Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer
File:                     OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer (raw, json)
Hash identifier:          DhgNh95SnwCbFZow5fyytmAYGZlc2tA4ebgYmtIgFZc=
Subject key identifier:   3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       991729BA2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:53:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205775
                          IP: 185.36.0.0/22
                          IP: 2a00:cea0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657518606891 (0x991729ba2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:53:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a2651030fa3c5ffbb3488f1f15d99dc3b3bbaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:5a:ee:f3:9a:fb:88:5e:1c:3d:90:9c:19:
                    c5:6e:aa:6a:d1:a4:6a:2d:b7:cb:3b:47:65:7c:78:
                    13:59:76:07:4b:95:0a:f7:5c:de:90:85:ab:53:e5:
                    16:bd:02:6c:07:f3:88:3b:e1:9f:df:30:bf:82:7f:
                    a5:1b:14:1f:9d:87:66:a1:de:06:d6:aa:2e:6a:0e:
                    7f:04:d0:93:2f:3b:87:3c:01:38:b3:4d:96:62:4c:
                    90:c0:a1:e6:4f:d2:bc:f7:0c:a4:7a:7b:72:5b:7c:
                    2b:ec:cc:80:96:ea:94:2f:30:19:39:69:8a:24:fc:
                    1c:03:c7:ef:20:c2:f4:bd:16:d8:da:5b:86:9b:56:
                    71:82:cf:70:5d:b4:7c:58:0f:6d:c3:73:73:44:7d:
                    a7:fe:cd:a0:f1:1b:17:a8:8f:4b:2f:a2:af:8e:fa:
                    d9:d3:63:dd:4b:b9:d8:af:a9:a5:ad:5a:34:7a:66:
                    28:89:15:21:5c:89:33:33:ce:a7:5a:54:e8:5f:69:
                    3a:44:77:34:b7:2e:10:6c:31:aa:41:73:77:f1:db:
                    12:cc:2b:78:f5:ed:20:14:ba:22:8d:6f:9e:67:61:
                    c6:15:49:ef:ae:ce:10:62:d8:83:fa:34:93:3b:d2:
                    77:c2:fa:e5:71:c2:65:7f:dc:65:d0:10:7f:54:03:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.0.0/22
                IPv6:
                  2a00:cea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205775

    Signature Algorithm: sha256WithRSAEncryption
         98:89:db:47:50:f7:f2:a0:06:6f:2c:71:a8:39:89:2a:70:9c:
         ff:5a:bd:a7:8b:24:e3:4b:d1:c0:b6:4c:1c:db:83:15:9d:6f:
         74:13:27:5e:87:c5:ca:f6:a8:13:df:8e:d9:94:ff:e7:e9:30:
         c7:f6:dd:dd:d4:06:91:45:c4:af:9c:2b:b5:33:dd:3d:c1:45:
         48:79:6c:0a:9d:d3:18:2c:ec:7e:26:04:7b:00:cc:ce:ff:31:
         62:fc:75:4a:d0:17:91:06:53:cc:fa:3a:e4:bc:c8:a6:7e:6e:
         08:b7:4b:f1:db:43:04:47:74:35:91:31:be:25:e0:8a:0a:8c:
         70:92:1f:e9:fd:46:84:61:1d:74:57:25:da:6a:3e:b7:c2:51:
         80:c2:16:f4:47:8b:24:82:ec:8f:39:4a:c5:58:0d:3d:3a:cf:
         2b:b3:4a:cc:a5:7e:05:35:f9:44:26:82:c8:79:71:24:7b:43:
         38:ba:4d:64:5c:4b:a6:04:f2:5b:be:2b:a2:28:c1:b2:f0:73:
         20:d9:d1:57:4f:05:f2:ec:72:8a:51:55:d4:82:8b:ae:9f:e5:
         20:9c:63:91:2f:50:a6:fc:ca:a0:77:cd:99:cf:34:16:d3:0d:
         ef:4e:ba:56:1c:97:4b:f6:08:25:3d:48:af:94:af:24:d2:1b:
         ad:16:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----