Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhTsJw17EPMK42HCKRgg3ujI4j4.cer
File:                     WhTsJw17EPMK42HCKRgg3ujI4j4.cer (raw, json)
Hash identifier:          qOgGXaVrcHBSppCNeSZb3SDvqdxXWGZPKttopOcq6IA=
Subject key identifier:   5A:14:EC:27:0D:7B:10:F3:0A:E3:61:C2:29:18:20:DE:E8:C8:E2:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B65ECD1C052E111771650F131458FCF0F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/d2fda7-3acd-40c2-ba95-3651af83c924/1/WhTsJw17EPMK42HCKRgg3ujI4j4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/d2fda7-3acd-40c2-ba95-3651af83c924/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 25 Oct 2023 08:21:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 47539
                          IP: 93.95.27.0/24
                          IP: 2a13:d440::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:65:ec:d1:c0:52:e1:11:77:16:50:f1:31:45:8f:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 25 08:21:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a14ec270d7b10f30ae361c2291820dee8c8e23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:be:a4:e9:32:b8:30:21:54:f1:60:f1:cb:
                    e6:c5:ac:9a:46:ec:b2:63:4f:fb:62:b0:ee:99:51:
                    54:06:fe:95:4c:8f:1d:ab:82:80:1d:6a:20:c6:5d:
                    8b:b9:7d:6a:77:91:f8:26:0c:bb:30:3b:1d:8f:6b:
                    f0:fa:90:27:57:c8:18:67:91:aa:a8:28:73:11:8e:
                    3e:ea:da:fd:c1:31:2c:ed:a1:59:6f:68:d8:e4:a5:
                    11:e7:80:01:78:f2:40:ec:13:a6:d9:71:a5:1e:79:
                    e2:06:3c:e4:04:af:69:b8:ec:9e:17:bf:32:71:b7:
                    c0:c9:5a:e2:f6:cf:56:59:f4:01:66:6c:7e:80:f9:
                    c2:c5:c2:5d:70:a4:73:ec:af:55:33:ad:c2:2f:2d:
                    c8:54:e7:52:da:2f:01:a1:69:2e:48:c6:2c:18:52:
                    34:37:9e:99:4f:4f:26:ad:a2:fc:e3:a8:76:88:1a:
                    a9:b1:0a:0f:01:ae:ce:00:b8:7e:b1:7f:ef:83:df:
                    09:68:dc:34:27:55:a1:ce:61:41:b7:e3:4f:ad:7a:
                    e9:ea:57:6a:03:40:9d:b6:48:6b:ee:b3:3e:a9:67:
                    8b:b4:bd:0e:4d:ec:10:b3:d1:20:22:41:5e:00:f5:
                    54:a9:1b:1f:51:34:81:3c:23:10:ff:f3:80:58:30:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:EC:27:0D:7B:10:F3:0A:E3:61:C2:29:18:20:DE:E8:C8:E2:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d2fda7-3acd-40c2-ba95-3651af83c924/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d2fda7-3acd-40c2-ba95-3651af83c924/1/WhTsJw17EPMK42HCKRgg3ujI4j4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.27.0/24
                IPv6:
                  2a13:d440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47539

    Signature Algorithm: sha256WithRSAEncryption
         97:62:a7:a0:5c:84:ef:a0:64:14:10:3a:5e:e5:cb:90:5a:dc:
         a4:cc:36:2e:43:34:0f:92:c0:b2:b7:2f:19:e2:56:a6:8e:a2:
         fd:13:81:0f:4d:7c:d1:79:07:04:1e:9e:fb:82:4f:d6:dc:47:
         84:eb:97:ab:cf:99:fa:ee:d8:30:50:01:26:56:12:0c:e7:5c:
         ef:f8:e6:c7:1a:99:4e:e3:5a:9b:7c:8e:2c:c6:2e:90:1b:5a:
         00:ef:6a:1d:77:11:05:e8:26:97:20:58:bb:ba:cf:a8:23:96:
         4d:1f:74:ef:94:84:44:59:48:c2:df:2d:b5:a1:2e:37:be:c5:
         c1:a5:a0:7e:40:9e:9f:20:8e:1b:59:4d:7c:ea:52:b0:87:ac:
         5d:5d:60:71:61:93:eb:89:80:13:52:25:58:b1:51:15:a7:e4:
         82:67:cb:59:f0:95:bc:cb:53:a5:0e:7a:fc:81:62:68:78:6b:
         63:c6:73:49:c1:ee:9f:0d:28:bd:a3:52:ee:f8:5c:da:d2:9a:
         5f:db:b9:06:ac:ee:ae:8d:a4:8d:0b:bc:e6:a4:a9:fd:37:43:
         46:c9:95:a8:64:f8:85:a7:0d:3a:a8:5f:8d:24:3c:f2:e6:ab:
         6d:20:46:1c:9a:4e:fd:15:28:7a:cf:09:80:79:a8:48:ec:e6:
         c9:6a:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----