Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mCdF49dWQVhzrEboPOjHFkMXIJk.cer
File:                     mCdF49dWQVhzrEboPOjHFkMXIJk.cer (raw, json)
Hash identifier:          Qx8RV7vAwOdaYzsqc2OOt0k1Eu2eAveJknryG1zy7cI=
Subject key identifier:   98:27:45:E3:D7:56:41:58:73:AC:46:E8:3C:E8:C7:16:43:17:20:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ADD82993E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/72fe87-03ed-4a87-be77-9fe7cddd2f12/1/mCdF49dWQVhzrEboPOjHFkMXIJk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/72fe87-03ed-4a87-be77-9fe7cddd2f12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Feb 2022 08:17:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 39025

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746655945702 (0xadd82993e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 25 08:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=982745e3d756415873ac46e83ce8c71643172099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:af:0e:5a:5c:03:29:25:a3:41:69:be:d4:
                    c1:91:28:7e:4f:f2:a5:d2:49:38:b2:a2:7e:08:55:
                    01:39:13:2a:70:18:4d:86:ef:e7:ba:32:79:2f:d9:
                    bf:e7:1b:b5:48:c0:96:c3:e5:8b:6f:e4:0a:c6:bf:
                    96:7e:32:18:7c:e2:ff:ad:85:ba:10:c8:21:59:0e:
                    b9:75:38:62:69:72:d3:19:7d:03:7d:0d:86:26:bc:
                    56:56:87:e8:1a:ee:1f:e4:5e:62:d3:4f:14:20:44:
                    ad:e5:cc:bf:6f:94:d0:92:6c:76:93:7d:e1:41:1a:
                    09:da:11:bd:4c:d5:29:f8:45:0f:b3:89:11:81:46:
                    04:bc:e2:e5:d1:f0:cb:d8:cc:1d:91:b7:d6:d8:d2:
                    0b:e6:9b:7b:7f:85:63:71:b7:6a:5d:4d:e5:17:98:
                    08:37:49:4b:1e:dd:7a:85:96:fa:c5:ba:98:cf:c4:
                    47:1a:23:28:82:2e:47:94:b0:a3:54:77:c2:39:bf:
                    aa:45:fa:3b:9f:ae:42:ee:5e:71:84:2a:87:65:ea:
                    73:c3:ef:f1:76:9d:44:b5:6d:7f:ce:96:45:bf:b4:
                    54:d9:c9:f3:f6:3e:ec:80:a7:e2:9f:be:30:8c:d3:
                    05:59:e0:5f:74:35:28:d2:11:8a:f9:54:e0:16:f9:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:45:E3:D7:56:41:58:73:AC:46:E8:3C:E8:C7:16:43:17:20:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/72fe87-03ed-4a87-be77-9fe7cddd2f12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/72fe87-03ed-4a87-be77-9fe7cddd2f12/1/mCdF49dWQVhzrEboPOjHFkMXIJk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39025

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:02:15:f0:cf:1f:f6:eb:b8:18:d4:de:eb:a5:5a:dd:fa:
         b5:78:ef:f9:7d:66:7f:54:18:5b:75:7c:f3:df:d9:30:9f:84:
         d4:f4:ef:15:f7:fa:45:8c:1a:20:79:34:d0:b2:4b:ba:62:8b:
         b0:05:82:8c:c5:d3:06:70:37:e6:f3:23:b5:40:ab:86:c0:eb:
         bd:ad:86:08:7b:05:37:34:20:8f:b2:e1:3d:0f:b7:ee:47:d0:
         7f:1f:80:4c:ea:36:d1:c3:7a:a7:66:d4:ef:be:e6:15:6f:f1:
         e7:17:56:3b:b8:4d:53:ec:55:8b:be:82:af:27:d4:6a:64:86:
         c2:fe:7f:c1:b8:3f:66:c5:50:36:af:ae:8f:da:f9:4d:24:3d:
         a6:18:52:40:a2:24:1a:a3:1e:af:d3:16:db:13:f6:d4:fd:44:
         c8:b0:bf:56:fa:87:ca:3c:26:21:4b:32:7d:30:a6:41:44:1b:
         43:9c:9f:b9:8e:46:d5:f9:e5:5b:4c:a0:5f:58:14:7a:71:64:
         06:18:6c:01:eb:0a:43:99:d3:23:32:23:48:ab:e4:95:3b:17:
         45:c8:d2:fe:44:07:d5:c3:2b:fa:7c:60:ac:4e:d1:74:87:1e:
         44:c8:38:c6:50:91:0e:aa:38:14:f1:44:e4:b5:61:20:d5:21:
         91:87:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----