Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zeijNtIlZ5USEihSNOA41YTHOoI.cer
File:                     zeijNtIlZ5USEihSNOA41YTHOoI.cer (raw, json)
Hash identifier:          5wd3hiZnpkZ7361aM4SPh3yamyfWNLEjq11LYEn84XY=
Subject key identifier:   CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB063F142C7FC1A2668759F8AB7DD36
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:35:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.154.188.0/22
                          IP: 2a07:8ec0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:63:f1:42:c7:fc:1a:26:68:75:9f:8a:b7:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:35:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cde8a336d22567951212285234e038d584c73a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:af:e4:c3:52:b9:db:1e:87:88:0c:9e:4a:
                    fa:14:90:e8:0c:41:39:4b:de:2c:97:f1:30:de:94:
                    b3:ee:e3:33:24:1d:a8:46:95:c6:05:f3:c9:dd:22:
                    db:b0:d1:c0:81:7c:97:61:06:de:b6:1d:ac:bd:3f:
                    06:81:f8:66:3d:38:18:df:f2:02:11:5e:7b:9b:b8:
                    0f:64:c4:74:46:ee:b9:2b:b9:eb:ae:aa:df:fc:2a:
                    31:02:f3:f2:cc:8d:4c:36:7c:d1:80:fa:3e:ae:9b:
                    f1:0c:f2:9c:46:13:22:65:57:98:bf:18:06:54:cd:
                    fa:2a:ab:f5:44:8f:de:10:98:89:ce:1d:3b:7d:56:
                    32:63:95:db:79:30:6b:e5:f6:0a:f1:64:c7:31:b6:
                    48:03:5e:da:2b:68:08:20:c1:e3:80:68:6f:8e:7b:
                    03:94:2d:12:d1:cd:f6:52:fc:36:59:88:83:e2:01:
                    3f:e2:4f:e8:3c:64:d0:cf:a3:0d:59:e7:ec:44:85:
                    71:90:00:1b:99:65:0f:d2:13:90:11:85:12:75:00:
                    7d:68:5a:5c:bc:ba:30:d8:ac:9e:00:19:b0:85:51:
                    25:8c:52:ee:2c:1c:c8:6a:3e:52:58:c6:97:33:28:
                    f5:2a:6e:c1:0b:a9:71:f9:da:a1:c6:8a:57:e6:8a:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:A3:36:D2:25:67:95:12:12:28:52:34:E0:38:D5:84:C7:3A:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b694ae-ed02-47a3-b759-4e2ee2682586/1/zeijNtIlZ5USEihSNOA41YTHOoI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.188.0/22
                IPv6:
                  2a07:8ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:35:0d:bf:44:4f:41:fe:72:ef:73:75:6b:66:26:d5:66:
         7e:b1:d3:af:f3:f8:fd:ee:c1:45:43:35:0a:4e:68:fb:79:35:
         fa:47:60:85:9d:37:94:c9:fc:67:6d:25:f0:f9:00:b7:60:6b:
         cb:3b:00:6f:c1:3e:48:30:47:68:30:a2:15:f6:c4:45:96:b5:
         39:2e:b6:e5:60:63:65:4c:18:23:95:b3:08:3f:30:fb:f8:86:
         60:24:c7:be:77:69:07:44:89:71:04:51:fd:90:ed:23:53:cd:
         85:8e:6f:18:f2:21:f0:25:0c:40:18:0d:ed:38:4a:b9:bf:c4:
         c7:63:bb:8f:51:36:f2:87:18:a5:af:78:b1:ec:20:de:6a:92:
         c4:7e:96:9b:41:90:09:3a:92:93:c5:32:c1:47:9d:d1:37:5f:
         de:3c:a3:f6:dc:94:ec:90:13:63:c9:28:cd:79:e4:cc:59:d2:
         f2:94:7f:f1:c6:2b:90:be:fc:b4:d7:dc:39:55:5c:bb:d2:3f:
         50:c9:47:ea:4d:48:04:93:88:30:44:a3:79:de:75:23:01:16:
         6c:cf:a7:d9:fb:c0:23:d6:b6:c9:b7:0b:ba:e1:a9:25:c1:55:
         e3:24:7c:c0:95:a7:00:7a:62:50:7e:c3:86:fc:f5:5c:89:3c:
         b3:34:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----