Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IifLK4-6LjN1Vay1n-mquNa8Lz8.cer
File:                     IifLK4-6LjN1Vay1n-mquNa8Lz8.cer (raw, json)
Hash identifier:          GhmNR1lCFBxNL15jbQgA/TKMiqLLVaED+XLBUxH9r6U=
Subject key identifier:   22:27:CB:2B:8F:BA:2E:33:75:55:AC:B5:9F:E9:AA:B8:D6:BC:2F:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A9DB55D7C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/05a302-7b5e-4605-b3d8-881fcd92e696/1/IifLK4-6LjN1Vay1n-mquNa8Lz8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/05a302-7b5e-4605-b3d8-881fcd92e696/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:02:04 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 57604

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729529309129 (0xa9db55d7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2227cb2b8fba2e337555acb59fe9aab8d6bc2f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:61:f5:2f:7d:97:df:74:f2:73:21:fb:ba:
                    b4:34:99:75:b5:01:72:10:9c:18:59:e7:52:a1:66:
                    11:d8:b8:2d:40:eb:e0:e0:de:38:c5:38:e4:41:be:
                    5f:29:e7:21:0a:5d:14:af:94:52:6a:1e:78:a2:85:
                    29:3a:bd:86:e9:42:44:10:df:8c:d2:16:1d:d5:9a:
                    e5:13:7f:95:bd:09:b9:d7:a8:dc:38:7f:24:bf:52:
                    4d:34:82:88:ff:70:ac:41:88:ad:ed:a0:af:2c:1e:
                    07:fa:f6:62:e8:f9:74:95:9a:4b:31:ea:6a:df:50:
                    b0:b1:f0:eb:d9:58:d7:a5:5c:65:29:ab:89:8a:8a:
                    6b:10:b4:30:35:60:e9:eb:4c:48:99:d6:97:35:95:
                    fe:45:93:7e:6d:0a:84:3e:5f:a4:11:06:83:8a:97:
                    eb:2a:19:78:ba:d4:d9:7b:d0:3a:90:d0:b7:7f:20:
                    ce:95:82:ad:11:98:14:d2:78:e6:cc:95:2f:fc:fc:
                    75:e3:ae:38:0b:03:89:aa:cb:ec:21:5f:07:0d:ab:
                    e9:9b:da:29:c8:f6:9c:c8:18:7b:0d:22:17:c4:3b:
                    19:18:cc:99:2f:91:e5:64:d2:2e:42:f2:85:e0:4f:
                    84:ee:7f:70:8e:f3:3a:ac:9f:0f:eb:c5:ec:2e:bf:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:27:CB:2B:8F:BA:2E:33:75:55:AC:B5:9F:E9:AA:B8:D6:BC:2F:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/05a302-7b5e-4605-b3d8-881fcd92e696/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/05a302-7b5e-4605-b3d8-881fcd92e696/1/IifLK4-6LjN1Vay1n-mquNa8Lz8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57604

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:aa:97:1b:d5:34:dc:c1:dd:94:e9:19:46:72:a6:42:c7:
         4b:28:91:8c:2f:ed:66:cb:fc:b7:18:11:d4:17:37:ad:d8:1a:
         a3:cb:a2:96:d4:10:be:d5:88:3c:bc:ee:48:eb:73:98:aa:0a:
         5a:69:51:c4:ad:4f:3f:47:09:61:14:1c:3c:9f:24:e3:8f:d4:
         68:ff:e1:95:15:9e:f7:b2:19:f8:c4:9b:ab:a4:11:7c:ea:e2:
         4c:07:32:71:a1:7d:f8:6f:8e:ed:92:8c:9c:14:c4:d8:f2:03:
         75:31:35:33:82:20:e2:d7:bf:46:41:39:5d:7a:e6:b6:56:92:
         60:59:2c:61:5a:ed:9b:a3:45:5c:71:17:33:9a:63:4f:49:ae:
         6f:33:9e:f2:fc:d2:69:12:72:47:8e:aa:6d:c5:4a:f0:75:a7:
         02:36:e2:1a:5d:9e:4c:9b:8f:12:58:9e:dd:78:86:64:ed:35:
         e5:80:24:77:02:97:ca:f6:aa:49:24:69:0e:4c:47:79:6d:e6:
         96:60:b0:5d:51:b3:73:c5:b0:b0:68:fa:71:53:f7:1b:df:f0:
         77:94:b3:ed:5b:4c:fa:1c:e3:ef:bf:22:f4:7b:82:42:01:4e:
         92:7a:43:be:65:ea:bd:3d:84:3c:a5:8c:9c:48:57:a8:01:5a:
         45:2e:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----