Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cXZuz9FKyyDyORs0Mg2lcq9kPig.cer
File:                     cXZuz9FKyyDyORs0Mg2lcq9kPig.cer (raw, json)
Hash identifier:          lAsc1ktrfw9PROX042bhROaHziT46Ji/2+V+rmL/HLg=
Subject key identifier:   71:76:6E:CF:D1:4A:CB:20:F2:39:1B:34:32:0D:A5:72:AF:64:3E:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B3B36B86FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 28 Jun 2022 16:29:23 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 61317
                          AS: 210277

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771809314556 (0xb3b36b86fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 28 16:29:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=71766ecfd14acb20f2391b34320da572af643e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:86:89:cd:d4:b8:e9:bf:dd:d5:e0:f8:6d:
                    16:6c:1a:b8:5f:ab:49:de:87:e0:8b:a5:2c:4a:ba:
                    30:5a:48:ec:28:14:f2:ed:06:f7:0e:f8:b6:a3:1b:
                    9b:6f:35:ef:d6:f1:b9:b2:3a:18:99:cf:6c:1d:cd:
                    22:61:26:75:a8:31:dd:ef:76:60:f4:45:df:06:fa:
                    9c:4d:68:47:c8:5f:91:ea:d6:e1:90:98:24:df:be:
                    33:53:b4:c8:15:62:84:f3:0b:71:e2:4f:2e:8f:84:
                    a2:52:6b:6c:c3:fd:51:a6:fa:a8:71:6f:83:92:87:
                    26:0f:2e:79:a7:bb:15:03:cd:a7:18:37:61:c9:6e:
                    73:16:6b:5d:96:23:ec:89:87:59:76:a6:d0:6b:72:
                    fa:f6:6f:2e:69:e6:3d:59:8a:63:8a:a4:47:4c:ae:
                    9c:02:10:3e:88:91:13:b9:cf:b6:71:3c:f0:59:c5:
                    7b:42:c3:54:46:a7:67:ff:e8:30:b0:3b:36:6b:2d:
                    66:e3:e0:75:3a:7d:8d:9c:df:f1:52:c9:cb:1e:43:
                    a2:60:48:1a:23:5c:0d:f5:33:60:65:e4:ec:c5:f0:
                    1d:cb:4a:67:ed:97:40:5b:97:d5:1b:77:ff:42:de:
                    7c:00:14:ca:c4:7e:e1:08:14:e7:9d:59:90:85:98:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:6E:CF:D1:4A:CB:20:F2:39:1B:34:32:0D:A5:72:AF:64:3E:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ce8550-b395-45b3-b2cb-c1acee6e5749/1/cXZuz9FKyyDyORs0Mg2lcq9kPig.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61317
                  210277

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:31:a2:ae:1d:74:d4:2d:b0:e3:93:90:5b:d9:60:52:e4:
         68:65:69:62:c7:9a:44:b3:b6:cb:82:87:7e:7d:8d:0f:ed:93:
         e3:b0:e6:6d:2d:b6:cb:c2:92:3e:a3:1a:12:9e:72:75:86:5e:
         ab:9d:32:3f:b6:6a:87:09:c2:c1:98:15:53:96:48:2c:94:56:
         8b:b9:87:eb:b8:18:d2:62:a4:04:e6:f3:44:7c:4c:2b:68:e7:
         8c:f3:c4:4e:60:45:70:ca:7a:64:cd:8d:b3:d8:86:43:25:5f:
         77:a1:ee:29:38:95:d8:1c:6d:50:e4:36:6e:0e:81:96:b2:40:
         d7:5d:7f:fb:bf:64:b8:50:96:c2:4a:4f:11:e0:25:f9:87:64:
         eb:34:e0:29:6d:8b:bc:64:1e:a2:c0:36:d1:ca:b9:1b:19:e7:
         c3:71:a5:7f:1a:45:3d:be:45:22:5d:93:d2:06:c8:6a:e7:54:
         d3:c3:8f:6b:a6:00:e2:25:f8:b6:4e:0d:5b:09:63:e9:11:92:
         29:e1:9a:56:8c:c3:7e:f7:1c:9f:07:94:07:e9:92:31:b9:1f:
         1d:b5:56:ad:21:b9:69:9d:78:01:ea:71:88:8a:c6:81:17:64:
         aa:d5:70:00:2b:97:d1:e3:96:82:23:c0:8f:ce:f0:90:bf:32:
         de:c5:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----