Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53PAidwfkMo9qgzT2DwYsm7Q1jg.cer
File:                     53PAidwfkMo9qgzT2DwYsm7Q1jg.cer (raw, json)
Hash identifier:          KkfLCgeJR1A2cBQVMlseTtIvqtBGNeQ1bZpEfwmycEo=
Subject key identifier:   E7:73:C0:89:DC:1F:90:CA:3D:AA:0C:D3:D8:3C:18:B2:6E:D0:D6:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AF2105BAFB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/08d1d3-46ef-44c0-8e6a-cee50e663ebb/1/53PAidwfkMo9qgzT2DwYsm7Q1jg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/08d1d3-46ef-44c0-8e6a-cee50e663ebb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Mar 2022 11:40:36 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 39140

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752173300475 (0xaf2105bafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 11:40:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e773c089dc1f90ca3daa0cd3d83c18b26ed0d638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7b:b5:c0:af:cf:58:0a:85:0a:e0:c3:d8:9f:
                    42:01:a9:f6:b9:25:8f:3c:0d:5d:d7:66:3e:ac:c0:
                    2d:3b:bc:dc:37:78:21:f1:41:de:28:41:25:76:b3:
                    b4:19:20:02:21:1d:fb:c7:c1:65:4e:33:ec:44:1d:
                    9d:62:a0:32:7d:59:c9:18:49:c3:ba:3a:0c:72:51:
                    56:94:e7:db:62:0c:7d:d9:d0:b2:3b:e8:4e:24:2e:
                    a2:f4:a9:ed:d6:9d:a3:2d:f7:e5:4a:54:70:12:b0:
                    60:98:b8:8d:7f:92:4b:42:a7:9e:66:de:0a:c4:58:
                    17:da:a3:d7:73:f8:74:de:30:a0:22:78:f7:9c:53:
                    f1:6c:d3:fa:d9:e3:1a:2f:c0:8c:2a:5f:ef:4c:80:
                    08:a0:ec:d4:77:99:4b:6b:7a:42:8a:de:5d:29:6e:
                    b9:0d:9e:5d:36:fb:6d:ee:3a:f2:da:c4:41:0a:07:
                    59:ba:5e:c8:ce:4a:f5:35:cb:b6:84:85:b3:fb:ac:
                    24:cf:e5:16:87:12:05:32:f2:c9:16:28:dd:a4:06:
                    56:24:9c:26:d2:9c:ff:d0:e1:56:ab:b8:ef:d3:17:
                    af:6e:5d:37:50:3e:9d:2b:df:07:a0:1e:f0:2b:37:
                    8a:7c:e5:23:47:59:8f:53:8f:67:d7:de:3c:5d:30:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:C0:89:DC:1F:90:CA:3D:AA:0C:D3:D8:3C:18:B2:6E:D0:D6:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/08d1d3-46ef-44c0-8e6a-cee50e663ebb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/08d1d3-46ef-44c0-8e6a-cee50e663ebb/1/53PAidwfkMo9qgzT2DwYsm7Q1jg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39140

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:13:8a:fb:c1:08:e9:61:8c:1e:a3:e9:00:b6:38:5e:8d:
         20:d6:7a:74:27:ea:e4:d5:0e:6c:6f:9e:7a:30:9a:33:6b:a2:
         89:86:91:24:41:d7:a3:f0:ad:1e:20:e0:7b:ed:1e:80:6f:e9:
         e7:7d:35:7f:05:f4:92:8d:87:a8:5b:de:94:df:f8:55:ce:a4:
         b4:18:a3:a7:f8:95:da:6f:c9:d5:ea:1c:cf:c7:8c:93:8e:49:
         b7:57:6e:c5:8b:98:cb:50:f1:9a:44:12:8a:d9:18:13:02:a8:
         e5:0e:42:d3:22:d6:1c:af:a6:ed:25:fd:f3:9d:77:7e:fb:dd:
         2d:c1:e2:6b:a0:9b:9e:df:88:0d:2b:a7:50:59:19:61:7e:08:
         dd:87:6b:44:ec:42:f4:de:51:ca:d8:27:f9:0b:8f:f7:e6:e5:
         45:0d:f2:8e:91:15:a5:8d:e2:d9:62:68:95:25:81:ea:1d:b2:
         ae:e3:44:28:f1:b0:f5:22:90:15:bd:41:0e:e7:9e:16:8f:48:
         8b:ab:25:9f:e6:a0:5e:81:9c:dd:c3:a8:4d:a3:38:43:e5:39:
         55:72:11:08:c0:77:bf:40:b7:57:c0:c7:6c:7d:e4:56:b1:1d:
         4a:c4:5d:36:6e:5d:f6:d3:bc:f5:3b:a8:a8:5f:03:d0:48:32:
         1a:97:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----