Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer
File:                     Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer (raw, json)
Hash identifier:          1pUcbm9f7vyB7g5x2BaIl5Kn/8pd9SbH+CCkpuRTRZk=
Subject key identifier:   51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AAB5DF3BF9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:58:51 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.93.60.0/22
                          IP: 2a09:3b80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733195746297 (0xaab5df3bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51dfa98887f456827a36f665657f550c425e38f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:24:b9:a3:3d:22:d8:eb:52:c4:4d:b4:f7:
                    9f:da:f9:71:32:20:25:cb:08:25:eb:b1:e7:db:18:
                    6b:2c:36:5c:0d:7f:02:1b:d4:ba:13:1f:4b:5f:a9:
                    85:ed:bc:f2:b0:16:de:e7:17:c8:90:a5:03:53:3b:
                    88:0a:be:e0:4f:13:52:38:a8:5e:1a:ef:94:89:4f:
                    63:f2:8d:a2:4b:03:31:5f:0e:bc:4c:f2:f5:e0:16:
                    54:cf:ed:dd:68:97:75:92:9f:cf:ee:5c:b5:89:74:
                    2c:f1:25:25:b5:dc:f2:29:b1:c5:ce:5c:9e:be:bc:
                    49:e9:a5:9e:14:a3:38:e5:6a:c3:01:d6:e8:74:9b:
                    c8:13:30:c7:f2:23:ac:d2:4a:43:a4:06:28:3c:85:
                    69:91:75:69:69:f0:67:34:4c:5d:57:db:be:14:5a:
                    cb:5e:30:02:e2:1b:af:2d:6a:8c:68:b1:b6:38:e2:
                    94:54:b3:bf:35:df:90:c1:88:9b:e2:a0:ab:9c:74:
                    48:e3:ff:a3:fd:ac:80:79:ba:24:90:3e:f4:d7:15:
                    22:8d:42:0b:74:20:2f:5c:db:59:2f:74:4e:1a:ce:
                    8f:72:35:21:c6:a7:1d:10:12:0a:c7:0a:bb:97:4e:
                    5b:42:3a:d7:56:1e:0d:8d:16:ba:55:20:2a:02:16:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.60.0/22
                IPv6:
                  2a09:3b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:44:d4:24:a0:e1:75:29:43:92:91:02:68:02:cb:1d:56:7b:
         b4:7e:e2:37:d4:6d:2d:70:82:26:f2:81:4c:6b:12:9e:c5:5f:
         85:fd:f0:66:8d:48:9f:63:60:46:af:85:ff:a7:68:91:54:82:
         e5:fd:0d:ae:49:d4:39:73:74:90:5c:2c:70:49:41:d1:cc:23:
         b6:f3:bc:8f:c8:65:e3:4e:a9:5f:c1:a5:1d:22:65:54:1b:2e:
         a9:13:f8:a4:76:de:07:ba:a3:e1:ed:73:e8:08:8c:20:fb:d2:
         43:94:2e:e6:7f:d8:56:9a:61:33:6f:2c:2f:b1:45:c0:9f:41:
         8f:da:63:8d:39:60:fb:4f:fe:04:2e:0b:47:6d:f7:ae:60:09:
         38:f7:1d:c3:00:05:37:d4:e6:c3:3b:22:8e:47:29:d9:85:a8:
         5b:94:7c:ba:9e:ed:98:50:68:a0:7e:67:d4:14:a4:e0:68:60:
         c1:94:fa:7f:c6:6c:08:01:d0:7d:09:11:4e:86:0e:d3:48:9d:
         89:85:72:b1:aa:20:bb:b6:ab:a3:e0:bd:2e:57:df:6b:7f:c5:
         1d:ba:6c:5d:76:da:3d:83:17:88:4e:1d:ed:ff:b3:d1:ac:d7:
         b7:cc:3d:ed:6d:87:9c:19:6b:31:5c:60:32:e4:ee:7a:ab:67:
         df:8d:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----