Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8yr9HCQ_bxq3wt4BikPEyQadug.cer
File:                     f8yr9HCQ_bxq3wt4BikPEyQadug.cer (raw, json)
Hash identifier:          r6tG3TgWlC+HRuApL1wviaBrNuDoAvi/smll9uPrrWI=
Subject key identifier:   7F:CC:AB:F4:70:90:FD:BC:6A:DF:0B:78:06:29:0F:13:24:1A:76:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A36340D61F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/f8yr9HCQ_bxq3wt4BikPEyQadug.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 09:53:06 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.66.232.0/22
                          IP: 2a0f:d5c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701744862751 (0xa36340d61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:53:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fccabf47090fdbc6adf0b7806290f13241a76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:e3:be:1b:9f:8b:6e:79:f4:4f:96:f8:84:
                    eb:3c:ca:36:8d:fa:f2:37:d9:c7:e9:cc:5b:1f:70:
                    07:34:51:d3:fe:72:2c:2b:e6:48:86:79:62:4e:0b:
                    99:f3:d2:28:ea:a0:29:df:52:30:4b:a9:3e:71:3b:
                    70:57:00:82:89:fe:23:c9:8a:6b:e6:c8:15:91:f9:
                    4f:11:98:65:5f:23:aa:41:58:ab:0d:bd:f8:a6:32:
                    22:ac:af:4a:be:4f:89:81:08:3f:b3:9d:fd:a1:12:
                    1c:03:97:12:40:7d:c8:fb:33:9c:98:d4:22:53:63:
                    ab:32:ad:33:32:e7:b8:12:75:03:94:02:57:69:15:
                    7b:6f:8f:4d:b5:7b:53:b3:d7:3c:7f:71:fc:8b:a9:
                    da:b4:e5:4e:96:e1:67:c7:47:86:29:a8:77:e1:ba:
                    a6:72:31:72:7d:0c:35:4c:46:e0:e2:22:71:a8:39:
                    68:a9:2e:8f:dd:4c:35:b4:80:6d:57:f5:28:2f:a2:
                    f2:ad:ea:6a:b5:30:5b:26:4c:a9:bf:24:5c:e5:d9:
                    e3:9e:62:10:b6:39:ed:98:f8:69:48:75:8e:52:66:
                    3a:56:8f:2c:23:c1:1c:25:d1:2c:a4:6f:c0:88:37:
                    af:f1:cf:d2:a6:47:a6:63:15:f4:e0:70:fc:ff:33:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:AB:F4:70:90:FD:BC:6A:DF:0B:78:06:29:0F:13:24:1A:76:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f8c327-b127-4764-86f0-8dec1afd8f64/1/f8yr9HCQ_bxq3wt4BikPEyQadug.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.232.0/22
                IPv6:
                  2a0f:d5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:c2:17:20:7a:26:fe:36:c1:35:dc:57:22:df:15:24:e8:
         b4:29:21:06:7a:81:a3:81:20:c9:2d:40:7d:b8:5f:c4:c7:4b:
         6c:80:c4:80:7a:50:6f:9a:e8:24:07:81:db:05:70:fd:32:23:
         4e:b9:9d:84:fe:fc:4b:35:29:ae:27:5f:ee:7c:2c:16:44:9a:
         0f:f2:ac:a2:8d:ac:d3:37:e8:3f:29:71:c4:e9:65:98:87:73:
         28:ba:ab:98:e7:52:08:9c:aa:e9:bb:c8:46:48:61:d7:3b:e1:
         b3:a1:cc:39:0e:83:03:bc:ce:15:10:e8:d6:e5:a0:ba:11:3d:
         ec:53:90:e4:1c:7b:64:5b:35:d1:8c:4e:81:96:fd:bc:eb:84:
         f2:94:39:92:d8:37:1f:c4:d4:13:78:da:f7:b9:1e:4c:c4:40:
         1a:dd:0f:07:5a:be:cf:21:0c:2b:8b:82:25:f0:79:c1:a5:5a:
         19:df:18:d0:bb:ae:cf:2c:06:1a:05:38:eb:b3:1d:3c:2b:c0:
         54:f9:68:95:ed:2b:46:f2:9e:07:dd:ca:e2:fd:01:3e:98:fc:
         29:5f:d3:4b:16:10:2e:25:30:f5:8e:56:7c:c8:1a:31:35:b0:
         e5:f2:85:c0:83:3c:ab:18:fc:bf:49:d4:57:69:2e:5c:c6:cb:
         fc:97:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----