Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer
File:                     rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer (raw, json)
Hash identifier:          MtIZH58AA4YQQW2R0u5zwJEl0YkRsy+9EOaoZKoiAzU=
Subject key identifier:   AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBACE28F1FF0DDBBC34238220DE8E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/rpC_Z68_k7OzfUr8WUrVfSXP3VY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 95.130.226.0/24
                          IP: 2a11:8c80::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:ac:e2:8f:1f:f0:dd:bb:c3:42:38:22:0d:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ae90bf67af3f93b3b37d4afc594ad57d25cfdd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:4c:c7:b6:0e:f9:99:58:c1:a9:c3:78:a8:
                    e6:81:04:21:78:bf:fd:0e:a4:40:3a:19:68:46:66:
                    4c:31:87:f8:a2:2b:51:c8:5b:9f:75:42:f8:74:5a:
                    c4:bf:b2:a5:42:fc:30:68:0e:c2:b0:11:5b:9b:7d:
                    80:7b:0a:a3:d0:2f:fb:70:94:50:a3:ae:a4:7c:cf:
                    ec:8d:af:81:0d:07:71:d3:76:3e:b5:26:7e:20:21:
                    95:72:8a:98:b3:c0:09:1c:50:1b:97:db:cb:a8:c3:
                    ce:b4:df:40:ec:ba:99:0c:4f:51:e9:68:d9:37:c8:
                    db:02:dd:65:0b:80:3c:c2:d0:9c:4d:2b:16:7f:d9:
                    c4:c6:d3:b1:94:ff:5a:3d:19:2a:a7:2b:e5:8a:3e:
                    53:f4:6a:ab:e9:bb:d2:4f:70:cf:32:af:1c:76:29:
                    83:60:07:40:5e:a5:c0:a4:10:ea:7f:16:8d:e5:bf:
                    50:d3:87:e7:cc:62:fe:c9:74:13:1a:d6:85:9b:be:
                    0c:b0:f9:65:d9:01:b1:a7:53:d0:da:95:28:7f:eb:
                    6e:d0:4f:12:ba:07:e9:42:ba:c2:de:85:6a:bd:4a:
                    63:ea:b9:ad:97:9f:a2:92:33:c5:a0:b2:c4:2f:a4:
                    c6:dc:b6:2c:43:91:14:07:6d:90:6a:d3:b2:b6:76:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/rpC_Z68_k7OzfUr8WUrVfSXP3VY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.130.226.0/24
                IPv6:
                  2a11:8c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:8b:6d:f6:cb:57:ac:13:02:a5:5b:50:72:36:97:25:86:
         1c:a6:bf:56:86:aa:86:8a:ad:a4:04:6f:a2:2f:04:bc:b9:06:
         11:cc:c3:3d:c5:d3:41:80:ac:13:d3:58:2c:c8:35:fc:30:8c:
         17:50:50:11:8d:90:06:c0:da:0b:0c:d2:c4:a2:ab:aa:a8:b7:
         df:70:55:0b:d1:c9:04:5b:18:19:3f:8e:11:9e:6b:6b:3b:2f:
         c5:22:2e:63:42:1d:c9:19:db:06:8d:0b:b4:ca:c7:83:a8:48:
         8d:47:e8:03:af:ce:44:95:4d:13:31:96:4b:93:5d:89:af:04:
         ec:eb:b4:60:7a:fe:1f:32:7f:a8:8f:bc:94:bd:36:a2:7c:34:
         96:1c:af:d1:b2:3d:a2:49:46:2d:a2:da:f5:64:aa:35:dd:1c:
         1d:c6:44:c6:3a:fb:f7:47:be:a3:0f:b2:c0:7d:05:7f:02:4b:
         84:1e:5a:1d:ca:b9:00:03:52:42:79:4f:76:1e:a0:14:70:af:
         36:62:12:41:37:f7:18:c6:d2:3b:b3:6c:7a:e3:25:1d:05:55:
         1e:3b:c2:2f:09:ff:6e:77:6b:16:27:74:32:a9:16:e8:3e:e0:
         aa:d0:84:04:3f:da:79:18:3a:a5:09:a8:42:26:23:f1:07:26:
         15:af:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----