Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYqik_MUwEBn91D4v-u4jGFaYQI.cer
File:                     jYqik_MUwEBn91D4v-u4jGFaYQI.cer (raw, json)
Hash identifier:          h3BpWtLU3wHc0zFbWPTUXsGanBZ/cHQCsZQuW1nuR8w=
Subject key identifier:   8D:8A:A2:93:F3:14:C0:40:67:F7:50:F8:BF:EB:B8:8C:61:5A:61:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182F3AB25782B57C96E0EB4C99945A1D72E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/18f7ee-fcc7-4c56-aa40-704c011a8b36/1/jYqik_MUwEBn91D4v-u4jGFaYQI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/18f7ee-fcc7-4c56-aa40-704c011a8b36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 31 Aug 2022 11:30:55 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203069

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f3:ab:25:78:2b:57:c9:6e:0e:b4:c9:99:45:a1:d7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 31 11:30:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d8aa293f314c04067f750f8bfebb88c615a6102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:1e:ab:a4:b8:65:d2:70:9b:9d:72:5f:e9:
                    71:d5:52:d7:6d:f4:8d:20:84:e4:25:dc:c5:07:e8:
                    13:b9:34:f2:51:7a:7c:59:65:09:9d:a3:97:ee:c6:
                    d2:34:f4:e5:b5:56:60:9d:c2:cc:17:57:ec:2a:31:
                    29:32:62:7b:6c:6d:25:bb:2a:ff:ce:cc:c4:89:91:
                    e9:1d:3f:f2:a1:1b:c3:e3:b1:62:8d:50:aa:86:be:
                    b6:db:b9:57:5a:8f:4a:c3:25:ea:13:b4:4d:7b:b8:
                    20:c9:bd:8b:92:87:84:31:ed:e5:bb:0e:8e:e6:13:
                    46:b1:f5:58:a2:bd:e3:c0:2d:14:34:f6:3c:c6:44:
                    51:a6:64:2e:6b:57:6c:eb:76:ff:5b:fb:03:11:53:
                    17:b1:79:86:b7:3c:cf:89:2b:35:3f:0d:25:e2:e4:
                    01:41:ec:7d:48:26:68:3b:6b:c0:05:8b:b7:aa:56:
                    6d:6d:a9:69:f1:9d:59:b7:42:35:ac:54:76:79:fb:
                    f4:7d:08:c7:b5:33:83:fe:de:2f:ca:8d:20:a6:89:
                    58:ff:64:ee:98:df:f4:f4:ed:33:ff:35:71:42:f3:
                    da:e2:1e:93:31:db:0e:3c:04:be:c1:81:99:81:03:
                    82:63:99:5a:99:9a:35:c2:70:ea:bd:1c:63:bd:c3:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:A2:93:F3:14:C0:40:67:F7:50:F8:BF:EB:B8:8C:61:5A:61:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/18f7ee-fcc7-4c56-aa40-704c011a8b36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/18f7ee-fcc7-4c56-aa40-704c011a8b36/1/jYqik_MUwEBn91D4v-u4jGFaYQI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203069

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:b9:fd:24:47:28:94:72:00:5c:24:86:82:30:fd:ce:fb:
         8a:2a:3f:c1:b8:da:e8:a3:05:fa:36:fd:df:a6:30:cc:c1:37:
         41:0a:9c:ed:d9:3e:61:e0:d4:d9:04:c1:ee:91:13:6a:7c:d2:
         0a:ae:19:b1:bc:69:6a:c4:fb:87:7f:79:c9:db:59:ef:36:46:
         97:4a:f5:b1:05:f0:a3:69:2a:ef:e2:92:21:71:fa:87:0a:d1:
         6f:43:fd:97:ca:a2:c9:14:d3:d7:1d:39:79:75:f6:81:c4:50:
         36:34:9a:98:22:1a:bd:79:12:53:e2:d3:08:91:de:51:1d:45:
         0c:f8:97:3a:56:34:e5:13:33:b1:52:96:06:12:53:bd:c9:7d:
         01:c4:12:5e:c8:85:2f:1b:fa:f0:7a:1f:59:bd:b0:e1:9b:f2:
         e2:14:32:47:f3:d2:ba:de:a4:41:dd:9a:0b:b5:19:7f:d9:ac:
         bf:96:a2:76:f1:bd:78:37:d3:e7:9f:eb:fc:8d:1a:b2:dc:5e:
         6a:cb:61:3a:99:0f:f6:ef:d7:e8:35:1d:16:55:0a:b7:c3:3b:
         87:65:a9:44:63:a2:32:7a:c2:17:00:70:de:2a:73:62:27:b1:
         cb:28:2b:03:6d:f3:c7:55:0d:bf:05:b4:58:7e:95:85:44:44:
         7b:f3:60:15
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYLzqyV4K1fJbg60yZlFodcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwODMxMTEzMDU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDhhYTI5M2YzMTRjMDQwNjdmNzUwZjhiZmViYjg4YzYxNWE2MTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNEeq6S4ZdJwm51yX+lx1VLXbfSN
IITkJdzFB+gTuTTyUXp8WWUJnaOX7sbSNPTltVZgncLMF1fsKjEpMmJ7bG0luyr/
zszEiZHpHT/yoRvD47FijVCqhr6227lXWo9KwyXqE7RNe7ggyb2LkoeEMe3luw6O
5hNGsfVYor3jwC0UNPY8xkRRpmQua1ds63b/W/sDEVMXsXmGtzzPiSs1Pw0l4uQB
Qex9SCZoO2vABYu3qlZtbalp8Z1Zt0I1rFR2efv0fQjHtTOD/t4vyo0gpolY/2Tu
mN/09O0z/zVxQvPa4h6TMdsOPAS+wYGZgQOCY5lamZo1wnDqvRxjvcPz7QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFI2KopPzFMBAZ/dQ+L/ruIxhWmECMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzE4Zjdl
ZS1mY2M3LTRjNTYtYWE0MC03MDRjMDExYThiMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMThmN2Vl
LWZjYzctNGM1Ni1hYTQwLTcwNGMwMTFhOGIzNi8xL2pZcWlrX01Vd0VCbjkxRDR2
LXU0akdGYVlRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMZPTANBgkqhkiG9w0BAQsFAAOCAQEAAGy5/SRHKJRy
AFwkhoIw/c77iio/wbja6KMF+jb936YwzME3QQqc7dk+YeDU2QTB7pETanzSCq4Z
sbxpasT7h395ydtZ7zZGl0r1sQXwo2kq7+KSIXH6hwrRb0P9l8qiyRTT1x05eXX2
gcRQNjSamCIavXkSU+LTCJHeUR1FDPiXOlY05RMzsVKWBhJTvcl9AcQSXsiFLxv6
8HofWb2w4Zvy4hQyR/PSut6kQd2aC7UZf9msv5aidvG9eDfT55/r/I0astxeasth
OpkP9u/X6DUdFlUKt8M7h2WpRGOiMnrCFwBw3ipzYiexyygrA23zx1UNvwW0WH6V
hUREe/NgFQ==
-----END CERTIFICATE-----