Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BR_IwMEVD6cwZovgw5B43ivgyjQ.cer
File:                     BR_IwMEVD6cwZovgw5B43ivgyjQ.cer (raw, json)
Hash identifier:          KRkzUO5o/KStX8VMaGIEkSRviQBNzMGcw6SEs4tXkeM=
Subject key identifier:   05:1F:C8:C0:C1:15:0F:A7:30:66:8B:E0:C3:90:78:DE:2B:E0:CA:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AAE0B2F65E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/955d8f-54e8-487b-b9f2-0f0e766082c9/1/BR_IwMEVD6cwZovgw5B43ivgyjQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/955d8f-54e8-487b-b9f2-0f0e766082c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 16:02:18 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.211.220.0/22
                          IP: 2001:678:63c::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733914265182 (0xaae0b2f65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 16:02:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=051fc8c0c1150fa730668be0c39078de2be0ca34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:18:c0:6c:05:f5:22:e8:f5:97:d9:e0:be:
                    1d:b8:39:78:c2:2a:63:0b:dd:75:0d:c4:b0:b6:d5:
                    0b:de:ea:5e:84:c2:63:fe:a4:cf:92:37:8b:e3:61:
                    dc:ad:8b:ad:4b:97:c0:67:2e:95:61:e5:5f:80:ca:
                    08:28:17:bf:a3:e4:ba:6e:ac:23:45:39:14:fc:82:
                    45:e5:35:38:f5:65:10:1b:8f:85:fb:dd:ef:fc:10:
                    60:d2:61:b5:14:00:9c:b3:77:1a:17:21:7d:dc:40:
                    d2:3a:ab:22:03:1e:7f:28:58:13:18:43:20:ca:aa:
                    85:c4:41:b9:d1:62:99:c2:6d:27:83:e6:d5:c6:37:
                    36:40:5b:be:ac:be:8c:81:da:5a:60:d3:d5:73:9a:
                    47:19:ab:f0:16:79:03:bb:14:91:90:b9:e3:9a:b3:
                    52:0e:45:14:77:9c:1f:cf:00:b0:64:5d:d6:ef:73:
                    3b:ae:7d:14:b6:e2:91:77:33:75:e1:62:05:fa:64:
                    e9:92:f9:b1:c4:00:80:97:93:0f:01:93:b6:5c:9d:
                    43:97:8d:17:86:39:92:4c:0b:b5:29:bd:34:59:a1:
                    21:fc:d9:c9:79:87:10:93:ab:95:58:64:80:5e:c6:
                    ab:27:ed:e5:0c:ba:16:d6:46:ee:89:89:27:fe:0b:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:C8:C0:C1:15:0F:A7:30:66:8B:E0:C3:90:78:DE:2B:E0:CA:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/955d8f-54e8-487b-b9f2-0f0e766082c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/955d8f-54e8-487b-b9f2-0f0e766082c9/1/BR_IwMEVD6cwZovgw5B43ivgyjQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.211.220.0/22
                IPv6:
                  2001:678:63c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:7a:a1:78:b3:44:bb:a0:b5:68:07:cb:8f:6a:25:0c:8e:
         eb:68:83:e3:00:f2:df:4f:0c:c8:87:88:5d:00:79:6a:12:1b:
         62:b7:a3:8e:82:f0:0a:f5:ba:fd:65:de:df:82:3e:fd:3e:a8:
         2e:e5:17:48:ef:32:df:36:1e:d9:6b:cb:9f:3b:f0:a5:80:c2:
         32:eb:78:1b:90:08:f9:b8:23:ff:28:f2:fe:c8:35:20:7d:e7:
         f2:94:d2:e7:5d:a4:b8:f6:40:59:e0:02:f6:d7:db:d9:7d:18:
         f3:6c:5e:04:88:99:74:16:24:18:7d:b2:53:d4:36:31:cb:4b:
         8b:68:42:1f:22:d2:77:a9:a1:b8:62:79:33:20:c0:ae:d9:d3:
         b4:c0:86:7a:85:43:b0:88:9f:ad:33:ca:8a:56:54:13:13:e3:
         73:2b:f0:e6:28:65:b0:48:82:0a:dc:8b:8e:94:b7:a6:58:df:
         21:a6:8b:db:1a:d9:a1:f4:a4:f7:3d:bf:b1:1e:e5:21:f6:92:
         0d:42:11:8e:db:c6:07:f8:93:56:53:1c:f7:b3:4c:74:39:76:
         cc:6b:d2:9f:f1:47:43:34:48:6f:0e:2a:f4:6c:72:cd:d8:2a:
         fe:aa:4a:40:7b:bf:73:88:4f:6c:68:96:62:c4:fb:ec:25:3d:
         9c:3d:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----