Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WthWY9fBBd_jbpoEkC8SoHycwT4.cer
File:                     WthWY9fBBd_jbpoEkC8SoHycwT4.cer (raw, json)
Hash identifier:          m4nEkk/nAj/42Ps5LV7N5h4yMJQOKEp9uq9X58OP2QA=
Subject key identifier:   5A:D8:56:63:D7:C1:05:DF:E3:6E:9A:04:90:2F:12:A0:7C:9C:C1:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A8395607FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/2a9e04-a19b-45eb-aea5-5cd0defe59ab/1/WthWY9fBBd_jbpoEkC8SoHycwT4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/2a9e04-a19b-45eb-aea5-5cd0defe59ab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 13:56:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 59406
                          IP: 193.242.167.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722516445180 (0xa8395607fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ad85663d7c105dfe36e9a04902f12a07c9cc13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:bb:63:3e:8b:19:31:45:f3:35:35:3b:62:
                    e3:30:25:93:f7:41:20:d2:58:fb:1f:29:0e:cf:05:
                    70:d2:21:a5:aa:c6:e2:1c:d0:94:2c:58:c9:2c:d3:
                    ab:2a:23:df:86:59:f1:3c:59:4b:ed:2f:95:36:41:
                    f9:37:a7:35:79:5c:95:20:74:f1:0c:74:0b:a9:19:
                    f1:7b:5a:a5:59:b9:f7:22:b6:c2:27:c0:41:f8:3d:
                    3a:6c:8d:bf:31:f9:7f:40:0b:28:f4:9a:53:9e:eb:
                    d1:d0:c7:0d:e8:84:e9:a7:60:11:cc:62:84:76:d5:
                    00:7d:a0:39:aa:5e:23:a0:88:26:01:6b:dd:e1:94:
                    e4:03:9a:64:99:c1:91:3c:62:58:c3:b7:77:c3:14:
                    5c:b1:f5:7a:ce:2f:ac:96:01:80:8f:4b:0f:94:82:
                    1d:c6:a5:fd:e8:1b:ea:45:ba:f6:1b:2b:b7:17:84:
                    ec:14:d2:84:a0:53:a5:42:33:18:e1:2e:47:4f:8a:
                    f9:c2:24:79:4b:3f:f0:52:b8:f2:7c:49:a3:00:9f:
                    e7:b8:3b:56:01:7d:e5:79:aa:8e:3d:f6:92:09:15:
                    64:df:0c:2a:df:48:81:97:ee:c6:35:7c:27:72:a8:
                    3b:3d:68:c7:38:5c:78:7d:9a:51:b6:e6:ab:6b:89:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:56:63:D7:C1:05:DF:E3:6E:9A:04:90:2F:12:A0:7C:9C:C1:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a9e04-a19b-45eb-aea5-5cd0defe59ab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a9e04-a19b-45eb-aea5-5cd0defe59ab/1/WthWY9fBBd_jbpoEkC8SoHycwT4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.167.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59406

    Signature Algorithm: sha256WithRSAEncryption
         80:87:cc:dc:dc:3c:b3:10:0e:11:7f:87:2b:26:9f:fa:49:0d:
         bb:27:a2:86:9e:7b:60:1d:fb:32:70:ba:7f:13:96:96:cc:5c:
         3e:d5:03:b8:1c:9b:fc:77:6e:34:ba:31:6d:84:69:80:25:24:
         95:38:90:bd:f7:b2:94:5a:a5:2a:76:5c:78:ce:e6:fe:3a:4b:
         b1:8a:b4:6c:11:a2:9b:9c:4e:4a:d2:c1:e2:2d:eb:e8:14:d4:
         e6:27:f3:67:cf:9f:19:cd:00:42:ba:e9:05:4a:0e:46:b4:3d:
         7e:ef:7f:b1:a3:3e:09:5e:53:e4:c0:db:13:57:83:25:fd:db:
         f2:9b:c5:e7:9f:f6:94:e8:d0:f9:90:65:79:53:c4:7a:b3:02:
         bb:71:74:7b:d8:21:23:c6:20:bc:e5:09:63:15:f2:c1:37:6c:
         ee:24:c8:50:b1:4f:60:ff:a0:74:72:1e:6a:59:f2:16:b5:43:
         d3:a9:b3:ab:74:cc:1f:53:21:ea:68:5b:78:95:4d:64:9e:78:
         4b:55:b6:f9:b7:ba:e6:07:2b:25:77:ed:27:57:1f:b2:b9:79:
         40:6a:2e:61:73:4d:09:43:91:90:db:fa:f7:66:76:fd:6b:6d:
         bf:ce:66:c3:bc:97:1d:32:42:91:14:a5:a4:29:b8:05:f6:37:
         ac:1c:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----