Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
File:                     dQCQWovTATKNCBSFwDNMN0CKtXI.cer (raw, json)
Hash identifier:          CQwba1Y9fxcqQD0FL3zatrFRVzFB8dt/fY929X5K7GU=
Subject key identifier:   75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A49D8BC9AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:54:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 92.249.60.0/22
                          IP: 2a09:b700::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707017820589 (0xa49d8bc9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:54:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7500905a8bd301328d081485c0334c37408ab572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:5e:77:f0:97:c0:f6:a5:93:b4:5f:40:34:
                    9c:10:b3:29:0a:9e:65:be:84:ff:08:42:89:38:70:
                    26:be:81:39:95:b0:b5:1c:1c:7f:14:c2:eb:18:55:
                    af:88:9b:5e:59:21:d9:5e:5b:42:d2:49:46:c7:63:
                    7f:90:4b:14:39:64:8f:09:3f:76:da:0c:7a:15:5b:
                    9f:76:6e:63:bc:eb:4a:f6:4a:b2:2e:bb:3c:1d:00:
                    fc:29:70:d4:d2:89:5a:88:44:0f:d4:fd:f8:a1:29:
                    ec:e0:39:b8:06:33:57:86:0a:23:ca:e6:e5:b6:e6:
                    e4:39:cd:a5:99:b6:ae:cc:b1:2e:38:e1:52:5a:06:
                    2b:ff:9d:3a:83:32:0f:a7:49:6d:fd:00:0c:38:d6:
                    81:c8:db:e2:bf:4b:e4:a7:84:77:97:8b:72:d8:44:
                    f7:67:15:9b:da:cf:f7:09:e3:65:37:bb:62:9b:26:
                    95:de:73:49:b1:a7:44:53:20:41:27:49:c7:a9:51:
                    d2:ae:d7:63:fe:a9:cb:65:b1:65:7e:d2:2a:56:2e:
                    f1:d6:c8:de:4f:a1:d1:96:07:4e:d6:53:28:ab:89:
                    16:95:0d:49:48:29:1d:86:9e:1d:2b:c7:c2:2c:70:
                    b8:02:fb:05:e0:b8:58:e9:12:63:97:59:a2:01:18:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.60.0/22
                IPv6:
                  2a09:b700::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:9b:4c:d3:ec:ac:7a:74:20:c6:73:9b:ac:3a:c9:f9:d1:
         0d:93:7a:90:a4:ed:0e:2c:b0:60:f6:d7:8e:fb:71:03:35:d6:
         3c:67:e8:75:c4:f3:65:28:6d:5c:90:93:dc:d9:46:c9:9f:71:
         ac:3c:6c:a0:f3:bb:bb:4d:3c:3c:ea:fe:b6:9d:91:5e:12:c8:
         bc:c2:af:ec:fc:6f:1c:b2:7d:a0:36:70:c6:14:0f:6f:08:7c:
         a1:c5:b7:ba:be:f0:d4:c3:fb:16:eb:08:74:e4:76:cb:bf:2b:
         2b:30:ef:ac:5d:3c:8c:c9:da:32:9b:4f:bf:39:d0:72:53:b0:
         e3:28:c0:66:ce:b4:bb:d6:fd:57:2e:1b:29:e0:94:39:e9:c2:
         de:97:f1:f8:91:ed:d5:09:f3:e2:c5:db:20:c9:45:70:57:88:
         2e:9f:83:32:7b:16:95:31:50:2a:94:34:e4:c4:a3:de:17:1f:
         6e:b9:72:5e:fe:c6:4f:8a:b7:96:87:f3:25:7c:1d:a3:f9:4f:
         89:7f:08:a3:2d:70:8c:b9:79:45:10:0d:b6:59:80:6f:d2:7e:
         ae:9b:13:ed:f4:a6:46:8c:63:f2:bd:93:c6:32:d4:ea:83:b5:
         31:f6:c5:17:e6:4a:7f:64:2e:a3:98:97:6c:2c:29:2e:ef:13:
         b8:ff:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----