Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/llNa_u4c3fSaSgScymjjs9sAwKg.cer
File:                     llNa_u4c3fSaSgScymjjs9sAwKg.cer (raw, json)
Hash identifier:          hOoSHUcnfUitThDuiUrKdNtfF4wBNx3TkhgVcXv1SPY=
Subject key identifier:   96:53:5A:FE:EE:1C:DD:F4:9A:4A:04:9C:CA:68:E3:B3:DB:00:C0:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9CE033ADC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:56:01 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 57140
                          IP: 185.145.40.0/22
                          IP: 2a07:6540::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673776381376 (0x9ce033adc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:56:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96535afeee1cddf49a4a049cca68e3b3db00c0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:99:69:ac:e5:4e:52:25:8d:9e:49:71:97:
                    b9:bf:7f:6d:15:c0:32:bd:45:b5:7e:13:59:50:40:
                    75:1a:72:da:06:20:0c:5e:6b:a7:12:0a:e3:32:3b:
                    34:20:02:39:3d:f4:95:e0:72:6a:46:5a:6a:ab:32:
                    75:2b:a4:f7:62:6b:85:f1:ff:58:f6:e6:a1:ef:68:
                    34:39:c9:dd:1d:79:5e:f5:31:a9:54:28:34:cc:24:
                    fa:dc:19:22:70:af:71:67:ec:ab:da:ec:5f:ff:c9:
                    b3:a1:e7:02:f6:33:ea:52:2d:89:dd:8d:48:ab:f2:
                    a0:66:88:e0:1d:99:bf:b9:28:8b:23:3e:75:14:15:
                    c6:3f:77:f9:68:1e:a0:be:3c:e0:51:ca:2e:88:80:
                    97:6a:9f:ac:5f:99:39:ec:80:3b:db:aa:16:d9:22:
                    ae:d1:60:4b:18:c3:47:71:c0:8e:bf:a9:02:9a:08:
                    fd:eb:48:24:f3:e4:35:7b:a7:22:57:23:ad:ff:f0:
                    9e:c8:e6:65:fc:04:c6:d2:d8:5c:07:c1:d3:d3:4c:
                    42:c0:4e:aa:b9:c2:e7:6a:ef:af:a7:c9:d5:51:1e:
                    c7:9f:2d:95:59:45:4b:ca:0f:f8:b1:06:12:80:6c:
                    7c:df:06:1e:fa:43:86:ee:d6:ee:a1:80:92:e9:58:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:5A:FE:EE:1C:DD:F4:9A:4A:04:9C:CA:68:E3:B3:DB:00:C0:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/58669d-ee10-4d67-a92a-d255b2957f0b/1/llNa_u4c3fSaSgScymjjs9sAwKg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.40.0/22
                IPv6:
                  2a07:6540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57140

    Signature Algorithm: sha256WithRSAEncryption
         98:95:3a:c7:d1:33:c2:0f:9c:84:b2:b7:2a:a5:32:ad:df:8a:
         c6:1c:69:68:87:15:90:37:e7:3f:c9:ae:a3:85:43:40:66:77:
         3d:e0:1e:63:03:dd:be:36:cb:ef:d0:d9:c3:69:c6:5c:57:57:
         18:df:55:1a:9c:a6:06:fa:58:21:25:42:d2:cb:cf:6f:4c:a9:
         38:5a:e5:7f:33:e2:71:89:d8:93:ee:d0:1a:ea:62:2b:41:30:
         0b:d2:a2:e9:71:ab:a0:c0:e2:c3:1b:9d:37:e2:6f:db:b8:71:
         29:08:16:83:da:2b:85:0d:c9:c2:5b:a3:26:00:35:0b:fb:69:
         ca:fb:d4:e6:90:54:62:21:ed:94:00:ca:c1:2f:5a:c9:59:bd:
         99:76:b7:46:74:0a:d8:d0:bc:4f:c7:6a:72:06:a1:34:e0:dc:
         2a:27:56:35:a5:11:00:24:d8:1d:bc:21:be:42:d1:66:e6:01:
         7d:04:35:66:b7:fa:b3:0e:75:8d:55:4d:82:24:a8:60:7d:23:
         29:cc:b7:06:f3:b8:6b:82:75:ce:c4:0e:8c:8b:71:90:f2:9e:
         6a:fb:3f:6b:6c:c6:8f:e0:0d:cf:22:90:8d:c0:97:ed:a1:d1:
         24:f1:6d:f8:8b:b7:92:64:8d:0f:e7:2d:f0:05:88:d5:2b:89:
         fa:64:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----