Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Slym4X74n-OkTEJ281auWuyZXag.cer
File:                     Slym4X74n-OkTEJ281auWuyZXag.cer (raw, json)
Hash identifier:          MLUPlDLUpYBQGZo1Qa6LtrYlvHuFifnH9sd/6eIXl6g=
Subject key identifier:   4A:5C:A6:E1:7E:F8:9F:E3:A4:4C:42:76:F3:56:AE:5A:EC:99:5D:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185E32DFE87166281462BC437230F344960
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 24 Jan 2023 09:48:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 46.16.33.0/24
                          IP: 2a11:7d00::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e3:2d:fe:87:16:62:81:46:2b:c4:37:23:0f:34:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 24 09:48:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a5ca6e17ef89fe3a44c4276f356ae5aec995da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:d1:f7:0c:43:aa:92:c1:5a:66:d7:5e:af:
                    c0:24:b6:ad:f3:36:41:7b:64:51:a1:13:1d:85:06:
                    61:81:25:2f:89:22:1d:0a:71:07:e0:f6:e6:75:98:
                    a6:b9:7a:93:09:87:b6:6a:92:5a:2e:eb:b1:fd:25:
                    6c:c2:c8:2b:3e:e4:50:d2:35:3b:d2:4c:3f:bb:36:
                    3a:80:21:a7:c3:7b:b2:f0:03:20:75:ca:9f:8a:5e:
                    99:95:7f:6b:e2:95:f4:ac:df:54:0a:cd:7c:05:ce:
                    89:05:e8:43:8b:d1:df:80:b5:e1:b1:c3:c8:bf:5f:
                    d4:4a:eb:2c:28:a8:f9:2a:9f:86:c6:6a:6b:78:a9:
                    61:69:52:6a:23:23:4b:3a:b7:96:80:97:bc:4b:b4:
                    93:c4:99:7b:6f:ee:3c:a1:f5:0e:e2:e3:13:92:5a:
                    0c:fe:40:7e:fc:be:bf:75:17:55:47:96:d8:07:4a:
                    83:b2:9d:41:49:dc:d2:8d:12:24:2c:27:b3:15:8c:
                    d2:bf:78:5e:85:b7:e6:64:48:a5:07:ee:7e:dd:4e:
                    78:88:e1:1b:6c:0a:57:32:58:64:bf:b7:45:77:1e:
                    ae:8a:2c:96:0c:c6:b6:64:a7:0a:b0:cb:59:5c:0a:
                    9a:01:58:41:2f:92:80:c2:d4:a8:47:79:98:40:fd:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:A6:E1:7E:F8:9F:E3:A4:4C:42:76:F3:56:AE:5A:EC:99:5D:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f18e4a-0cc2-4bef-a894-e2448923cd5d/1/Slym4X74n-OkTEJ281auWuyZXag.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.33.0/24
                IPv6:
                  2a11:7d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:83:70:e5:63:5d:33:5a:9a:d2:a6:18:06:f9:eb:43:7e:
         4e:7f:b2:03:f3:04:68:57:e4:93:fe:2f:ab:69:37:d9:69:81:
         75:1b:f3:19:a6:2e:98:c5:a9:0a:3e:2b:22:59:50:97:02:c0:
         c7:cb:bf:cb:4b:4a:88:09:df:ea:e6:58:33:be:92:df:39:59:
         bb:aa:aa:0e:66:62:64:e1:d7:c6:f5:f2:ec:0d:eb:0d:90:c2:
         72:10:37:db:00:dc:50:4f:83:49:c9:51:de:3f:b2:c0:0a:db:
         62:76:6f:8b:56:04:aa:57:f4:41:5b:13:75:01:c8:78:4c:a1:
         95:d1:91:99:0b:d1:8b:22:14:60:95:ed:5a:85:41:17:f8:d6:
         07:4e:26:ae:ea:c3:f1:dc:17:7b:9d:c3:3b:52:e7:9b:2c:15:
         1f:42:33:75:20:fe:49:a9:b4:5c:57:a7:7f:0b:46:5e:a1:91:
         0b:93:59:84:25:a0:67:f3:d2:cf:f0:c8:92:86:de:35:49:94:
         2f:ae:b9:7d:17:48:ee:cc:fa:88:3a:5e:06:12:a7:95:72:9e:
         c7:87:71:23:06:8c:28:fe:05:05:1c:56:e5:08:41:e2:9b:b0:
         fc:10:b7:40:5b:76:ed:f4:81:2d:ec:70:7b:dc:d9:8d:28:e1:
         68:21:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----