Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAz87V32T8CiVKRnDyZESPrm12o.cer
File:                     YAz87V32T8CiVKRnDyZESPrm12o.cer (raw, json)
Hash identifier:          dji6piS9lpPBJ0aTuVWhItA5bnvXSiKPDgJrcyGnjfw=
Subject key identifier:   60:0C:FC:ED:5D:F6:4F:C0:A2:54:A4:67:0F:26:44:48:FA:E6:D7:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A6FF7BA260
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/8b8949-0c0e-4465-a611-1dc0dab66650/1/YAz87V32T8CiVKRnDyZESPrm12o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/8b8949-0c0e-4465-a611-1dc0dab66650/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 12:54:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.139.124.0/22
                          IP: 2a0e:9440::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717250863712 (0xa6ff7ba260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:54:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=600cfced5df64fc0a254a4670f264448fae6d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:41:48:3d:fb:d8:44:9e:6d:71:87:b2:3c:
                    68:4f:2e:d8:61:e9:71:f7:ce:44:6b:99:d7:6c:b0:
                    fa:6e:dd:ca:3d:1e:81:86:fa:88:17:65:31:ee:ad:
                    27:bd:f9:cd:af:89:2f:60:f9:df:81:66:75:c9:2e:
                    60:8a:79:fd:f5:b8:6c:72:62:e4:e8:f4:9e:41:52:
                    32:fd:fa:70:85:58:8e:44:8a:38:43:2f:7e:ad:ea:
                    b3:c2:1d:06:a1:97:52:bd:de:85:70:c4:39:91:be:
                    e8:95:90:df:16:25:ef:00:0a:89:f1:bc:aa:d8:dc:
                    18:ea:63:79:07:5c:d8:18:49:59:7b:a3:07:8f:69:
                    10:5c:33:6a:fb:13:bf:85:6e:e1:ef:c7:06:78:5a:
                    46:07:26:f5:a4:c2:a2:91:cb:d2:d7:d6:ad:81:7a:
                    9a:0a:eb:f5:70:0b:83:0c:94:d1:2b:50:4b:ea:9b:
                    47:f8:0d:82:ba:43:f6:78:c3:74:41:24:8d:ff:e4:
                    79:6a:f6:0b:eb:41:35:c7:c8:f3:c2:c1:ab:b2:55:
                    da:81:e0:18:93:fc:7b:97:b1:2b:92:94:e1:98:7f:
                    c3:79:1a:cd:89:60:f4:1d:2d:5d:af:4c:4a:64:b7:
                    42:e4:b2:51:e3:79:27:46:bb:50:ac:4d:e8:7c:6d:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:FC:ED:5D:F6:4F:C0:A2:54:A4:67:0F:26:44:48:FA:E6:D7:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8b8949-0c0e-4465-a611-1dc0dab66650/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8b8949-0c0e-4465-a611-1dc0dab66650/1/YAz87V32T8CiVKRnDyZESPrm12o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.124.0/22
                IPv6:
                  2a0e:9440::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:11:09:5c:e1:a5:6a:d2:58:ec:04:27:9c:4b:5a:e8:f3:
         0b:f9:64:1e:1f:f6:cd:aa:69:4d:48:a5:e7:5b:0d:34:2c:21:
         2b:96:6c:cd:03:0f:db:95:04:e1:ae:27:c9:5e:c8:3f:7f:51:
         c0:7a:c4:3f:4e:cd:ea:46:9a:58:05:2f:d6:f7:32:48:cf:5d:
         2c:34:2b:a9:c2:2d:37:c3:ca:3d:fa:2b:4c:f9:40:3f:37:54:
         98:9b:e3:4d:1c:5c:22:f4:e0:d9:0e:2b:c0:2f:9a:05:70:39:
         e9:da:ca:8a:71:d9:75:f8:8e:57:08:7e:af:87:c2:b7:04:a1:
         03:7f:a1:19:98:4d:eb:32:73:ac:16:bf:7f:35:7c:1d:ad:e6:
         8e:04:b9:21:4f:ea:a0:09:cf:5d:73:f0:c9:78:12:cd:06:13:
         e2:19:03:3a:ad:56:83:e0:35:66:17:7d:66:12:46:33:6f:44:
         6c:00:ed:a6:c8:14:a9:10:b9:1c:7e:13:c3:fc:94:37:f1:20:
         a4:81:41:c2:3c:35:91:4c:f0:e6:c3:75:97:cb:0f:93:b0:4b:
         b4:cd:83:41:0a:05:c1:fa:7f:e9:88:1d:35:6f:37:a5:2f:44:
         06:8f:53:af:6b:3c:71:04:07:15:5f:64:c5:45:80:5e:a2:98:
         09:ad:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----