Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
File:                     m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer (raw, json)
Hash identifier:          UMuXqsecVpR5vJNmcV/+m/jDGGJ5xKswSGlMFglYUAs=
Subject key identifier:   9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A41D0E8806
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:01:22 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 31.12.84.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704862128134 (0xa41d0e8806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:01:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:f4:d8:95:a2:6d:a1:0d:52:8e:2e:ed:6e:
                    a2:b5:23:1b:2d:80:82:7a:f1:06:08:64:c0:1d:5b:
                    18:e7:26:ec:78:a2:7a:f6:32:eb:12:d5:12:7d:97:
                    6a:69:7a:b2:4b:7e:9e:46:0a:70:c0:e2:55:df:64:
                    d1:bb:19:cc:66:45:01:99:88:95:2f:4e:8d:3c:e2:
                    5e:7b:15:30:fc:82:ea:f2:ff:e3:6e:a2:84:1a:87:
                    33:06:9c:94:a7:4a:ad:eb:53:b3:d5:32:5e:26:df:
                    9f:1b:00:77:fd:00:7d:32:c0:0b:64:d1:45:de:70:
                    10:e2:10:73:43:24:9f:ab:ee:bc:b9:e1:60:d1:bb:
                    b5:c5:65:18:d1:55:a9:88:c5:b0:ee:4c:39:09:73:
                    19:bf:6f:ca:a0:cd:d0:3c:1b:c5:1d:2b:a7:15:b7:
                    3f:d9:93:78:d3:df:6c:ef:44:dd:50:b7:ea:a1:b1:
                    d0:6c:b3:28:cb:1a:b7:ae:ec:9a:63:24:6f:3d:c8:
                    0a:2b:a6:71:0a:02:fb:45:2b:8b:e4:e9:f3:31:e4:
                    16:39:ba:14:41:a4:2c:17:bc:09:60:7c:d3:5a:32:
                    50:fb:10:e9:8e:30:3d:e3:8a:81:eb:1a:8f:4c:e5:
                    cc:0c:88:25:94:b9:7f:8b:1d:3b:07:dc:42:93:8d:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.12.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:0e:77:14:4d:3c:7b:f1:2d:cb:fd:21:3f:d0:d4:dd:5b:
         b7:ff:ed:0c:73:b6:7c:21:ef:33:75:49:7d:fb:57:f4:ce:a3:
         b2:03:d9:8b:ec:07:8b:0d:b4:27:9d:8b:9a:29:bd:8a:34:2d:
         53:5e:5d:e7:77:66:1c:73:a2:00:23:4b:7f:5c:16:15:9e:60:
         70:57:b1:5e:28:af:c4:9c:f1:ad:f2:57:96:6e:91:ec:cd:8e:
         b7:2a:42:09:08:db:ae:81:34:8b:4e:ac:e2:df:c6:6c:41:de:
         35:66:b5:e1:29:e4:05:fb:84:9e:24:c3:15:c6:4f:21:96:41:
         f6:75:22:7e:a8:d4:f7:52:31:9c:9b:9c:d0:6b:70:29:c1:01:
         3d:a0:4d:2a:3c:37:6d:b6:73:9b:33:27:1e:63:a8:98:f8:32:
         8b:67:ee:b0:f0:f7:7f:7a:48:fe:2b:af:b1:5c:c8:9f:af:24:
         43:2b:4c:75:84:3a:a1:01:68:84:6e:a8:cf:ed:21:bc:70:ab:
         68:2f:da:93:3c:b9:b7:b8:c9:7b:f5:67:19:1c:42:fd:83:58:
         c7:ae:34:41:6e:66:0a:58:b9:de:8a:0c:d8:89:52:c0:d3:1a:
         34:22:48:fa:84:1d:d4:1b:5a:69:30:6e:23:e8:eb:ea:70:5c:
         3b:f1:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----