Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0Jk3gusyzbEX5YjEYadZ8xZI7c.cer
File:                     h0Jk3gusyzbEX5YjEYadZ8xZI7c.cer (raw, json)
Hash identifier:          DSkE/xRei7NFdliNYAUnAMOf8bEzYEG3dX8RzSV+EvE=
Subject key identifier:   87:42:64:DE:0B:AC:CB:36:C4:5F:96:23:11:86:9D:67:CC:59:23:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9B1411C91B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/0491e6-62db-467d-b832-cc1973953c7f/1/h0Jk3gusyzbEX5YjEYadZ8xZI7c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/0491e6-62db-467d-b832-cc1973953c7f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 02:01:34 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 62454

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666056640795 (0x9b1411c91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=874264de0baccb36c45f962311869d67cc5923b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:a4:a0:4c:11:f0:c3:6e:a5:77:45:b4:8c:
                    e3:65:89:2d:4b:32:12:f0:27:8c:50:82:c7:90:8e:
                    9e:33:9b:54:8c:10:1c:91:c2:f5:96:b9:0b:6a:9d:
                    58:40:14:71:17:7e:3a:55:80:d3:89:53:24:d8:db:
                    a1:3a:e5:a8:71:6c:14:61:d2:70:57:d7:6a:e3:93:
                    bd:cb:34:b5:d7:bd:2c:1a:87:ba:a9:6a:33:62:48:
                    53:5a:a7:a7:c7:c6:68:d8:89:3e:bf:cb:53:a1:3d:
                    d1:55:6b:7c:59:64:5f:84:94:84:40:13:90:13:88:
                    4f:98:3f:b3:ba:08:7e:67:86:aa:45:6f:c6:9f:86:
                    fb:ff:69:42:19:ad:80:a4:6f:a9:44:cc:e3:93:ce:
                    0f:86:76:d4:f2:18:b6:88:ab:21:b7:ea:c8:4b:52:
                    2b:23:d4:ec:cf:8c:dc:25:0f:e7:3e:94:23:ee:ee:
                    cf:ac:0a:42:12:2d:c9:5a:e4:b5:a3:d6:5c:63:b4:
                    74:32:18:25:22:9e:4c:94:20:d3:5e:d6:b6:27:a8:
                    30:f9:7e:65:45:cd:6a:69:ea:26:fa:85:6b:3a:a9:
                    7b:7a:08:d9:dc:62:9f:8a:c9:59:ba:e0:9e:4a:de:
                    d7:68:f0:3a:93:70:c8:5f:ee:88:c3:c4:53:ec:b3:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:64:DE:0B:AC:CB:36:C4:5F:96:23:11:86:9D:67:CC:59:23:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0491e6-62db-467d-b832-cc1973953c7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0491e6-62db-467d-b832-cc1973953c7f/1/h0Jk3gusyzbEX5YjEYadZ8xZI7c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62454

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:c0:69:bd:c9:e4:2c:5b:4e:9f:9f:fb:8f:f8:f5:8f:2c:
         f4:ee:cf:5c:2b:02:d5:c2:c0:09:9c:72:54:dc:64:19:ae:c2:
         bd:2e:0e:16:2c:52:c8:4e:38:34:66:1c:6a:46:bc:d8:21:0d:
         fe:1c:ce:4c:b3:7a:72:e0:c9:3b:02:ed:8d:27:b1:a0:70:28:
         0a:d0:ec:29:bc:eb:b0:03:9b:31:3d:53:f5:ba:b0:ba:d3:37:
         8c:f9:b3:f7:1f:57:65:f9:91:34:d7:b2:38:9e:9a:fe:67:db:
         ae:a2:af:e2:07:65:d6:24:c2:11:fb:78:00:24:2a:b2:4f:f2:
         38:ca:87:16:cf:d4:76:ae:b7:a1:74:aa:e7:06:47:f2:9c:c2:
         34:d9:00:87:ed:c0:14:b8:06:55:78:32:0a:d1:dc:f2:8a:93:
         ba:54:e0:82:c1:2d:fb:dd:18:11:bd:da:d2:56:bb:18:24:65:
         7f:4b:e9:bf:56:cb:ee:64:4d:05:b4:02:f7:78:11:92:67:e1:
         e7:05:c5:58:21:24:06:e1:d2:6c:66:84:eb:a9:cf:d5:f0:a0:
         7b:be:ec:7c:56:f7:81:0f:cd:c3:6a:53:7f:f6:6b:4d:2f:34:
         ac:0c:1f:56:94:02:e1:c6:28:d5:ac:ff:95:d3:1e:97:6d:db:
         1c:90:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----