a:03:ef:1d:7a:
         09:f1:c3:c0:18:5d:c5:43:ee:66:07:86:3c:3d:03:9d:d7:9f:
         6b:0c:9d:0d:6b:d4:02:5d:d8:c9:7f:40:24:7f:8c:50:fd:ab:
         d7:54:ae:32:17:68:73:f3:53:b2:77:ef:e8:5d:b8:45:fe:4e:
         8b:ea:02:83:16:69:94:23:17:f8:1a:ce:fe:a9:24:7e:02:0f:
         d5:af:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----