Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hFNvxML0S6cOQgvTuyHMvWC0pKE.cer
File:                     hFNvxML0S6cOQgvTuyHMvWC0pKE.cer (raw, json)
Hash identifier:          EiTBXTXoT0jZU8BwCxyAaCN5XtSQHN7MK9CU6T4NLd0=
Subject key identifier:   84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ACE5C3B25C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/hFNvxML0S6cOQgvTuyHMvWC0pKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 03 Feb 2022 12:41:43 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 5398
                          AS: 44160
                          IP: 77.220.64.0/19
                          IP: 185.155.176.0/22
                          IP: 2a02:210::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742589182556 (0xace5c3b25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  3 12:41:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84536fc4c2f44ba70e420bd3bb21ccbd60b4a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:af:d8:d2:d5:0c:90:04:60:d2:42:20:7b:
                    cd:9b:e2:af:fc:ae:c8:56:d2:c7:87:d9:8e:d9:d4:
                    b5:ef:d7:dd:fa:3c:c8:04:76:89:39:5a:26:1d:d0:
                    b8:f5:15:a9:4d:cd:b2:22:68:d9:ac:3a:8d:09:ff:
                    3f:12:61:44:06:06:34:e6:6c:f0:b0:3d:4a:66:70:
                    43:fe:75:bf:e4:a9:d6:75:25:29:0d:5f:bb:b4:59:
                    f2:17:c2:00:da:ef:e0:f9:e0:5b:28:ea:25:ff:c6:
                    99:9b:c0:c5:22:8f:8b:a3:67:93:52:9d:c3:be:42:
                    72:fa:74:51:c4:57:81:4f:83:4c:ae:98:1c:9a:a4:
                    61:04:42:21:ff:dd:e0:a4:1e:98:6e:38:0f:99:84:
                    04:ca:e9:15:62:4d:1e:e9:ad:9a:f0:18:1c:4b:32:
                    12:2a:b1:9a:39:52:ba:35:09:70:68:ee:91:24:c4:
                    30:5a:e7:4e:44:ae:7f:be:eb:66:68:e6:d9:d8:10:
                    b7:65:6f:de:71:2a:23:8d:b3:0b:c1:0b:bb:32:ed:
                    a8:22:e2:c5:53:53:3c:f6:cb:80:51:e3:75:ed:86:
                    4e:41:ea:01:fb:8a:c9:26:f7:76:07:d3:6d:ba:0a:
                    f2:ca:6c:db:49:0a:4e:a2:67:45:97:0d:7e:14:2b:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:6F:C4:C2:F4:4B:A7:0E:42:0B:D3:BB:21:CC:BD:60:B4:A4:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a4163d-dfce-4be0-96e9-adf2bac1f02c/1/hFNvxML0S6cOQgvTuyHMvWC0pKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.220.64.0/19
                  185.155.176.0/22
                IPv6:
                  2a02:210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5398
                  44160

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:c2:92:83:44:2d:4e:87:c1:10:0d:19:3d:6d:28:5f:69:
         6f:fa:81:bd:bf:c4:30:a4:da:dc:49:6d:66:dc:e2:b5:cf:de:
         0f:aa:24:7c:d3:75:11:dc:fe:8c:73:eb:a2:3b:de:14:a3:3d:
         49:3d:3c:22:2f:30:b1:04:26:36:26:59:0e:31:77:3e:28:93:
         cc:f2:66:39:e3:34:50:2d:d4:4b:a0:d2:14:c0:7a:0b:a3:e2:
         ad:17:ef:f5:e8:5f:3f:a1:d3:31:03:ac:db:95:78:1d:32:36:
         54:b7:14:93:3c:49:2a:70:15:50:a3:79:23:fc:56:75:9e:80:
         c8:a5:9b:1a:7e:d6:6f:42:6e:a7:7e:a5:75:24:8a:2e:15:a9:
         12:dd:20:da:47:d5:38:1c:19:2d:ae:47:e4:b8:b1:b8:a2:63:
         29:fd:2f:3e:b6:61:31:bd:98:59:be:1e:f3:69:7c:0e:1f:b0:
         a7:6d:33:ca:66:47:3a:d5:6a:df:ec:78:1f:d1:a3:a4:7a:6d:
         40:9e:15:c7:81:66:09:f4:2e:d9:1e:6c:61:9b:8a:cb:ee:90:
         9b:66:f4:31:bb:19:9f:fe:10:5e:2e:7f:72:33:d4:7a:85:1d:
         8d:5e:c9:ff:a4:fe:4a:20:78:b5:ba:fe:09:da:14:cb:c2:28:
         be:e8:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----