Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer
File:                     CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer (raw, json)
Hash identifier:          rthQiZcbXVTIlklhWYank1j+LYlNtk4e/vslJjoP+Qw=
Subject key identifier:   08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E65F7A3E041856E36567509592D64E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:34:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198337
                          IP: 91.234.37.0/24
                          IP: 2001:67c:438::/48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:f7:a3:e0:41:85:6e:36:56:75:09:59:2d:64:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:34:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08f5c6270dea15bf639d0e169ed7b7c1bc326335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:b2:e6:d6:ec:9e:34:bf:47:2a:f5:05:92:
                    38:68:63:3d:fe:78:ac:a6:f7:9f:07:b6:6f:77:fd:
                    8e:dd:dd:86:25:70:aa:0e:f5:c9:f6:5c:2b:b0:ce:
                    62:1f:7b:fb:2c:45:71:86:e4:85:16:56:4f:2d:c7:
                    ae:d6:99:a7:ca:98:4a:80:24:42:e5:59:fa:0d:6b:
                    38:d4:d6:92:d6:70:0f:a1:9a:1b:c2:c6:95:e3:c9:
                    eb:59:79:c5:30:dd:3b:3e:25:ef:80:5e:b5:b6:85:
                    48:e9:90:ae:f9:76:ee:32:23:c9:50:a6:03:0b:4d:
                    84:b5:cf:06:5c:13:f1:2b:02:87:52:56:32:c3:2e:
                    a6:95:05:03:aa:a5:49:ce:f2:f9:88:d3:85:57:da:
                    8f:49:11:d8:77:b7:db:56:5f:8f:0f:a0:92:d3:b5:
                    c1:c3:c1:81:98:71:e2:06:03:41:9c:6e:5e:98:ea:
                    fb:48:e2:1c:32:f8:d0:91:58:4f:4a:ac:90:52:95:
                    cc:c5:b3:32:dd:92:dc:e4:68:ee:18:9d:5d:0a:55:
                    c7:42:77:f5:90:9e:eb:9a:67:71:f4:f6:29:97:c9:
                    03:bf:e6:ba:ca:0b:33:2b:98:45:06:8b:32:39:29:
                    5f:d5:93:d4:e5:97:d0:34:f9:30:c4:02:4f:b5:4e:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.37.0/24
                IPv6:
                  2001:67c:438::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198337

    Signature Algorithm: sha256WithRSAEncryption
         60:08:a9:5e:ae:9b:21:35:db:04:ed:a0:c3:c7:13:ab:0f:4a:
         b9:b8:1f:41:0e:12:45:62:78:b7:19:04:84:d7:14:bb:06:0c:
         4a:79:41:e9:13:c0:67:c8:c3:32:d7:00:23:e1:73:b4:e3:67:
         8d:6e:8c:69:52:1b:d4:ac:e8:e3:52:ca:68:42:27:44:70:0f:
         dd:18:5d:d1:1e:c2:a3:a4:7b:38:63:58:f3:e2:66:ef:33:c0:
         35:26:dc:09:7a:3d:48:31:6f:28:92:a4:ac:b6:68:ad:8e:28:
         c5:9c:ca:3f:61:c8:a2:8a:00:38:df:c9:7e:3b:d4:40:9b:6b:
         ca:2a:fd:73:cf:3c:98:c5:9e:45:9b:00:d8:ef:84:57:20:7a:
         c0:f5:f0:3f:1b:9e:be:65:3c:0e:d7:4b:a9:78:ca:bf:f5:b7:
         cb:18:76:6f:ac:55:1e:a4:29:14:88:b0:e5:37:4e:db:73:fc:
         01:cc:dc:48:d5:d9:39:d8:d4:3c:02:05:59:c9:38:3b:35:93:
         18:1c:31:54:e9:76:e4:6c:cf:35:33:39:80:3f:77:c5:53:95:
         c2:1a:fb:18:52:41:ad:00:11:af:c7:e4:82:2c:f7:09:f9:14:
         9f:90:b0:75:96:e9:08:8b:10:1a:cc:0a:a9:ae:76:fa:0a:eb:
         9c:e4:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----