Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cahh0oHgRWytkuOTWXUdnXKAIcg.cer
File:                     Cahh0oHgRWytkuOTWXUdnXKAIcg.cer (raw, json)
Hash identifier:          z7kL+vMWGOtIuC597F7O3GQPGcO9QvfI3L0T6lM7Leg=
Subject key identifier:   09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01846146BB3C7334146FE0430EF766F397BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Cahh0oHgRWytkuOTWXUdnXKAIcg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Nov 2022 11:22:16 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 211109

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:61:46:bb:3c:73:34:14:6f:e0:43:0e:f7:66:f3:97:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 10 11:22:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09a861d281e0456cad92e39359751d9d728021c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:1d:72:46:6e:80:c1:1c:20:d9:bd:d4:28:
                    74:c8:e3:9a:f7:c1:41:8f:22:26:29:0f:0f:a8:be:
                    84:73:c2:23:e9:77:92:2a:53:a2:2d:a4:b7:d0:d3:
                    6f:e6:24:22:1e:d4:59:b4:06:60:f5:38:69:f6:60:
                    f1:8b:e8:25:af:28:99:c3:b1:13:59:a2:d8:24:1d:
                    19:d9:58:6c:22:42:bc:0d:d4:54:31:40:f3:66:43:
                    d7:4c:fa:d6:c1:bd:b8:18:96:54:55:a5:54:e8:24:
                    d2:c4:63:31:55:8e:c1:e2:d4:1d:d3:35:2e:2e:9d:
                    77:b2:42:da:a5:bf:24:1f:28:93:5e:a3:fa:4f:1c:
                    6e:7f:c0:63:fb:8c:c1:c0:ec:3b:d7:18:10:d6:2d:
                    83:d1:50:67:ab:cc:98:5a:c1:92:2b:fa:aa:86:f2:
                    29:4d:e1:0d:03:0d:0b:9c:a5:22:65:12:11:58:42:
                    ab:d6:a8:d6:18:70:e3:a1:84:28:fb:e3:7e:f6:d7:
                    4a:69:0f:ff:2d:46:50:cd:77:87:b0:7d:28:02:67:
                    f5:f6:84:7e:d0:dd:66:bd:e5:b5:f7:86:87:c2:c7:
                    f7:be:d3:29:ae:5a:5f:93:8c:4f:91:0a:7f:69:5f:
                    c3:99:2a:dc:49:7f:01:a2:5b:4c:70:62:be:3d:11:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Cahh0oHgRWytkuOTWXUdnXKAIcg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211109

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:d8:c2:b6:d0:3a:b1:20:80:8c:4e:a7:4c:79:64:fa:fd:
         f5:3a:6e:b9:26:f6:ce:21:aa:a4:1d:89:be:4c:1d:92:f9:bf:
         22:ff:44:eb:df:f0:31:d6:07:53:eb:dc:47:94:4e:bf:62:b3:
         07:52:18:4a:79:f3:82:44:05:a8:17:56:ac:c7:c4:0f:50:11:
         98:7e:8a:94:5e:08:b7:fc:be:1c:fe:10:67:86:ef:a8:1e:f1:
         6a:0d:39:b8:1a:08:ea:8c:01:ba:2e:6a:5d:f6:23:c6:f9:e7:
         25:bc:55:ed:d9:be:af:fa:4e:73:cc:80:b3:fa:62:9d:16:1e:
         7a:65:c3:93:da:b4:f4:6b:dd:5c:7c:70:fd:65:06:9d:79:b7:
         53:fa:bb:59:14:c5:48:23:49:87:cf:69:63:2a:8d:5b:a3:29:
         ba:6e:07:cb:d2:82:ae:53:ca:bb:4b:29:5a:fc:3d:b8:ed:a1:
         44:c3:15:a5:33:fd:f7:96:10:26:4c:55:f2:80:27:ac:16:e9:
         16:2b:36:fd:50:44:16:10:76:35:79:d9:bd:9e:eb:42:da:c7:
         a3:37:8e:6b:8b:c8:70:fd:f8:a7:ce:ec:d9:b7:7c:5e:2c:0f:
         76:33:a2:6d:a9:f7:13:c0:e1:b9:39:c9:e0:08:55:89:17:4b:
         0f:c2:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----