Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9-vFH46p1baztiG7WlgTeAKW1I.cer
File:                     y9-vFH46p1baztiG7WlgTeAKW1I.cer (raw, json)
Hash identifier:          dgfOgVMkuG02FCw/F4XOt3naUlhBTWUh2D77Fvr07V8=
Subject key identifier:   CB:DF:AF:14:7E:3A:A7:56:DA:CE:D8:86:ED:69:60:4D:E0:0A:5B:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183CC758F56EBC4FFDED256751DD35C2E3E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/72a578-023a-4134-8cc2-1f61cf1a302f/1/y9-vFH46p1baztiG7WlgTeAKW1I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/72a578-023a-4134-8cc2-1f61cf1a302f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Oct 2022 13:50:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 206835

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cc:75:8f:56:eb:c4:ff:de:d2:56:75:1d:d3:5c:2e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 12 13:50:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbdfaf147e3aa756daced886ed69604de00a5b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:b8:89:27:a9:91:e0:a6:57:bf:00:73:69:
                    33:86:97:26:74:05:7f:dd:66:84:c5:6f:d7:46:7f:
                    a0:44:c1:2f:ce:13:72:37:bb:19:9f:be:bd:ac:8e:
                    1e:e7:20:1d:88:b0:59:29:a8:87:3c:c7:66:29:20:
                    9c:96:dc:04:d7:b6:75:3c:fa:96:b2:80:9f:9c:2b:
                    fb:27:a2:5f:9f:bd:74:fc:bf:97:d4:dd:9a:94:0b:
                    c1:ce:02:c9:50:0a:2e:34:dc:28:be:dd:94:4c:d7:
                    fb:62:09:4e:16:4a:da:de:83:71:d5:f6:39:47:b6:
                    af:d4:ce:ef:16:f8:9f:05:1b:88:37:55:46:f2:0e:
                    7a:fc:a6:32:44:c5:3b:f4:51:38:56:c0:d3:eb:49:
                    cb:b3:c2:00:d2:4f:aa:ab:6a:61:37:d8:13:31:1d:
                    2b:a0:b8:99:59:2c:b2:50:89:9f:76:ec:18:0e:0e:
                    a4:4c:04:a5:b2:55:46:34:17:ad:f0:55:41:d2:4e:
                    1c:49:0b:0b:9c:c0:4a:d0:10:be:29:f6:f6:2c:74:
                    74:8e:55:b4:c6:32:4f:92:2f:ef:ea:6a:ad:eb:29:
                    12:c3:d9:91:c9:6d:ba:28:1e:15:25:7d:e8:bc:88:
                    60:9b:6a:d8:a1:66:07:e2:a6:42:59:42:ec:da:be:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:AF:14:7E:3A:A7:56:DA:CE:D8:86:ED:69:60:4D:E0:0A:5B:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72a578-023a-4134-8cc2-1f61cf1a302f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72a578-023a-4134-8cc2-1f61cf1a302f/1/y9-vFH46p1baztiG7WlgTeAKW1I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206835

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:6b:8b:0a:24:e0:b3:92:6a:56:99:c0:a9:49:a9:57:c7:
         9a:86:78:4e:11:f6:d1:43:e4:d6:6f:9c:f8:9b:fa:71:dc:ef:
         67:d2:ca:22:5e:c6:7b:69:67:bf:72:42:4e:71:7a:c9:4a:00:
         94:e7:d5:19:56:27:4f:e9:d5:ec:a6:52:b8:57:90:57:c7:0d:
         8e:6d:6c:84:88:42:38:f5:61:9b:da:2c:64:57:24:fb:f7:f8:
         76:31:7b:32:da:1a:a2:0b:5f:08:dd:d4:18:86:94:f6:de:ca:
         14:d2:48:e9:e3:90:89:04:af:55:7f:05:44:56:71:c0:92:ea:
         b0:65:80:ba:75:97:e8:a1:96:31:de:c2:08:cf:77:90:76:fa:
         71:bd:da:70:b8:a4:08:16:1d:ce:b5:72:9c:b5:89:52:2b:0f:
         a2:d0:be:0a:69:b4:4b:0e:f9:56:bb:ed:f5:3c:de:5e:12:06:
         c0:82:f8:89:d1:30:9c:c8:b4:8b:43:2b:ec:9b:10:83:74:e4:
         e4:b4:54:ed:c2:d2:e8:64:88:ea:5e:60:dc:ce:32:4d:62:eb:
         7a:3c:8d:1c:a8:59:70:3b:0b:36:a8:3c:66:32:5b:bc:2c:3b:
         79:8d:cc:2a:43:a2:b2:d5:f7:7d:da:1d:12:97:7e:6e:12:df:
         3f:1f:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----