Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H2YR1NFhntpHrE740ktD5s9Lxpg.cer
File:                     H2YR1NFhntpHrE740ktD5s9Lxpg.cer (raw, json)
Hash identifier:          8yTBYSk49y8xmM+eZWUJuCH1zN5mnqBkNsD/TgA6xqU=
Subject key identifier:   1F:66:11:D4:D1:61:9E:DA:47:AC:4E:F8:D2:4B:43:E6:CF:4B:C6:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01828344A5B39A4D19AC10006F4CB7CDA91A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Aug 2022 15:41:30 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 193.32.204.0/22
                          IP: 2a0d:d540::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:83:44:a5:b3:9a:4d:19:ac:10:00:6f:4c:b7:cd:a9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug  9 15:41:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f6611d4d1619eda47ac4ef8d24b43e6cf4bc698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:c6:29:54:af:ae:c5:5b:b2:52:80:90:be:
                    87:6f:fd:2c:15:47:b0:5b:29:6c:0f:24:a8:b0:4c:
                    69:39:0f:a2:15:52:3f:0f:3d:cc:5a:85:3f:d8:f8:
                    89:85:63:d6:3f:75:72:0a:07:e8:49:cc:5e:a4:3c:
                    25:23:e1:2f:2f:6b:33:5f:68:49:99:3e:b7:12:52:
                    7b:01:fc:8a:cd:0a:aa:7e:08:ae:6f:84:c1:93:c6:
                    80:e9:f1:d2:cd:93:ac:db:42:45:78:53:ba:d2:5a:
                    4a:30:88:b1:b9:f7:7d:a2:c5:9b:4a:ce:c4:e6:98:
                    b1:05:74:1d:61:e6:ee:36:15:b0:c5:fc:bc:6c:4e:
                    ec:b6:68:da:ba:d8:f4:97:43:5f:56:f2:6d:77:e2:
                    61:1d:38:76:e5:07:9d:31:ff:7c:04:5d:f0:fd:87:
                    02:cf:3b:cc:fd:0c:e9:08:46:c2:58:68:95:ba:f7:
                    bf:79:c9:0d:07:9c:03:0f:6d:34:50:af:0f:7b:0f:
                    81:94:77:d6:44:90:b2:64:0c:61:5c:25:c5:44:25:
                    f5:59:80:28:b7:07:3f:f8:2c:dc:9c:ff:3d:6b:0d:
                    d5:7d:7b:93:0e:e8:f8:b2:a4:54:0c:d6:26:da:a1:
                    f9:66:96:a2:ee:6d:02:fa:f6:56:6c:4f:f5:65:ae:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:11:D4:D1:61:9E:DA:47:AC:4E:F8:D2:4B:43:E6:CF:4B:C6:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.204.0/22
                IPv6:
                  2a0d:d540::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:44:47:b2:33:f8:98:db:eb:43:dc:ee:69:f9:af:07:03:0e:
         6c:60:20:d7:70:dd:9f:b2:17:37:bf:37:6a:7c:3e:e9:72:29:
         1c:95:5b:aa:b9:98:5e:0a:0b:f7:a1:6e:9f:f9:c8:66:d6:03:
         da:e2:9c:fa:a2:5f:3f:19:07:a1:66:b7:20:41:29:80:f6:d2:
         df:fb:2a:ac:6a:43:e5:1d:78:b4:ab:19:28:80:fc:dc:63:f4:
         c8:66:0e:b6:ad:10:8e:00:fd:f0:fe:8f:3f:92:c2:90:53:67:
         58:08:e7:70:0e:b0:67:52:6b:98:8f:bf:42:d6:30:7d:ac:17:
         05:2a:6d:56:c6:7e:b1:7d:0f:c1:9f:49:d1:db:a2:7d:47:91:
         ff:d4:94:bf:1b:78:5d:5a:91:35:a2:2b:bf:13:a3:49:fe:1e:
         72:e9:89:96:4e:37:26:f9:e1:37:94:e8:4a:ed:1a:96:a7:4c:
         07:26:4f:20:a6:89:14:ab:9f:aa:1a:72:83:95:65:84:3b:f8:
         b6:30:7a:4d:91:4b:53:e8:15:e9:34:8f:5d:d1:4f:da:51:cf:
         8a:ff:42:ea:13:0b:41:c8:4c:d2:45:0c:90:5e:d4:81:1d:8d:
         8a:e3:f3:e5:3b:7a:42:e4:24:9f:e4:72:09:c8:d3:53:38:4f:
         6b:89:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----