Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HsgRW1U3rrqIsJDNgT0HtgunwyU.cer
File:                     HsgRW1U3rrqIsJDNgT0HtgunwyU.cer (raw, json)
Hash identifier:          OSCIWTV9YhT7l73NXeHu4ITGyAHyWJtAIvMkmA9hjqw=
Subject key identifier:   1E:C8:11:5B:55:37:AE:BA:88:B0:90:CD:81:3D:07:B6:0B:A7:C3:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9F83818B52
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/c76e42-8e93-45c8-a10e-a62a77459343/1/HsgRW1U3rrqIsJDNgT0HtgunwyU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/c76e42-8e93-45c8-a10e-a62a77459343/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:02:38 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 202656

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685106105170 (0x9f83818b52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ec8115b5537aeba88b090cd813d07b60ba7c325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:53:29:f9:22:f7:7b:a0:6f:44:8a:5b:d0:
                    7e:2c:b9:31:91:9c:03:93:d5:ad:c8:23:c4:52:2f:
                    de:b4:29:cf:dd:0d:73:98:21:be:b1:37:0a:2e:32:
                    d1:7c:50:ff:5b:81:3a:5e:5b:22:d6:8b:73:5d:b2:
                    22:24:a0:34:6c:c1:a3:31:38:fd:7c:25:93:48:d5:
                    bb:b4:35:8e:25:a8:a6:83:ff:ce:ba:b3:05:a2:62:
                    6b:11:01:7e:77:d2:6d:07:c1:f8:f1:7a:b9:9d:71:
                    41:f5:9d:92:d2:80:69:f9:3c:d0:30:90:bb:7d:f9:
                    9f:9c:89:0d:df:e2:f8:f1:54:71:ec:1c:04:37:ea:
                    6e:ac:f8:b6:48:93:67:b9:5a:46:7f:dd:41:cb:03:
                    b1:b4:7f:1c:23:b2:76:93:ca:fa:c0:28:c4:d1:e7:
                    24:35:bb:d7:5b:b5:14:cc:aa:21:a3:d7:42:d3:63:
                    e7:41:7c:dd:0b:c6:14:00:64:6e:6c:f4:e9:0b:60:
                    43:99:78:48:04:34:dd:9d:06:4c:83:c2:ac:5f:ef:
                    d0:04:5b:3f:0a:8f:14:f6:6f:67:ef:0a:94:ad:77:
                    9a:fa:cc:df:c9:5d:9e:b9:db:91:a2:6c:2c:c9:c0:
                    f0:f3:13:7a:43:eb:85:c3:98:82:d0:86:e9:16:82:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:11:5B:55:37:AE:BA:88:B0:90:CD:81:3D:07:B6:0B:A7:C3:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c76e42-8e93-45c8-a10e-a62a77459343/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c76e42-8e93-45c8-a10e-a62a77459343/1/HsgRW1U3rrqIsJDNgT0HtgunwyU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202656

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:70:67:5e:19:22:97:68:db:7e:88:dc:46:bd:78:eb:ac:
         00:e7:2b:bb:4a:aa:e4:71:63:e0:d2:0b:82:12:e2:1c:f7:60:
         11:81:92:a9:1d:e9:67:c4:a7:b0:d0:c5:87:5b:52:e6:cd:ce:
         3a:d4:04:66:8a:43:fa:34:8a:35:78:21:dc:b9:53:7c:91:5c:
         92:09:23:63:e1:b1:3d:89:54:3e:3d:7e:9d:ef:20:09:40:ab:
         42:f9:9b:e3:67:47:fe:c0:07:d9:99:02:cb:9f:8c:3d:1e:7b:
         09:f3:71:80:b1:bd:94:f0:6d:27:d8:36:ef:49:43:3b:24:3d:
         8b:9d:53:f4:b7:2b:1e:1e:38:f6:50:07:76:4b:5c:84:cc:d0:
         ea:0a:c6:ae:a2:63:6f:a0:86:70:44:08:81:dd:fa:46:a5:f3:
         52:d0:83:a7:71:b6:d0:e9:e4:4e:8b:8d:a1:bf:8d:4b:01:1f:
         34:ed:5d:d6:37:84:46:aa:67:1c:8e:ee:3f:a9:62:20:7c:1b:
         26:2b:f8:36:27:3a:53:2e:4a:df:e6:77:e1:0e:48:58:58:19:
         e3:7c:47:b6:1e:7b:89:df:54:03:5b:1c:43:31:f6:61:1f:18:
         b6:c0:6c:a2:92:31:80:56:9c:4b:b9:09:bf:ce:a1:73:d4:dd:
         7f:3a:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----