Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXCpfrn6yl512ZkbJgwGcBLUHNE.cer
File:                     sXCpfrn6yl512ZkbJgwGcBLUHNE.cer (raw, json)
Hash identifier:          61AIOYv5TrJZadYCXJqMEEFeJUcZ08wuenjQjsbrpVM=
Subject key identifier:   B1:70:A9:7E:B9:FA:CA:5E:75:D9:99:1B:26:0C:06:70:12:D4:1C:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A5BC96B94F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/5fec51-55c1-4d3e-bf52-906d4e1da355/1/sXCpfrn6yl512ZkbJgwGcBLUHNE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/5fec51-55c1-4d3e-bf52-906d4e1da355/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 11:53:38 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 211431

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711833598287 (0xa5bc96b94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:53:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b170a97eb9faca5e75d9991b260c067012d41cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:dc:61:0a:89:fc:36:f1:d9:ef:49:5b:9b:
                    a9:3c:30:77:6a:aa:14:a4:a4:3a:58:70:34:86:2f:
                    4a:fd:e4:0f:d7:03:c2:4b:dc:bf:65:8d:c7:65:4d:
                    5e:a8:3d:74:c0:5d:98:8e:d8:7f:58:6f:79:f3:56:
                    0f:3f:94:8c:3f:5c:d3:9c:78:56:71:fd:ca:db:3b:
                    aa:a0:37:5d:37:89:85:06:bb:3e:99:ed:b3:f0:c6:
                    e4:d1:bf:0a:7b:b7:4e:c4:26:81:fc:ab:83:70:e9:
                    cf:b7:86:42:04:38:3b:31:18:1b:e9:4b:36:c2:aa:
                    1f:dc:69:a2:31:cd:41:b0:74:65:5e:b5:7a:ee:a8:
                    1f:7b:83:25:f5:75:7b:c8:4a:ee:91:48:ae:ac:5c:
                    f4:68:5f:2c:3a:08:8c:3c:f8:3f:7f:90:c9:d3:57:
                    e0:d7:32:5e:45:62:79:dd:c5:a3:09:f0:c6:3c:e6:
                    e6:96:2e:7b:4a:30:79:bc:a7:04:da:5c:1e:ec:c2:
                    20:dc:a4:bd:4c:32:c5:49:6b:d3:8b:46:44:19:b8:
                    3c:24:1a:84:ac:60:d1:6c:56:9c:35:af:2c:7b:e0:
                    e8:2a:92:3b:9e:db:27:ea:cc:fa:b2:23:52:c5:a1:
                    74:e1:cd:49:c8:9b:92:12:9d:f7:aa:17:42:06:cc:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:A9:7E:B9:FA:CA:5E:75:D9:99:1B:26:0C:06:70:12:D4:1C:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5fec51-55c1-4d3e-bf52-906d4e1da355/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5fec51-55c1-4d3e-bf52-906d4e1da355/1/sXCpfrn6yl512ZkbJgwGcBLUHNE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211431

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:6c:1a:18:19:a7:5c:3f:f4:c1:87:01:f1:61:65:37:74:
         f8:55:9b:36:84:76:c3:3e:ce:73:fe:65:14:eb:e1:6a:f3:80:
         4e:8c:a5:64:d6:5d:0e:77:54:2d:a8:63:19:d1:65:de:71:32:
         2f:a9:79:11:1d:ee:0b:ef:14:87:35:a8:de:5f:bc:90:39:98:
         ce:73:0e:f3:ff:2d:c7:e6:ea:9a:42:91:2f:f1:60:32:dc:28:
         a8:68:e8:8c:c2:8e:d5:14:b6:0a:08:91:bb:ab:77:67:cd:98:
         8a:5b:3d:04:d1:21:67:e3:67:92:d8:d0:00:db:a1:48:73:07:
         89:9a:6d:ea:34:33:a5:ae:0e:2b:f4:58:ea:5a:0a:50:4d:69:
         ea:db:f4:f8:ed:2e:fb:63:32:56:62:e9:9c:25:9a:b0:be:bb:
         a9:66:a8:08:b0:21:f9:fe:07:50:5b:d7:4e:69:a8:e2:5a:8b:
         dd:5b:00:37:56:14:4c:dc:30:ba:4a:d0:60:b6:56:88:2f:4a:
         b1:68:ab:ab:be:a7:8f:fa:68:ea:da:83:75:42:93:fa:a5:9f:
         26:8c:b2:1b:df:e6:d5:be:e1:3f:2f:44:f6:1e:16:b0:2d:ba:
         31:73:ee:53:43:a6:73:1b:b3:c0:3f:72:56:90:5f:d9:37:f0:
         57:fb:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----