Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RWKHhwTK4hMrBVji8oKXh0bYirw.cer
File:                     RWKHhwTK4hMrBVji8oKXh0bYirw.cer (raw, json)
Hash identifier:          lyHHWTrZWdT6cjWt7eE2SsFKKhlh+urju/jkrrpelAE=
Subject key identifier:   45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01850B444FBAADE1DB5598FCF9C59C41B3EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Dec 2022 11:35:04 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 200572
                          AS: 203453

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0b:44:4f:ba:ad:e1:db:55:98:fc:f9:c5:9c:41:b3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 13 11:35:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4562878704cae2132b0558e2f282978746d88abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:06:1d:ab:47:fc:d5:21:19:d7:1b:56:fc:
                    74:30:53:ed:69:d0:9c:24:f6:56:7c:da:5e:77:c3:
                    ea:a8:cb:2c:7d:04:87:d8:1a:7b:5e:79:56:6f:52:
                    85:c2:9a:09:b6:b7:1d:03:e7:2e:f0:27:e4:ef:4f:
                    ee:9b:d9:be:4c:e6:cc:5a:a0:68:90:63:cf:f7:16:
                    4f:dd:d1:b3:7c:c2:46:6a:97:7a:9a:ed:99:1d:26:
                    12:06:d6:c4:58:b0:43:3b:e2:0d:e9:1c:24:05:9a:
                    4e:6d:12:eb:6a:12:19:4e:80:15:21:47:dc:9d:30:
                    30:5f:94:7f:69:5b:f5:ce:e8:31:9a:01:f3:34:72:
                    09:d0:1c:7d:3e:4a:f3:c0:a6:ed:ad:79:84:17:68:
                    03:84:75:d3:07:9f:ee:b0:33:29:42:7c:a9:e0:0c:
                    6a:67:6d:2e:55:9c:91:d6:3e:1d:94:46:c7:92:4f:
                    51:e0:53:32:8c:58:e9:a3:3c:19:9d:f3:21:c8:d3:
                    4e:26:d5:04:20:3f:dc:1b:f5:f1:cd:53:35:77:f0:
                    eb:8b:4c:de:ff:19:7b:7c:0b:53:eb:e3:8f:eb:44:
                    c7:01:22:a2:8c:60:04:64:33:ca:74:40:b0:b8:e9:
                    36:41:53:c6:d8:2a:eb:94:6e:41:23:0b:ac:4a:7f:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200572
                  203453

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:47:5b:5b:13:f4:67:1e:38:81:70:17:fe:ef:37:d9:d0:
         a3:05:2e:cc:16:18:82:e4:d7:ec:fa:67:73:cd:d9:d7:d8:d7:
         d6:a7:c7:f9:a1:af:0d:7d:fb:7e:c4:ee:17:6f:72:b5:a5:db:
         15:1e:5a:7d:3d:18:e9:8b:f3:57:eb:fc:2a:e2:ee:2c:71:ee:
         0f:5d:7d:93:0e:c2:68:6c:26:82:4f:a8:20:b4:c0:b9:9a:5d:
         fe:be:cd:5d:f0:65:3a:5c:d8:b4:8a:6f:f0:cc:4e:67:b9:b1:
         13:71:73:bf:ab:94:8a:6b:76:96:91:ec:d9:e7:e7:35:19:7e:
         ec:52:0a:7d:cf:85:80:a7:5f:9e:9f:8b:4f:92:dd:67:30:fe:
         05:82:03:0c:70:66:a8:57:f0:45:73:fa:af:13:aa:e3:35:66:
         52:04:43:80:ae:bf:14:92:ca:d9:fb:ed:da:43:d2:11:8d:98:
         ae:c0:69:e1:2b:be:4e:88:df:7c:4b:86:6e:0d:c7:e1:7c:bc:
         10:f1:ac:73:b9:bb:b9:cd:a4:e8:29:f2:da:bb:43:cd:b9:90:
         72:5b:90:a1:09:5d:bf:37:05:9e:57:a9:61:ea:6c:c1:df:d2:
         22:df:40:e3:8c:0c:f1:1c:78:6a:44:21:15:71:e5:1f:d1:7d:
         1f:af:c8:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYULRE+6reHbVZj8+cWcQbPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMjEzMTEzNTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTYyODc4NzA0Y2FlMjEzMmIwNTU4ZTJmMjgyOTc4NzQ2ZDg4YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VMGHatH/NUhGdcbVvx0MFPtadCc
JPZWfNped8PqqMssfQSH2Bp7XnlWb1KFwpoJtrcdA+cu8Cfk70/um9m+TObMWqBo
kGPP9xZP3dGzfMJGapd6mu2ZHSYSBtbEWLBDO+IN6RwkBZpObRLrahIZToAVIUfc
nTAwX5R/aVv1zugxmgHzNHIJ0Bx9PkrzwKbtrXmEF2gDhHXTB5/usDMpQnyp4Axq
Z20uVZyR1j4dlEbHkk9R4FMyjFjpozwZnfMhyNNOJtUEID/cG/XxzVM1d/Dri0ze
/xl7fAtT6+OP60THASKijGAEZDPKdECwuOk2QVPG2CrrlG5BIwusSn8bawIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEVih4cEyuITKwVY4vKCl4dG2Iq8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2UyNTEy
Zi01YTAyLTQ1MDgtYmIzMS01MWEwNjA5M2IzYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZTI1MTJm
LTVhMDItNDUwOC1iYjMxLTUxYTA2MDkzYjNiYS8xL1JXS0hod1RLNGhNckJWamk4
b0tYaDBiWWlydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMPfAIDAxq9MA0GCSqGSIb3DQEBCwUAA4IBAQCjLkdb
WxP0Zx44gXAX/u832dCjBS7MFhiC5Nfs+mdzzdnX2NfWp8f5oa8Nfft+xO4Xb3K1
pdsVHlp9PRjpi/NX6/wq4u4sce4PXX2TDsJobCaCT6ggtMC5ml3+vs1d8GU6XNi0
im/wzE5nubETcXO/q5SKa3aWkezZ5+c1GX7sUgp9z4WAp1+en4tPkt1nMP4FggMM
cGaoV/BFc/qvE6rjNWZSBEOArr8UksrZ++3aQ9IRjZiuwGnhK75OiN98S4ZuDcfh
fLwQ8axzubu5zaToKfLau0PNuZByW5ChCV2/NwWeV6lh6mzB39Ii30DjjAzxHHhq
RCEVceUf0X0fr8gP
-----END CERTIFICATE-----