Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYJY6Tt-Siohghqpn9nP9vMktfw.cer
File:                     HYJY6Tt-Siohghqpn9nP9vMktfw.cer (raw, json)
Hash identifier:          98+3p1hsf2du75pdxxdtq5aOWyrY3yj20fHLpMu1URc=
Subject key identifier:   1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FAFE9BC984565B1CD564893F813F564
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 199136
                          IP: 78.31.160.0/23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:af:e9:bc:98:45:65:b1:cd:56:48:93:f8:13:f5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d8258e93b7e4a2a21821aa99fd9cff6f324b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:6a:45:7e:5b:df:3b:b1:90:3e:42:cf:ff:
                    24:05:1a:09:ab:41:37:a0:05:ca:04:b1:0e:5f:ba:
                    95:fe:b0:20:17:c1:3a:6d:6a:54:82:2e:7b:bb:02:
                    ed:9d:40:ce:94:c2:b1:b4:8e:54:4a:83:cb:13:f7:
                    17:1f:dd:88:ca:92:98:e8:da:4d:67:42:30:46:cc:
                    10:bc:65:2d:97:ae:c4:6e:7f:4f:66:b8:33:29:ad:
                    c1:a7:5b:96:28:6b:fd:cf:18:22:51:5c:0f:11:8a:
                    de:85:b6:06:76:26:9a:88:7a:14:69:95:36:25:79:
                    b6:0a:9b:6b:1e:5f:35:f1:aa:4c:40:39:0b:33:db:
                    6b:c1:38:31:cc:db:c4:eb:2c:80:3a:1b:38:48:f1:
                    78:1f:e0:26:ce:6f:14:7f:df:b0:c3:39:97:50:0c:
                    a8:a8:f2:13:0a:75:b3:d5:33:54:0c:1b:ae:2e:7e:
                    77:12:33:0e:72:1b:6f:54:33:e3:89:51:1c:54:fd:
                    3a:61:15:26:9a:57:db:68:56:c8:b0:0a:4d:97:fc:
                    8e:3f:52:3e:34:3e:32:7f:78:30:76:ad:9d:34:cb:
                    b4:24:8d:5d:ab:4c:ca:c3:71:dc:e2:d8:b0:0d:41:
                    95:e1:05:75:c9:2e:35:c3:c2:ea:63:7d:22:66:75:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.31.160.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199136

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:88:f7:9f:a3:13:2e:70:20:f9:35:fa:73:d8:d0:ad:44:
         81:25:2b:e1:31:72:82:22:70:81:a6:87:c6:84:85:b6:a8:8b:
         b7:8d:55:38:5f:2e:e0:0b:f3:ff:65:de:e6:6e:04:5f:a2:2a:
         69:7a:d7:5c:9e:67:6d:12:43:4e:85:50:2d:6b:af:43:67:8e:
         b5:f3:df:3c:65:f9:fb:2e:0b:9f:3d:5d:54:38:50:88:18:1c:
         a0:ec:e2:a9:57:c1:02:db:b0:f8:c5:fd:b6:cf:64:b0:77:a1:
         c1:68:f0:2c:87:98:16:b4:fa:c1:30:11:57:3e:fe:60:54:8b:
         92:81:f8:13:b8:6a:62:a0:09:72:a8:69:93:8c:71:cc:3d:c9:
         40:19:bd:10:e7:3a:b2:2a:95:19:1b:f9:c2:d0:4d:b4:fa:0d:
         f1:1e:7b:93:0d:9b:e4:58:ed:5e:62:38:0c:75:37:e6:81:74:
         71:8c:fb:e3:a2:07:6b:ca:6e:b1:4e:ee:a2:eb:9c:ab:aa:1c:
         55:7c:75:ae:60:4f:c7:04:61:17:fc:e8:02:8f:d1:f5:7b:ed:
         ad:f9:36:74:3a:3f:1b:a6:18:b7:ab:0c:2c:77:eb:f3:30:91:
         a2:75:52:e3:88:e7:c4:8e:89:a9:be:c0:c9:06:c5:e4:10:a9:
         12:5a:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----