Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ybr8TMW81AuD7XfA_znveXyUWg8.cer
File:                     ybr8TMW81AuD7XfA_znveXyUWg8.cer (raw, json)
Hash identifier:          Na3m4yaoFwOn0Ap+r73RcUBRtjgUGDkt1Io6QIXnhww=
Subject key identifier:   C9:BA:FC:4C:C5:BC:D4:0B:83:ED:77:C0:FF:39:EF:79:7C:94:5A:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA0007E1ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/ybr8TMW81AuD7XfA_znveXyUWg8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:03:29 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 56662
                          IP: 2001:67c:21ec::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730144956909 (0xaa0007e1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:03:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9bafc4cc5bcd40b83ed77c0ff39ef797c945a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:a1:5d:7d:e6:58:56:27:45:39:82:98:4a:
                    ac:40:b0:02:a2:55:d5:93:75:1d:ee:7c:0b:70:06:
                    f0:1e:f2:78:21:ab:17:ac:ae:58:ab:0a:0d:dc:66:
                    44:21:bb:7e:14:10:d6:6d:4d:ab:c4:f4:88:34:79:
                    0f:28:ae:e4:37:a3:7f:1e:b3:b5:6f:86:bc:88:6a:
                    3b:06:72:c1:71:6f:e7:ea:bb:15:ee:b9:1d:46:4f:
                    ea:7d:77:19:7c:18:33:c5:ad:a8:fe:6d:12:01:17:
                    d7:7a:01:58:0f:dd:ea:d5:c7:b3:fd:83:3f:bc:41:
                    75:9f:52:80:42:21:76:a1:29:41:67:32:d7:44:4d:
                    da:15:29:05:68:1c:dd:d8:3c:38:35:4a:41:e6:1e:
                    97:1c:4d:62:c2:6c:1b:c4:50:16:e8:18:ce:51:87:
                    b7:13:6f:21:f7:c0:d2:87:04:5f:e3:9c:06:60:e8:
                    ce:62:2a:97:8b:61:50:cc:82:bb:2d:11:60:06:18:
                    62:24:82:57:0b:64:4e:82:47:3f:fc:f7:9b:b9:c0:
                    04:1a:7a:67:60:cf:07:84:f4:d1:8c:6f:ea:f2:f9:
                    f6:e4:df:a3:3f:c0:1d:40:ac:1e:e5:d9:70:54:ea:
                    e5:8e:e9:83:b6:3b:82:99:30:c5:dd:8a:11:da:a0:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:FC:4C:C5:BC:D4:0B:83:ED:77:C0:FF:39:EF:79:7C:94:5A:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/ybr8TMW81AuD7XfA_znveXyUWg8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:21ec::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56662

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:bf:20:2e:29:55:e3:ea:e0:eb:cb:d7:b8:b2:a3:64:1a:
         9d:e8:be:f3:cd:65:04:b2:01:9f:98:c7:13:b2:9e:a2:ad:e9:
         a6:80:d4:cd:d1:7f:6f:f4:be:d9:5c:92:81:ea:70:ae:e2:c6:
         d2:35:14:6d:12:8e:5b:01:d4:cd:7f:cc:aa:b6:7b:7e:ba:bc:
         fa:cd:76:74:12:62:bd:6a:f5:0f:36:89:03:70:9e:e9:aa:06:
         f2:03:16:3f:29:49:8a:61:d5:70:55:cf:1f:dd:51:2c:35:56:
         21:b2:cd:fb:1f:59:d1:6b:14:75:fa:bd:d4:c2:7d:18:e4:94:
         2a:02:9c:0e:f5:46:d9:1b:d5:3c:30:8f:69:74:b7:40:fd:58:
         cc:e1:19:c9:be:9c:3a:5d:ed:fa:cd:11:93:b9:89:8b:b3:f7:
         08:ae:e4:18:fa:d2:d4:c3:76:c1:7f:a8:be:fc:c5:7c:6e:64:
         6b:49:5f:a4:50:c5:29:e8:30:b2:d7:1b:6e:33:e9:cc:3d:71:
         ee:33:88:2b:9b:37:5b:e1:c7:9c:1d:27:46:c1:99:8c:58:c3:
         d7:d6:54:bc:5d:c0:eb:37:16:27:4e:43:2a:20:46:77:0a:85:
         57:d9:47:e6:08:2f:9c:8c:7c:c3:8e:e8:55:f5:bb:cf:15:46:
         40:a0:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----