Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6Qq6qoN4DO6iRLSXy1KdClRmRU.cer
File:                     q6Qq6qoN4DO6iRLSXy1KdClRmRU.cer (raw, json)
Hash identifier:          Q6WnbndblQbYJQmZNqsSHJ/OsZoUlxgxNscNqZr2wFU=
Subject key identifier:   AB:A4:2A:EA:AA:0D:E0:33:BA:89:12:D2:5F:2D:4A:74:29:51:99:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9A5BB73DAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 01:54:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 212178

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662963699118 (0x9a5bb73dae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:54:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aba42aeaaa0de033ba8912d25f2d4a7429519915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:93:d5:19:67:4b:e5:f6:bc:a9:30:d2:26:
                    ea:68:c8:99:33:e6:9b:25:83:cf:76:01:ab:a1:6c:
                    42:7e:4a:f3:52:6e:0f:fd:2f:8a:b9:fb:cf:30:00:
                    0f:ab:6a:be:61:7f:34:86:a3:4c:01:e4:09:29:e6:
                    b6:55:7c:c9:11:f9:39:f4:8a:36:a0:8d:85:fc:6b:
                    d6:f2:f2:03:fe:71:a8:ef:df:ea:a1:34:56:d4:db:
                    94:03:93:f2:2e:d8:a0:10:e4:8d:90:81:bb:36:2c:
                    42:24:c5:22:bf:e0:2e:52:11:95:01:11:e2:37:12:
                    1c:ca:7b:c7:2f:6c:f1:2b:a2:22:a4:67:2f:26:f5:
                    9a:b0:99:c4:2b:6f:cc:fa:44:56:23:27:55:7e:40:
                    68:b8:39:de:02:c1:bb:c1:88:ec:1c:75:51:0b:be:
                    b0:e7:09:38:3a:ed:52:d3:69:32:64:56:a1:9c:10:
                    12:82:58:a3:b9:ba:55:8a:10:66:05:f3:a4:4e:b0:
                    a6:91:0d:da:84:cc:0e:e8:93:98:10:6e:7d:0f:8e:
                    9b:39:bc:30:31:dd:71:6e:36:e2:3c:4e:65:dd:ea:
                    ee:01:87:22:44:2a:fa:b8:be:1b:de:82:c0:cc:31:
                    83:7b:af:f6:1e:c8:30:16:97:9d:7b:6f:2a:e3:c3:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:2A:EA:AA:0D:E0:33:BA:89:12:D2:5F:2D:4A:74:29:51:99:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5a338b-40f3-4049-823d-c66c61c810b2/1/q6Qq6qoN4DO6iRLSXy1KdClRmRU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212178

    Signature Algorithm: sha256WithRSAEncryption
         93:94:9a:86:40:ff:53:77:0d:d3:54:38:ac:d9:a6:58:e9:a2:
         4e:dc:49:80:3f:dd:9e:77:5d:3e:ec:fc:c2:18:31:1c:7b:d3:
         2b:13:b6:77:32:d0:bb:71:10:1d:97:3e:8b:79:71:c2:7c:b0:
         2e:58:65:f4:cf:11:79:2e:d0:b7:56:59:02:f1:54:9a:e4:5f:
         7a:f2:e0:45:7d:c0:07:b9:96:76:80:0c:12:d3:8b:a8:85:3c:
         79:71:9a:e9:4c:a1:51:a4:74:6f:76:6c:4a:b3:9f:ef:ad:a4:
         61:a2:13:ba:4e:97:3a:2c:05:de:8e:b9:15:97:11:76:ec:6b:
         98:d3:38:bf:7a:75:f1:ab:fa:68:27:57:64:4d:30:a4:41:d1:
         3d:90:c0:e7:f6:be:27:e8:34:04:07:ad:7c:cd:7c:d7:ef:10:
         52:7c:50:09:14:f3:23:cf:6e:10:65:0a:73:56:d0:1a:65:20:
         86:4e:c2:d8:35:0d:31:40:76:75:4a:19:fc:e7:60:3e:90:f1:
         a7:c3:2b:42:c2:b9:5b:34:f0:58:91:0a:99:63:72:66:14:fa:
         18:23:1e:e6:86:76:fa:9e:cb:db:78:90:0b:df:26:7a:63:72:
         2e:bd:22:ea:8e:1e:f8:2a:40:db:59:38:cd:97:e7:aa:66:45:
         be:69:b5:b9
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJpbtz2uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1NDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhYmE0MmFlYWFh
MGRlMDMzYmE4OTEyZDI1ZjJkNGE3NDI5NTE5OTE1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA3HmT1RlnS+X2vKkw0ibqaMiZM+abJYPPdgGroWxCfkrz
Um4P/S+KufvPMAAPq2q+YX80hqNMAeQJKea2VXzJEfk59Io2oI2F/GvW8vID/nGo
79/qoTRW1NuUA5PyLtigEOSNkIG7NixCJMUiv+AuUhGVARHiNxIcynvHL2zxK6Ii
pGcvJvWasJnEK2/M+kRWIydVfkBouDneAsG7wYjsHHVRC76w5wk4Ou1S02kyZFah
nBASglijubpVihBmBfOkTrCmkQ3ahMwO6JOYEG59D46bObwwMd1xbjbiPE5l3eru
AYciRCr6uL4b3oLAzDGDe6/2HsgwFpede28q48NBlQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFKukKuqqDeAzuokS0l8tSnQpUZkVMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzVhMzM4Yi00MGYzLTQwNDkt
ODIzZC1jNjZjNjFjODEwYjIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNWEzMzhiLTQwZjMtNDA0OS04
MjNkLWM2NmM2MWM4MTBiMi8xL3E2UXE2cW9ONERPNmlSTFNYeTFLZENsUm1SVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM80jANBgkqhkiG9w0BAQsFAAOCAQEAk5SahkD/U3cN01Q4rNmmWOmiTtxJ
gD/dnnddPuz8whgxHHvTKxO2dzLQu3EQHZc+i3lxwnywLlhl9M8ReS7Qt1ZZAvFU
muRfevLgRX3AB7mWdoAMEtOLqIU8eXGa6UyhUaR0b3ZsSrOf762kYaITuk6XOiwF
3o65FZcRduxrmNM4v3p18av6aCdXZE0wpEHRPZDA5/a+J+g0BAetfM181+8QUnxQ
CRTzI89uEGUKc1bQGmUghk7C2DUNMUB2dUoZ/OdgPpDxp8MrQsK5WzTwWJEKmWNy
ZhT6GCMe5oZ2+p7L23iQC98memNyLr0i6o4e+CpA21k4zZfnqmZFvmm1uQ==
-----END CERTIFICATE-----