Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer
File:                     pcedMuCUxwxZL3zn8WGyBQ0mhnw.cer (raw, json)
Hash identifier:          Rt2bNdr9PMAqTj/Y5xVvBZZ/q8rda38rJaS/hPFO/7k=
Subject key identifier:   A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A9EB1ECC93
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:02:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 42202
                          IP: 185.206.188.0/22
                          IP: 2a0b:1740::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729794137235 (0xa9eb1ecc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:02:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5c79d32e094c70c592f7ce7f161b2050d26867c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:f2:1b:12:bb:d8:7d:b4:20:52:52:b5:d1:
                    fd:09:38:19:e5:38:7c:45:05:97:f5:29:f7:20:48:
                    e6:19:a4:19:b3:e3:f6:c5:92:4d:06:36:80:24:63:
                    01:50:22:a2:bc:b4:b9:dd:24:dd:79:71:2e:56:1b:
                    61:aa:04:6d:af:47:c3:49:1f:4f:57:f2:07:68:62:
                    69:f1:83:aa:2c:b9:59:3e:69:8b:f9:96:da:fc:79:
                    68:c5:98:05:80:ec:a2:c3:95:f0:2f:73:a2:54:21:
                    38:7e:bb:8a:b5:01:1e:8d:61:d3:e7:42:4b:60:a9:
                    02:cf:63:ec:de:01:d8:1d:40:55:54:b3:83:30:24:
                    dd:f5:77:d3:84:00:e5:8d:7a:de:92:1a:0e:f0:5f:
                    26:1c:13:a1:b1:c0:31:3e:ed:00:7d:f1:e6:b6:fe:
                    40:af:b2:9a:c6:67:ab:4e:9e:ba:f4:d5:24:6a:a4:
                    2c:22:3b:ee:44:4b:02:1a:aa:e6:60:24:d3:75:e8:
                    9a:0a:8f:7b:de:bd:69:e1:64:e8:23:2b:fb:49:30:
                    bb:c9:a4:d3:24:7c:e8:f4:4b:05:01:1b:6f:01:0f:
                    09:d3:e0:93:05:a5:f5:a7:98:8a:ec:78:77:84:ba:
                    43:36:e0:bc:64:c8:4b:75:e9:cd:22:a1:2f:31:75:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:9D:32:E0:94:C7:0C:59:2F:7C:E7:F1:61:B2:05:0D:26:86:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/97b263-a8c2-4268-85e8-0be17f1e0b12/1/pcedMuCUxwxZL3zn8WGyBQ0mhnw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.188.0/22
                IPv6:
                  2a0b:1740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42202

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:79:ed:f3:e7:9d:7b:8e:16:e5:ff:d8:6f:b8:0d:1c:a0:
         ff:c9:4e:4b:9c:26:fa:21:fd:76:e4:2d:86:34:18:1d:8f:18:
         ff:24:6a:88:85:be:a2:00:e4:0b:36:59:6e:d4:d7:48:c6:fa:
         79:e1:ef:74:ae:f5:6f:59:21:65:dc:c0:68:87:d5:ae:48:f5:
         ab:cd:7a:07:95:9e:20:18:d6:09:7e:e5:48:79:61:64:2d:24:
         38:35:96:1b:e5:e1:3a:af:1e:52:36:09:e0:81:06:10:8e:0d:
         73:d4:b7:73:81:15:13:7b:ac:d7:e4:33:33:0d:d1:5e:96:53:
         34:3b:f4:6c:fc:e1:54:5e:66:26:f5:ee:b6:e5:fa:7a:68:74:
         77:6e:df:15:85:2d:cd:5c:1b:2c:bc:a9:c3:dc:a0:a4:07:c0:
         a7:25:a1:0d:d2:af:a6:79:59:26:6a:86:39:3a:d8:ba:3e:4a:
         f7:50:ed:a1:be:22:a4:b4:69:7f:ff:03:d4:7e:54:1d:52:39:
         f1:93:88:ad:f5:e9:9f:c2:cd:64:87:01:08:38:fa:7a:df:82:
         be:43:96:25:02:5f:f6:45:3c:21:83:23:dd:81:f7:41:af:24:
         f9:f7:6c:4a:47:75:88:f4:09:92:54:82:7c:1d:72:3b:64:41:
         0f:a5:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----