Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nquBWtA6DuffFol0T8Q-acmRbyM.cer
File:                     nquBWtA6DuffFol0T8Q-acmRbyM.cer (raw, json)
Hash identifier:          1sGcWcLvQTkX6c7cvcSIQjr+yV6Sohm+VEhtJWR3gqM=
Subject key identifier:   9E:AB:81:5A:D0:3A:0E:E7:DF:16:89:74:4F:C4:3E:69:C9:91:6F:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01824B6A4DDC6738EC230FEF124BCC071F3D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 29 Jul 2022 19:23:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 188.119.68.0/22
                          IP: 2a09:df00::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4b:6a:4d:dc:67:38:ec:23:0f:ef:12:4b:cc:07:1f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 29 19:23:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9eab815ad03a0ee7df1689744fc43e69c9916f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:14:c3:47:41:d9:df:d5:d6:de:a9:78:07:
                    44:96:88:97:b5:61:f5:a2:68:ad:28:32:c9:4e:eb:
                    74:14:89:7d:eb:bd:1f:5e:9f:30:e1:9f:e0:ac:4a:
                    0c:a7:b5:3d:80:e7:8c:86:5b:09:a1:30:12:16:92:
                    74:57:10:b8:4e:b6:0f:ee:72:2f:0d:07:bc:96:36:
                    74:a1:70:16:9a:d2:d0:2f:d1:38:48:4d:64:3a:89:
                    af:ca:81:27:86:ae:15:f1:dd:23:fd:30:85:19:04:
                    64:ef:d2:35:38:48:9d:15:5c:25:7d:f9:1b:1d:8c:
                    71:a7:16:49:24:4c:68:41:64:06:83:e9:0a:ae:7a:
                    f1:54:57:e3:88:78:c9:de:cf:50:5b:20:28:63:60:
                    f5:24:cb:df:62:d3:24:a3:67:82:59:6d:c3:f6:73:
                    35:1a:d5:0b:19:93:88:a2:58:5b:5b:ea:e1:56:eb:
                    82:93:f5:c8:09:8b:15:ea:1d:fe:fa:9b:b8:7f:b0:
                    04:3f:3b:62:ce:c2:c9:59:cf:36:72:72:e5:b7:97:
                    be:a6:9a:7a:e2:04:c0:9d:12:86:5e:d2:d9:65:cb:
                    c0:38:1a:20:a0:48:5f:e7:08:12:cd:95:a1:72:54:
                    d0:43:e3:79:95:d8:ea:7f:b3:e7:f0:9c:48:da:fb:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:81:5A:D0:3A:0E:E7:DF:16:89:74:4F:C4:3E:69:C9:91:6F:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.119.68.0/22
                IPv6:
                  2a09:df00::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:7f:5b:bc:30:20:b5:6f:59:b9:dd:c6:b2:1e:bd:11:3f:4d:
         a2:d0:6e:23:3f:8f:95:19:69:bd:90:f2:ba:75:38:dc:7b:e4:
         68:a7:b8:69:16:81:28:06:b7:89:42:ad:a9:58:56:33:c5:89:
         2f:86:f6:93:06:b6:c3:03:0b:63:12:ca:97:d7:0d:78:55:78:
         e1:73:2f:d4:f6:2e:d2:1e:e2:f1:1c:27:e6:3f:c5:8b:0f:a4:
         fa:e2:23:e5:5c:e8:e9:76:da:29:0e:52:c6:6d:9e:f2:5c:74:
         c1:dd:4a:e7:e7:e4:dc:16:b2:4b:2d:14:28:4e:50:88:da:7f:
         1d:08:23:3b:3c:b4:59:a8:3b:a1:f9:47:13:9d:b8:1b:2a:9e:
         77:9b:95:b9:24:25:c0:66:17:16:83:b2:47:91:29:dc:a7:e6:
         21:bd:0b:4f:dc:3d:39:7f:6d:87:69:8c:7e:aa:a6:ac:5d:20:
         91:a6:11:e0:a4:79:1c:d7:02:8d:53:2a:c8:de:3d:57:56:75:
         1e:9a:35:8d:56:aa:d4:31:e9:52:6c:ef:23:6e:1e:0f:e9:3b:
         a5:68:22:44:65:e4:3c:05:9b:97:9a:b0:2b:14:68:91:b4:eb:
         25:85:e5:82:d4:5e:1e:09:fa:91:06:c3:a6:aa:0b:cb:e1:4e:
         3e:c3:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----