Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
File:                     pjsXCAz38qmR6SlMHdtw7bVBdO8.cer (raw, json)
Hash identifier:          7glRcGAXIGgtU/DHByhXffA+1A2niEPwHX+Oq6fLt3M=
Subject key identifier:   A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018572463D2FABD3B29D0577F52895A59781
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:38:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.242.233.0/24
                          IP: 2a11:ac40::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:3d:2f:ab:d3:b2:9d:05:77:f5:28:95:a5:97:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:38:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:59:99:4a:bd:71:bf:af:84:e7:4e:75:ab:
                    ee:98:90:b5:82:26:50:49:05:d4:ef:3d:ed:75:bf:
                    e4:c5:c5:f2:f7:d7:76:f2:d1:30:0c:62:fb:40:a5:
                    99:db:c6:70:de:5d:2f:7a:a1:bc:8f:d5:ab:1d:fb:
                    63:45:45:2f:ee:d0:4b:8e:65:b5:be:a2:fd:4f:a8:
                    9b:62:7c:82:89:74:80:78:93:31:49:d1:44:de:6a:
                    69:a5:ff:7e:7e:bd:4d:df:43:43:5a:db:93:29:07:
                    6b:b4:cd:03:1b:c5:2b:38:b3:da:ec:31:d0:44:1c:
                    98:b2:10:ad:84:bc:fb:f2:36:71:08:64:40:9c:a7:
                    6c:c9:fb:0a:66:b7:f7:f1:b2:3b:41:e6:38:d4:50:
                    b5:33:51:d9:33:77:0a:b5:65:07:eb:4b:1c:17:0f:
                    4d:38:34:dd:7f:eb:86:3e:b0:3b:08:18:43:65:99:
                    37:63:ec:6c:d6:85:d3:3a:f9:a2:67:26:3e:34:57:
                    e4:a4:cd:82:12:c3:26:41:24:5a:49:72:a6:8a:9b:
                    f4:81:e4:24:5c:81:75:53:a4:4a:62:f6:8e:3b:63:
                    40:6a:ef:e0:4b:e5:42:9b:7f:a1:19:36:1f:58:2c:
                    a6:5d:9c:0f:fa:4d:9f:61:95:5b:7f:f8:ed:84:a5:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.233.0/24
                IPv6:
                  2a11:ac40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:cc:14:0e:f8:08:e9:9c:b0:07:b0:26:db:de:97:a3:2d:
         17:4f:15:6d:7f:b7:9d:90:b4:dc:f7:e9:ea:b8:d4:81:84:eb:
         79:81:c0:65:4d:0c:70:70:ff:90:4c:dc:33:14:d9:bd:69:ec:
         47:ba:4d:be:65:61:b0:c0:99:bf:f3:d6:58:8c:dc:be:f2:7a:
         ec:1a:17:a1:fe:60:c2:09:3d:b0:df:f2:5a:35:42:f6:14:34:
         34:71:d9:77:92:50:48:d9:13:21:b3:82:6c:d2:8f:4c:95:52:
         08:ce:e1:0f:b2:9f:b6:38:37:e2:ca:bc:a7:d4:7f:9f:06:71:
         11:b7:01:68:49:9b:4c:f2:2b:63:11:af:7e:c4:ef:c0:d3:11:
         56:da:a2:62:ea:50:de:b5:31:cb:4b:32:59:31:cc:5b:48:c2:
         bd:05:6a:3b:86:7c:27:ff:18:cb:dc:e5:bb:3e:a7:4e:05:07:
         f9:ad:71:77:7a:a0:b2:fa:6c:5d:d1:f4:4f:7e:28:0f:38:64:
         63:ac:b3:65:d7:4f:66:bc:12:72:52:06:fc:ac:2b:08:96:76:
         f8:13:a1:12:a9:73:07:84:12:93:f1:ea:a9:bf:25:c6:75:4d:
         40:89:34:63:4a:5e:3e:30:4b:01:ab:bb:27:fb:0f:61:d5:c6:
         28:b4:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----