Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEKcfbKWVDW1iBGWCx11WbhItPU.cer
File:                     AEKcfbKWVDW1iBGWCx11WbhItPU.cer (raw, json)
Hash identifier:          EfnFq+lctkviHdLDwHHCQCoqAnmnr5708wYyd+DsXU8=
Subject key identifier:   00:42:9C:7D:B2:96:54:35:B5:88:11:96:0B:1D:75:59:B8:48:B4:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B1E265FECA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/ce0d18-8148-4910-aaaf-2fe48abab8cd/1/AEKcfbKWVDW1iBGWCx11WbhItPU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/ce0d18-8148-4910-aaaf-2fe48abab8cd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 18 May 2022 07:53:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 49962

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764007546570 (0xb1e265feca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 18 07:53:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00429c7db2965435b58811960b1d7559b848b4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:81:03:04:cf:6f:e9:51:cf:99:49:e8:86:d2:
                    31:77:fd:b6:55:b4:b9:4c:aa:62:36:70:cb:a4:33:
                    f5:6c:b0:8a:7c:dd:c2:95:ce:49:c8:3a:71:d9:dc:
                    72:fc:00:02:d6:6a:54:0e:09:ef:54:43:c8:22:6e:
                    b4:06:c9:ec:95:31:95:4e:cd:06:4f:27:0d:a1:65:
                    79:02:6b:82:e2:c7:f7:e8:c1:58:b1:06:4e:c6:e4:
                    cf:40:5c:51:c9:93:cd:f5:89:be:3a:2e:b5:38:07:
                    7c:74:0c:43:54:30:ef:92:da:4b:45:01:3a:2b:f1:
                    c6:a3:84:f2:6b:c5:4a:6b:ac:00:b9:89:c8:ca:1f:
                    47:2e:19:00:aa:44:fe:65:90:fa:bd:31:ca:15:62:
                    a5:88:7a:a0:33:3a:a8:85:c6:f5:42:95:ff:80:d7:
                    a5:c3:fc:92:bf:3f:66:68:6d:e7:9a:06:02:2b:d2:
                    8e:a3:b0:b5:8e:8b:b0:d1:1f:c1:47:dd:65:cc:aa:
                    99:71:1e:9d:ec:31:b5:aa:9d:43:c6:10:6d:26:97:
                    9d:c9:b6:ed:b5:c0:c5:d1:51:90:17:49:f1:3a:7f:
                    7b:25:12:00:43:65:90:72:72:7a:06:4a:55:fe:31:
                    c9:41:99:02:8b:63:3b:70:7c:bd:0f:e3:8d:0d:31:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:9C:7D:B2:96:54:35:B5:88:11:96:0B:1D:75:59:B8:48:B4:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ce0d18-8148-4910-aaaf-2fe48abab8cd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ce0d18-8148-4910-aaaf-2fe48abab8cd/1/AEKcfbKWVDW1iBGWCx11WbhItPU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49962

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:cb:ab:d8:67:16:a6:40:57:c0:1c:dd:d7:09:8a:ba:fb:
         a9:e4:9b:da:92:9d:bc:15:76:6e:58:a8:3c:9d:61:71:8d:04:
         a7:6d:9d:9e:e9:9a:08:95:bf:d4:95:7e:6a:da:cd:65:42:06:
         4d:de:03:e4:01:5e:04:78:df:10:01:44:b2:35:39:76:08:e9:
         d6:7a:32:fe:f3:a1:c3:6a:c4:f7:bd:59:0b:8e:f1:a8:39:d7:
         d9:e0:4c:5a:96:ae:39:c2:37:db:ba:4a:a9:dc:dc:d4:52:6c:
         03:97:b3:db:49:4a:52:66:c5:eb:c8:1b:8e:3b:9c:43:3b:56:
         d4:60:e8:a7:bb:fd:73:4b:fd:59:72:95:10:2d:52:ed:ea:83:
         fb:a4:17:fb:ef:48:a3:a2:f7:cf:39:18:2a:c8:a3:88:71:16:
         7d:28:a2:bc:6b:82:93:63:f7:a4:81:6d:3c:f5:8c:e0:b1:3a:
         c0:a0:37:8b:34:31:3f:de:d8:8e:a9:65:95:17:57:93:e7:e9:
         22:5b:36:30:e7:47:5a:ab:67:05:6c:96:41:b3:d2:bb:db:85:
         42:26:9a:a9:77:10:a5:f8:97:ce:43:2a:7b:c8:6d:e5:07:e3:
         35:52:31:9b:c7:36:5a:7d:52:fe:57:43:b8:61:45:de:e0:2d:
         04:e9:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----