Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
File:                     B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer (raw, json)
Hash identifier:          92ycg6uGrqJmXKqZmB4IjeH4avkcHuO5JycOZCjWc1g=
Subject key identifier:   07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A63AB28109
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 11:59:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.91.192.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713949348105 (0xa63ab28109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:59:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:51:08:3f:50:e0:69:40:61:6f:6a:2c:ca:
                    34:4e:c9:b1:a7:19:17:06:5d:b7:41:38:fb:be:97:
                    22:c6:d6:29:08:e6:38:fd:19:99:00:33:16:84:f8:
                    3a:37:c5:95:0e:e1:92:7e:ce:3c:f9:c8:ee:29:11:
                    1c:7e:62:86:e1:4c:8e:26:50:fc:91:d6:c5:c5:33:
                    7c:0b:cd:2f:e7:69:81:ea:f8:ef:57:6a:ac:92:87:
                    de:d1:c2:51:56:3b:9d:f4:d0:75:f2:a6:95:99:64:
                    43:54:2c:57:2a:ea:aa:fa:c2:6b:75:67:3e:9b:36:
                    1b:4e:dc:77:66:ae:d6:86:e0:5a:be:db:e9:e2:1f:
                    8e:60:4c:6b:72:79:62:4e:61:d5:0e:2b:23:18:3e:
                    f3:0a:de:3f:7a:af:14:69:c3:85:ca:56:70:38:f4:
                    36:9f:20:8e:b4:0b:64:95:29:81:23:b0:79:24:9f:
                    d5:11:88:78:7c:42:a4:49:14:67:14:64:e5:46:39:
                    7c:1d:18:6f:95:9d:71:35:90:46:53:1b:d0:bd:8e:
                    af:14:ca:f4:c4:15:77:b8:40:c4:80:37:98:d0:af:
                    f7:ec:5e:c7:d1:ba:a5:42:9a:dd:26:5d:1a:95:db:
                    0d:74:f4:72:00:78:7b:7f:89:9c:b7:4e:14:4c:ca:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:9f:49:39:92:8f:c0:c1:45:ec:de:86:c3:aa:27:82:9e:
         86:5f:98:24:e1:75:15:39:0d:8a:7a:24:f2:52:6a:55:cd:dc:
         3b:40:9c:5b:94:f2:56:ab:7d:6a:12:2e:52:b9:77:a8:b4:5d:
         63:af:d9:52:1f:91:6c:bb:b9:18:2d:70:e9:fe:00:0c:39:ff:
         0c:48:dc:dd:21:8e:b0:62:ef:d5:00:be:72:f3:15:46:bc:9f:
         f5:e9:72:37:6a:0c:0e:f8:4e:22:3b:5a:ae:84:0c:b5:a5:7f:
         5b:79:43:2f:ad:a3:5d:c3:3c:e9:a3:9d:77:cc:bc:24:06:fe:
         ff:2d:9d:ce:75:4b:3f:d0:b8:ed:a1:9c:c0:19:41:f9:62:73:
         f9:6f:cf:56:a0:03:7e:1f:cc:c8:0c:7f:fe:e3:4b:4a:25:f4:
         29:f2:5d:fd:2d:e2:1d:cd:51:8b:10:6e:90:35:17:f3:cc:bc:
         37:3e:5f:6b:65:f3:fa:ef:03:ec:60:58:c1:ab:40:8d:6c:20:
         f7:d2:e9:b9:7c:45:91:f4:b8:b2:8c:5b:04:56:fc:ae:4a:34:
         24:c2:b9:2c:67:b2:c5:53:8e:6b:30:1a:0a:ae:d1:4e:4a:e7:
         60:74:7a:34:67:50:c8:a1:6b:a9:aa:6f:36:4b:fd:38:62:54:
         fb:99:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----