Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bkR-6ViIOcZsMZA9J37lR7ydrEM.cer
File:                     bkR-6ViIOcZsMZA9J37lR7ydrEM.cer (raw, json)
Hash identifier:          2J3T4XEO6j4Qf+ayOUGvfv9j0PdDsnX6iw3EscUjbhQ=
Subject key identifier:   6E:44:7E:E9:58:88:39:C6:6C:31:90:3D:27:7E:E5:47:BC:9D:AC:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B24DD77433
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/5efecb-3392-4f43-861c-243da2b66312/1/bkR-6ViIOcZsMZA9J37lR7ydrEM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/5efecb-3392-4f43-861c-243da2b66312/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 25 May 2022 19:21:42 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 201990

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765810144307 (0xb24dd77433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 25 19:21:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e447ee9588839c66c31903d277ee547bc9dac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:38:e9:0a:b4:bc:7d:c8:05:c2:81:df:2b:
                    bf:89:ef:cd:4d:75:30:c2:07:10:a3:7e:df:ef:b2:
                    6f:a1:88:7e:a4:78:3f:9a:8c:5d:b2:ae:f9:dc:76:
                    da:db:8c:66:e6:09:f7:cc:62:eb:46:4b:b0:53:d9:
                    ae:92:3d:ab:b5:70:0c:b3:5c:5d:18:54:a5:28:0b:
                    f1:78:79:0c:81:38:48:b2:ca:df:aa:e4:8a:56:c2:
                    4e:32:80:f6:8a:0a:4d:a6:65:be:7e:56:74:6e:36:
                    16:00:c4:b5:1f:0c:49:6b:ea:b9:d5:38:2c:e2:b8:
                    ae:a3:1a:6b:eb:99:71:49:d4:7b:8d:51:1d:ae:98:
                    86:b4:60:1c:1a:1d:2f:09:46:5a:f6:ef:5e:d7:8c:
                    76:84:5d:b5:8c:70:8f:30:56:3f:fc:4b:d7:5d:c6:
                    5f:af:9d:4a:b1:f9:e5:70:23:d0:63:7f:10:c9:62:
                    6a:19:34:f1:47:9d:75:c2:c9:a5:ef:83:b1:e3:39:
                    84:1d:dc:37:fb:8b:b9:3c:27:04:9c:4d:8a:36:92:
                    e9:89:0e:39:7a:ca:44:f1:7c:cb:2d:e2:cd:5d:21:
                    0a:69:f5:7c:c4:52:3e:26:9b:ca:4e:f1:71:4f:d6:
                    7a:e9:ee:f8:1d:6f:4b:fb:db:e6:d5:a9:43:d6:25:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:7E:E9:58:88:39:C6:6C:31:90:3D:27:7E:E5:47:BC:9D:AC:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5efecb-3392-4f43-861c-243da2b66312/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5efecb-3392-4f43-861c-243da2b66312/1/bkR-6ViIOcZsMZA9J37lR7ydrEM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201990

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:21:76:c8:14:97:09:de:55:08:15:56:72:cc:64:2f:49:
         fb:71:62:c7:b5:82:a3:40:b3:29:3b:a6:2a:e2:f8:11:51:c7:
         72:79:85:df:0d:75:85:73:1d:03:4b:2c:eb:cc:d9:f3:f3:d9:
         09:c5:52:f3:43:96:04:56:88:55:f4:aa:84:0c:ca:c3:98:3e:
         72:8d:0b:ac:f4:4f:24:71:c1:44:12:85:d5:42:49:21:64:f4:
         90:5f:22:4f:1b:3a:29:b4:8e:2e:6b:d8:df:e1:8e:87:54:fe:
         0a:77:64:a5:a3:41:f9:b2:5d:fc:05:26:9b:2b:a3:95:93:5b:
         95:6d:c3:e8:ae:e6:b7:53:3c:f2:6a:d6:cf:cc:24:e4:da:1f:
         7b:d5:84:79:49:d9:10:93:47:c7:e3:89:b7:10:89:e0:da:16:
         a2:aa:a5:1c:3a:af:c5:59:e6:fe:86:6b:86:a2:6f:d2:66:4e:
         5f:a2:91:b7:a2:a4:a5:7f:9d:93:3d:5c:a2:1c:56:46:28:ce:
         5f:f0:d7:45:35:53:c4:af:0f:7c:5e:2e:6a:eb:77:5a:46:e7:
         d2:ef:43:56:52:b0:86:a8:d7:7c:69:db:05:d5:68:92:18:af:
         46:cb:ed:38:d8:bf:88:8b:67:e6:8d:b6:82:4a:ad:dd:92:4a:
         ee:ff:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----