Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
File:                     EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer (raw, json)
Hash identifier:          /tFLIefKCI2/PsQaMCCOKSofJNT5KelW7DhstO0AODg=
Subject key identifier:   10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B189786ADD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 11 May 2022 07:51:31 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.149.232.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762515581661 (0xb189786add)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 11 07:51:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:15:fd:11:37:ce:43:f9:f3:1b:a4:21:ff:
                    3b:1d:81:70:b4:93:27:fe:a1:ae:9f:e6:45:54:a9:
                    6f:87:ef:b9:87:35:88:39:19:ec:ab:91:e0:26:75:
                    68:a1:9a:aa:d4:3e:fe:30:34:1e:77:4f:3f:11:98:
                    b0:4f:37:29:a1:90:9e:b3:09:d3:a0:2f:19:7f:d1:
                    40:e6:80:47:73:ff:4a:1b:e0:b0:a3:f5:c5:fb:77:
                    59:00:5e:e2:60:21:e7:18:46:bf:3c:6b:4c:4d:94:
                    db:3a:cf:0a:43:f2:5e:10:9f:12:b9:a6:b4:60:f6:
                    ec:fd:bb:e7:6c:3f:c1:25:ba:45:46:20:5c:19:14:
                    9f:ee:4f:30:c4:1a:cf:50:75:58:5e:fd:90:76:49:
                    2b:fd:c7:f4:47:b7:84:15:ae:e0:38:c0:14:42:90:
                    8f:c4:1d:2c:71:6f:07:77:a7:ef:8e:7d:bc:8a:36:
                    2f:24:65:2d:d8:86:bc:e5:8b:4e:4a:7d:02:b9:27:
                    84:8e:cc:46:55:8f:4d:c4:5d:2f:5f:91:e4:4d:8f:
                    8a:d0:2b:2c:55:94:14:b2:28:63:24:d5:dd:7e:da:
                    24:78:c0:5d:9d:99:a3:6a:16:84:5d:fa:7d:9c:9a:
                    7d:ef:ab:b2:72:b3:40:ba:9b:a5:e8:f3:21:60:df:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:51:bd:9b:10:6e:de:50:3f:eb:81:f1:0f:d1:aa:1b:43:9f:
         44:6b:a7:43:5f:e5:51:fe:8a:a8:54:45:fb:9d:6a:6f:91:15:
         cb:25:4d:6b:56:45:80:11:e9:01:06:b5:35:51:9f:27:07:42:
         34:d9:b4:8d:82:1d:50:77:b5:2f:49:87:b3:7c:e1:2b:91:2c:
         2b:b3:5d:0b:84:7d:0b:d4:79:ce:ec:64:cd:f3:ab:b5:94:3c:
         79:ab:1c:3b:7e:27:5b:38:9b:55:33:3f:86:bf:b4:e7:7d:be:
         ff:9a:e1:9e:80:65:0a:b9:bb:a4:7d:85:da:ca:4c:57:d6:62:
         b4:22:e0:6a:02:f2:1d:80:b5:a3:18:30:fd:d5:c5:13:03:dc:
         8a:98:eb:68:33:67:a2:2f:76:53:8b:d3:ec:ce:f6:8e:de:cc:
         69:84:2c:98:5f:f2:fc:3d:28:90:d4:26:49:ca:11:2a:70:73:
         ed:0e:52:77:67:16:12:1f:db:61:b9:e8:90:8d:61:57:cd:7f:
         1b:f9:90:a1:b4:9a:a9:84:d5:c0:a2:97:11:16:36:08:23:0b:
         2f:7b:62:98:b3:09:3d:e4:42:3e:01:f6:96:d7:dd:a8:a1:57:
         ae:d7:cb:69:36:58:79:7e:12:6c:a0:2a:97:11:d4:55:f3:59:
         77:1b:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----