Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer
File:                     I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer (raw, json)
Hash identifier:          FfSi5dEy+EkD5zxJxe+48s44pqYh0xPPgaAwLoNacPg=
Subject key identifier:   23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A9F3E61DE1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:03:04 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 84.54.0.0/22
                          IP: 2a09:4500::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729941417441 (0xa9f3e61de1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:03:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23e391f062bd8cd79eb845fa66e80ab42914a9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:73:77:70:f0:bc:8b:49:72:6c:a5:34:11:
                    2f:8a:e3:cf:dd:16:12:39:2c:e0:f5:77:ba:f6:12:
                    fc:75:bc:ac:59:6c:cf:c8:14:b2:23:e5:08:b1:b5:
                    1e:51:2e:a9:e3:2f:f2:84:1b:b0:cc:e8:71:5b:af:
                    2a:6d:38:0e:4d:64:39:a1:7c:83:a6:eb:f9:9a:11:
                    5e:f4:9a:81:36:f9:e1:85:7d:85:9a:4e:22:57:2e:
                    d3:f9:86:df:43:59:6d:5e:40:24:6e:87:b0:03:54:
                    b1:53:2d:86:db:1c:a0:ee:86:0b:52:e0:f9:4e:d6:
                    86:de:5a:bd:f6:35:1e:c8:34:7d:8d:84:0a:87:03:
                    f0:53:b6:71:4b:45:24:9b:dd:d9:67:5e:96:dd:33:
                    f0:12:d8:c1:76:3b:dc:a4:51:35:ea:10:b8:90:75:
                    2c:91:f7:c4:67:11:37:4c:82:25:cf:fd:60:c6:cf:
                    3f:71:1b:69:31:4e:91:43:2e:14:bb:0d:dd:6f:2a:
                    5a:dc:17:7b:19:cb:9b:e0:3f:f7:30:6d:d7:b5:eb:
                    ac:49:4e:a7:86:6a:be:46:dc:f9:12:67:4a:12:fc:
                    7c:93:1e:38:f4:2f:0d:b4:90:9c:2c:b0:ea:f7:91:
                    91:4a:3c:cb:77:e5:a7:60:5e:a1:b9:03:2a:51:63:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.0.0/22
                IPv6:
                  2a09:4500::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:d2:28:a7:12:14:d3:10:6d:f5:5f:53:73:27:f6:a2:49:
         85:03:46:a2:08:d0:01:8c:0c:b2:6e:8c:89:d0:bb:84:2f:71:
         ad:8a:ed:a5:33:c2:eb:3d:ec:58:15:a3:06:4c:94:48:29:95:
         36:ae:2f:76:c9:c0:6c:a9:4b:01:c7:97:3c:6c:f9:88:d6:3d:
         4b:3d:79:36:e7:78:ce:1e:bf:5b:f3:13:8a:ec:66:17:3e:c6:
         2c:ab:2d:54:f6:5c:e1:ad:0f:e1:8c:09:b8:f2:64:a4:48:90:
         6a:48:1d:81:8f:b0:26:4c:b8:48:38:45:3e:55:79:4c:69:e8:
         1f:b4:16:1a:74:32:3b:be:1d:aa:eb:02:e1:eb:23:c5:1c:a9:
         1c:80:8e:f6:5f:fe:95:69:02:fe:fc:a5:58:6e:dc:b9:9d:b8:
         b3:fa:b4:04:ea:0a:d4:cd:df:84:08:6c:c3:de:3e:1a:0e:a7:
         e4:c0:15:20:7b:bc:28:23:e1:8a:dd:c8:4c:26:4e:42:e3:3e:
         a0:db:e0:b2:0e:7a:8d:d5:5e:7a:b8:eb:58:0e:7e:46:16:fa:
         56:90:40:be:0f:a6:45:b7:ab:a1:cf:7a:aa:bc:1c:17:a8:5a:
         85:92:8b:4c:7f:7a:9a:9d:14:b4:ff:f0:16:a6:77:82:83:fa:
         34:21:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----