Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/enLqmRzs2UPSaENjjVJLtzr158Q.cer
File:                     enLqmRzs2UPSaENjjVJLtzr158Q.cer (raw, json)
Hash identifier:          F1Hv6zSJB4G6z8wANW6O3Ii1cHJnY1pkOcKEeU0q4zI=
Subject key identifier:   7A:72:EA:99:1C:EC:D9:43:D2:68:43:63:8D:52:4B:B7:3A:F5:E7:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AE7555F9E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/55a309-64aa-4652-8216-40b03ab7cbfe/1/enLqmRzs2UPSaENjjVJLtzr158Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/55a309-64aa-4652-8216-40b03ab7cbfe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Mar 2022 15:38:29 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a03:2080::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749292878308 (0xae7555f9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 10 15:38:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a72ea991cecd943d26843638d524bb73af5e7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:e7:f4:fe:7f:10:31:a8:c1:fe:45:be:2e:
                    be:a0:a9:9f:15:f8:97:c1:01:00:4d:a6:73:c7:b4:
                    c7:5f:ed:73:91:8a:a2:a9:fe:7c:7a:61:40:72:03:
                    83:53:24:50:e4:a7:d8:e1:0e:da:93:60:ec:86:1f:
                    1e:88:a3:47:2c:85:e5:86:0b:ee:28:fe:4b:17:97:
                    48:e4:6c:fb:ec:5f:c8:9b:e6:2d:e4:e2:b0:2d:76:
                    5d:43:f5:06:a9:cf:f3:ea:32:82:dd:72:dd:e4:d9:
                    52:cf:e1:22:c1:4b:0a:d9:bb:c0:c8:bb:d9:61:b1:
                    42:f8:f7:45:fd:25:0e:71:f0:ab:aa:2e:a0:70:5a:
                    5b:48:83:51:ac:50:3e:d0:cb:64:17:43:a0:3b:ea:
                    93:4e:c2:bb:08:36:1c:d0:90:d8:5f:79:c7:07:39:
                    a7:b1:df:8c:f0:8e:61:0c:bc:9a:5e:7c:29:47:84:
                    87:6a:b5:b9:54:86:38:82:6a:8f:45:4e:83:0e:c6:
                    18:c0:50:17:75:68:57:78:17:47:cb:46:5b:df:e0:
                    af:00:d2:08:d1:1e:a4:0d:f3:38:1a:db:08:3f:b1:
                    f4:78:33:3f:bc:76:90:ee:44:6c:fc:06:85:c6:90:
                    d3:9a:db:17:16:c1:0f:ab:a3:77:ae:c7:03:07:fe:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:72:EA:99:1C:EC:D9:43:D2:68:43:63:8D:52:4B:B7:3A:F5:E7:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55a309-64aa-4652-8216-40b03ab7cbfe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55a309-64aa-4652-8216-40b03ab7cbfe/1/enLqmRzs2UPSaENjjVJLtzr158Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2080::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:b1:b1:71:56:07:65:1d:c0:75:d8:b9:ad:03:79:49:07:
         77:48:bb:63:bc:09:93:a9:c9:3f:14:0a:17:78:f9:1d:1f:c0:
         42:57:dc:25:95:4d:d7:c8:73:8f:b4:fb:6e:d3:f0:75:c6:26:
         a6:52:3e:db:0d:94:a1:5f:f7:91:b4:77:8f:2a:15:1a:31:b9:
         6e:13:d2:68:a8:0b:27:26:c6:5d:cc:ee:3e:8d:84:20:8b:37:
         94:8d:9a:02:9b:18:5f:11:6b:14:b2:e3:1f:06:32:82:84:13:
         3e:1b:1d:df:74:b0:70:53:dd:33:a0:76:58:e1:b1:ff:fb:7b:
         63:b9:9e:9f:fb:26:3a:79:5c:1c:79:c8:56:fe:03:e6:c2:fd:
         fd:6e:66:74:9e:70:c7:1c:e7:ae:f5:dd:c9:05:f8:2e:b5:05:
         79:f2:ab:f8:cf:1a:6c:24:66:97:fd:8f:49:2e:86:ef:d0:9c:
         37:98:1b:09:87:3e:62:a6:08:33:a0:ff:ba:94:04:a9:ae:2f:
         fa:6f:ce:39:e6:00:f7:1e:4d:f2:24:2f:14:8a:cc:3f:0b:d5:
         cd:e8:23:44:2e:6a:33:7d:06:54:86:69:7e:40:99:37:16:7b:
         fc:69:c5:83:ae:6e:0a:95:bf:5b:bd:f7:67:7f:87:3e:f3:46:
         3e:77:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----