Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dD8WcQusajvO615LsXXESCqlCkI.cer
File:                     dD8WcQusajvO615LsXXESCqlCkI.cer (raw, json)
Hash identifier:          c9Hz/JzVl0k7JTn0J+y1zq5IJA20ENxC+H0eHDnZfmo=
Subject key identifier:   74:3F:16:71:0B:AC:6A:3B:CE:EB:5E:4B:B1:75:C4:48:2A:A5:0A:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183BEFBFF2E059988F97D9AC7C865F564C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 09 Oct 2022 23:02:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 209529
                          IP: 185.228.220.0/22
                          IP: 185.248.72.0/22
                          IP: 2a0e:70c0::/32
                          IP: 2a0e:a540::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:be:fb:ff:2e:05:99:88:f9:7d:9a:c7:c8:65:f5:64:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct  9 23:02:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=743f16710bac6a3bceeb5e4bb175c4482aa50a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:69:49:5a:a5:a8:4d:12:a0:51:3b:33:dd:
                    05:0d:25:87:bc:13:a0:40:9f:81:10:2c:bd:81:7d:
                    39:cc:59:6f:f5:2d:89:9f:ed:ef:c1:fa:0c:6c:6c:
                    90:f2:8e:e2:db:06:7f:4b:4e:8f:b9:85:5a:c4:7c:
                    13:32:c7:7c:07:cc:7e:8a:1e:13:9e:15:0f:c1:17:
                    24:e2:66:1f:2c:a4:0c:bc:2a:be:ad:51:20:02:68:
                    4c:86:4e:52:0f:73:2b:72:a4:cc:55:63:a5:38:08:
                    d0:71:56:9b:18:5d:33:53:ef:01:8d:c5:b8:98:70:
                    18:d6:b1:aa:49:eb:a1:51:ad:dc:62:1d:3b:d1:2c:
                    c5:34:79:c4:28:57:57:03:f1:ad:47:c7:f5:dc:9e:
                    71:2b:d2:d9:4e:b4:8f:78:f9:4f:7d:25:71:1f:d4:
                    db:b7:d7:ce:d9:a2:c7:fa:64:5b:15:5e:01:3c:9a:
                    74:63:c7:f8:06:c2:c4:b6:d4:4a:a9:9f:d4:7f:d7:
                    c6:0a:48:d0:59:f9:a1:46:2c:2f:96:7b:00:82:f0:
                    e0:b8:fc:45:8c:b8:89:a5:02:94:aa:9e:91:b1:4d:
                    69:a9:e0:ae:18:4e:39:dd:e2:64:a2:8d:2d:66:90:
                    5d:da:ec:2b:14:b0:a1:84:5a:f3:3c:32:f8:e6:a2:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3F:16:71:0B:AC:6A:3B:CE:EB:5E:4B:B1:75:C4:48:2A:A5:0A:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a6fa7d-1285-44c2-8e64-f5453f6e31af/1/dD8WcQusajvO615LsXXESCqlCkI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.220.0/22
                  185.248.72.0/22
                IPv6:
                  2a0e:70c0::/32
                  2a0e:a540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209529

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:83:2c:55:35:0b:06:85:bd:97:ab:ef:69:c8:b6:af:66:
         25:ce:cd:fb:e4:34:1e:01:a9:ce:25:10:0e:1e:14:20:39:32:
         29:30:64:b4:2a:89:9b:69:62:41:d2:e4:b0:b8:1d:a5:41:28:
         38:1c:1b:b6:be:1f:69:d7:2f:0c:13:fc:3e:fb:1a:99:62:72:
         74:70:86:f5:4f:b0:1f:66:13:17:06:7a:db:d8:d5:0e:1c:3d:
         73:18:93:8a:38:c4:16:f6:4d:16:4b:f7:12:a0:27:d5:55:d7:
         0c:7d:d8:eb:d8:6e:d3:9e:3c:2a:ed:2b:b6:8f:bd:b8:c2:9f:
         21:1f:0a:77:a0:d0:c8:cf:75:71:88:38:98:7a:b2:ec:6c:39:
         b6:1b:68:62:35:90:ad:3b:1b:80:81:66:21:27:92:4d:5b:34:
         fa:1a:24:63:a7:2f:63:cc:e1:d4:ab:a7:5c:ca:51:ff:ab:bc:
         a1:d7:4e:f2:76:b3:02:d2:83:18:c7:b6:c0:cf:45:e5:81:ea:
         0d:cf:d8:63:3b:46:de:f2:d0:f8:36:d3:fa:63:83:ac:3c:2e:
         f8:21:38:fb:2b:1c:f7:76:b1:71:52:6e:21:7b:0e:f2:b5:43:
         7c:2e:57:c0:0c:e8:96:40:f7:f4:a9:a5:a1:43:f1:d8:5c:bb:
         f3:de:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----