Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SZES2xyOCEr7NNHdhiRevCFbWD4.cer
File:                     SZES2xyOCEr7NNHdhiRevCFbWD4.cer (raw, json)
Hash identifier:          f3K3iPm6yXNz4bXfZfB0VTjUrFmnBJ4Mxrif7Rq7GzE=
Subject key identifier:   49:91:12:DB:1C:8E:08:4A:FB:34:D1:DD:86:24:5E:BC:21:5B:58:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01833DB79C65946987AB978197F1D23F61B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 14 Sep 2022 20:36:26 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205329
                          IP: 2001:67c:2800::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3d:b7:9c:65:94:69:87:ab:97:81:97:f1:d2:3f:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 14 20:36:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=499112db1c8e084afb34d1dd86245ebc215b583e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:75:95:6f:34:3c:c4:75:23:6f:ad:78:87:
                    4b:a1:14:61:04:f4:d9:48:a3:2e:42:a7:b6:6d:38:
                    3b:e1:68:3e:96:66:8d:2d:81:71:98:06:ab:14:49:
                    f6:6b:99:4d:89:1b:5e:d7:8a:c9:58:7f:5b:94:be:
                    60:dc:e2:54:f1:bd:34:7f:49:13:55:5d:9c:b6:ed:
                    18:82:d6:4a:13:69:3b:19:f5:ba:a0:b3:1c:b6:0c:
                    3e:5e:13:66:3b:db:4d:8b:82:1f:3a:fe:92:bd:b6:
                    56:6b:0f:d2:30:55:6d:8b:6a:96:be:ee:ad:a0:2b:
                    c8:08:81:d6:f4:1c:3d:9d:4e:29:b4:df:0e:28:1b:
                    af:30:1a:3c:67:c3:a6:44:0a:89:3b:4c:d6:83:a7:
                    b6:ce:8b:89:14:e6:63:63:dd:6c:b2:5b:87:77:d7:
                    38:aa:2b:7b:5a:72:f0:ba:13:93:76:2a:b3:db:ac:
                    9f:25:9e:df:cc:fb:1d:59:01:72:66:50:df:9e:be:
                    f8:50:d2:e1:e0:ee:24:8b:1f:a6:23:d6:b4:5c:f8:
                    01:92:e3:f0:f7:5b:4e:2a:23:e0:84:26:70:32:a3:
                    5e:7b:b3:e3:e4:15:78:fc:95:2e:b6:7a:46:97:68:
                    aa:b9:43:d8:36:68:57:aa:98:a9:e7:b9:b3:8a:2f:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:12:DB:1C:8E:08:4A:FB:34:D1:DD:86:24:5E:BC:21:5B:58:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1e8f2b-cf7d-499b-8252-6ac2a9e39b1e/1/SZES2xyOCEr7NNHdhiRevCFbWD4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205329

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:90:99:42:80:84:e7:8e:5c:e6:c5:62:28:38:39:1e:2c:
         a1:2b:98:c0:e8:21:9a:0a:78:c3:8b:19:37:c8:7e:79:fd:90:
         dd:4a:48:40:7b:96:a2:30:5b:0e:2d:f6:54:e9:bf:94:cf:60:
         ed:25:a0:0b:fe:b9:11:ad:60:ad:26:60:5e:5c:1e:4f:31:ff:
         4f:8d:b3:37:81:d9:2d:1a:56:73:db:96:fc:b9:57:f3:f8:93:
         9b:9f:a3:fb:9d:4d:dc:a6:f7:71:d9:04:ed:30:5e:d9:aa:79:
         19:52:31:21:67:b8:6d:ca:7b:a0:ec:4c:09:e8:97:15:b9:46:
         02:1c:55:52:b5:20:c1:41:ae:bd:6e:1a:ab:56:9d:44:33:5d:
         24:30:18:85:3e:32:64:91:c1:3e:8c:76:59:a6:64:b5:44:60:
         9c:b3:d6:80:14:7f:20:04:6b:88:f9:d5:34:19:9b:c9:85:64:
         2e:32:34:47:3d:e1:ca:33:5c:3a:20:6b:c8:06:84:41:d1:d9:
         3a:07:93:95:f3:74:ca:da:24:62:97:75:68:5f:35:d6:f1:eb:
         27:52:7f:35:1e:1a:49:ee:ed:42:d8:61:8b:4d:ec:7e:7f:e6:
         21:97:d6:58:6e:22:ed:d2:d1:c3:44:2a:fa:dc:f4:67:0b:09:
         cc:cd:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----