Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DDYenCCLjDhr8DJrp2VkR51DQm8.cer
File:                     DDYenCCLjDhr8DJrp2VkR51DQm8.cer (raw, json)
Hash identifier:          g7Fo4+6exzGz0tnL04dqNGPtp0VB0RGl9T113/NMrQw=
Subject key identifier:   0C:36:1E:9C:20:8B:8C:38:6B:F0:32:6B:A7:65:64:47:9D:43:42:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A3DB63CE99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/2fcdd5-1eaf-4dc9-8fde-f268cc602d33/1/DDYenCCLjDhr8DJrp2VkR51DQm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/2fcdd5-1eaf-4dc9-8fde-f268cc602d33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 09:58:05 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 196821
                          IP: 185.143.196.0/22
                          IP: 188.72.128.0/18
                          IP: 2a02:67a0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703760420505 (0xa3db63ce99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:58:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c361e9c208b8c386bf0326ba76564479d43426f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:2d:64:9c:c4:ca:4c:49:ce:e7:7e:af:ea:
                    3b:2c:31:e5:6f:ad:75:dc:0d:a3:28:d6:27:6e:4b:
                    99:22:ad:59:48:aa:b9:c3:09:8c:0b:8b:a5:94:2f:
                    ad:9d:4f:8f:68:65:23:47:ef:a0:53:61:5a:e9:3b:
                    24:9b:68:dc:6a:5b:cf:b4:4b:72:bc:c6:ad:c0:0b:
                    a0:48:4c:fe:fe:73:cf:2f:08:15:a6:57:73:cb:b3:
                    f3:23:49:22:6d:dc:09:19:f3:e2:19:81:7c:bc:22:
                    88:ca:bc:48:0f:ec:54:55:fb:f0:c4:29:7b:9b:f0:
                    ce:b8:7a:0c:cc:f6:ca:91:f2:3f:4a:3d:26:d0:0f:
                    ad:a0:e0:26:fc:ba:36:19:4a:20:75:93:d8:eb:8b:
                    c0:8d:dd:e8:ca:99:d2:6b:5e:e4:de:ff:45:3e:21:
                    6c:bb:3c:af:46:b6:1c:d0:d1:ef:7e:31:22:58:2b:
                    0e:05:4c:65:97:00:b6:48:c8:0b:25:12:82:73:65:
                    9c:fa:3c:58:3b:80:be:b5:c3:be:56:de:04:35:ac:
                    6b:6f:a6:cc:78:72:b4:89:69:b6:f6:a9:72:e2:4f:
                    5d:6a:88:37:90:8d:18:f4:81:0f:a6:83:d2:8d:93:
                    a8:42:d6:33:2d:f2:1e:a4:bc:aa:ef:c1:c5:67:7f:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:36:1E:9C:20:8B:8C:38:6B:F0:32:6B:A7:65:64:47:9D:43:42:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2fcdd5-1eaf-4dc9-8fde-f268cc602d33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2fcdd5-1eaf-4dc9-8fde-f268cc602d33/1/DDYenCCLjDhr8DJrp2VkR51DQm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.196.0/22
                  188.72.128.0/18
                IPv6:
                  2a02:67a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196821

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:bc:92:42:23:03:da:2a:4a:56:87:8a:51:c9:ea:72:91:
         46:70:cb:05:8f:7c:0f:1e:b4:85:8d:c0:cc:39:f2:18:9f:b8:
         36:65:63:da:0a:55:83:8e:d1:f3:ad:39:54:c6:27:8f:0f:44:
         c3:0f:ed:95:57:ba:8d:5b:7b:c8:d0:eb:7d:6b:21:66:1b:ba:
         a5:96:44:2f:c9:b0:24:7c:15:c7:f0:de:83:5e:c4:e9:04:c2:
         fb:1f:e9:1c:69:5c:68:18:c9:74:e3:1e:5a:94:0a:bb:c7:4d:
         67:18:2d:b3:91:77:e4:c0:b2:ca:ea:ae:0d:22:c0:fc:9c:8b:
         76:3b:04:97:a5:bf:af:30:44:3e:70:19:1b:23:20:f5:6c:d8:
         51:d5:52:8b:58:3f:f0:19:6b:a3:25:e7:a0:74:bd:91:05:09:
         d1:36:2d:37:f7:9b:28:c8:8c:0c:33:ea:29:aa:67:4a:87:1c:
         bd:33:77:c5:87:6e:00:5c:b7:63:ff:5f:d5:00:92:c0:22:40:
         71:5e:05:bd:ac:48:aa:f3:d1:02:ca:6c:1e:f0:29:23:92:42:
         e8:d8:1e:1f:ee:51:47:28:65:e9:45:76:67:8a:59:f4:4c:00:
         37:98:85:d3:1b:2b:3f:3c:69:e2:6a:5f:f0:7d:3a:31:c5:78:
         b2:68:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----