Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0_jtMvoN0WHAAcywZFHmQ_kVTA.cer
File:                     a0_jtMvoN0WHAAcywZFHmQ_kVTA.cer (raw, json)
Hash identifier:          F+Nmx7vMnpTD9kGVIZ1Pnh9HtAqSX12UX0Ntw81H84Y=
Subject key identifier:   6B:4F:E3:B4:CB:E8:37:45:87:00:07:32:C1:91:47:99:0F:E4:55:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B14095C86F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/a0_jtMvoN0WHAAcywZFHmQ_kVTA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 04 May 2022 09:50:03 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 206787
                          IP: 185.176.84.0/22
                          IP: 2a0a:7a80::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761292769391 (0xb14095c86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  4 09:50:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b4fe3b4cbe8374587000732c19147990fe45530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:2e:f9:d8:3b:89:61:18:9a:f4:43:64:e8:
                    68:47:09:06:90:7a:c5:5d:13:2b:ba:9d:64:cc:77:
                    a5:70:99:78:f7:de:e8:66:14:0f:43:0b:f6:8e:66:
                    8b:dd:47:11:af:25:63:29:43:3d:3d:3a:bb:22:de:
                    c8:72:91:5a:f5:9c:a9:d7:3d:ab:f1:a1:90:7d:7c:
                    74:bf:bc:35:28:19:78:30:f7:95:35:e2:89:de:e2:
                    8d:ef:fa:4d:d7:fb:c0:ba:12:ba:5f:5b:cf:af:67:
                    9a:8d:c1:0b:70:fe:50:9a:13:15:41:e8:c2:9b:55:
                    1b:35:b0:52:80:f5:06:2a:88:42:b8:2e:f3:14:33:
                    03:52:df:26:af:2d:79:d2:3b:fc:ec:9b:8a:1c:73:
                    d3:3a:03:36:2e:16:42:94:1e:8f:a0:04:3c:8b:e7:
                    af:f7:ac:6d:90:f7:ed:00:2e:87:ed:67:98:a7:3a:
                    45:a1:15:37:d9:ee:3a:18:da:2c:07:f4:91:d1:e7:
                    29:11:b8:73:4e:f7:cc:bd:20:7c:76:c4:41:ae:f3:
                    a2:91:7a:6c:1f:49:55:f1:3d:6e:ce:3a:7e:18:d5:
                    75:fb:b3:3b:e6:5e:a9:a2:b7:88:0e:95:11:7c:35:
                    28:ec:fd:fc:11:30:fb:1d:cf:8d:a0:80:78:b4:3b:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:E3:B4:CB:E8:37:45:87:00:07:32:C1:91:47:99:0F:E4:55:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ffc6be-91f7-4021-b366-905af95df5dc/1/a0_jtMvoN0WHAAcywZFHmQ_kVTA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.84.0/22
                IPv6:
                  2a0a:7a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206787

    Signature Algorithm: sha256WithRSAEncryption
         58:7a:91:aa:2c:3f:f7:33:c1:cd:70:b1:7a:65:93:56:f2:69:
         07:41:28:30:4c:4e:1a:e3:31:de:2a:77:71:3f:c1:e0:69:bc:
         2a:16:49:90:70:94:b6:b6:d0:55:c9:d1:f1:31:e6:94:b8:2a:
         1c:8a:ec:c8:e5:52:4d:8b:2e:48:e7:f1:1b:a3:0a:b1:29:e3:
         c2:30:89:cb:68:67:e6:1a:72:07:5a:f0:f5:c0:fe:06:f9:9f:
         d4:9b:79:d2:ed:63:5c:f7:53:e8:d6:20:31:09:47:dd:ab:1f:
         d4:de:f1:d0:f0:22:38:82:05:17:75:d8:67:98:1a:3e:be:de:
         dd:99:d3:31:e7:94:c2:32:a1:d8:a8:80:53:6e:00:09:7e:a4:
         81:b8:18:16:0f:e7:64:55:59:fa:5a:4f:85:cb:f0:20:4d:c8:
         1c:0e:ae:c8:22:10:8d:21:a3:0d:d0:8c:66:9c:57:30:13:e6:
         52:5a:47:4b:d2:7e:4a:a9:9e:5c:92:07:36:22:c6:25:b4:11:
         73:77:22:17:5e:a8:06:e6:a9:89:6b:9e:9e:dd:b2:dd:e6:3f:
         63:a1:63:f9:4e:56:e5:80:56:85:f8:85:e0:ed:b4:9b:de:56:
         30:32:56:0c:5e:88:96:f1:7a:ad:49:76:c2:d7:4f:b3:af:33:
         d5:f5:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----