Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qIo0vx29cgnOEqovRnA__mcSchM.cer
File:                     qIo0vx29cgnOEqovRnA__mcSchM.cer (raw, json)
Hash identifier:          iEtLF0CMSKFLjDOBojtZUzwKXDFR5euZYJ0bNpauItc=
Subject key identifier:   A8:8A:34:BF:1D:BD:72:09:CE:12:AA:2F:46:70:3F:FE:67:12:72:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA71EE37E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/c36a22-40fe-4976-850b-3a8bcb8fc0f2/1/qIo0vx29cgnOEqovRnA__mcSchM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/c36a22-40fe-4976-850b-3a8bcb8fc0f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:55:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:4fc::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732055877606 (0xaa71ee37e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:55:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a88a34bf1dbd7209ce12aa2f46703ffe67127213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:b2:bb:a7:91:81:43:69:73:39:e8:2a:19:
                    f8:a7:50:64:19:9e:5f:92:0e:47:93:be:3c:f0:d9:
                    ab:dc:2c:3c:22:d6:5d:3f:9c:de:04:cd:9a:a3:3a:
                    68:90:3b:b3:b7:c5:84:b0:29:0d:58:f3:25:d3:91:
                    fd:3d:9c:96:5a:08:36:7b:2b:3d:3c:e6:ce:96:68:
                    cc:e3:32:de:77:07:31:b9:c3:c3:9e:f3:9d:26:d6:
                    5e:8b:5b:24:3b:89:c4:18:b1:4f:41:bd:91:93:4b:
                    e2:7c:f0:aa:9f:38:0b:a3:90:47:ad:d0:ef:4b:4b:
                    40:ca:88:34:ec:17:58:73:18:9f:80:75:9e:b8:3c:
                    a1:a3:11:a0:80:d7:d0:c4:b3:df:a4:36:e6:b0:04:
                    1a:68:79:47:91:83:92:3a:59:57:27:3c:c7:e2:0e:
                    f4:a4:ad:36:4c:c9:22:64:be:40:c7:fc:b2:36:ff:
                    fd:c2:2c:69:64:cb:77:6c:df:ee:c2:da:83:b5:e9:
                    f7:e0:6c:15:4a:21:eb:70:83:f6:3f:f7:48:44:f5:
                    ce:cf:45:62:a3:79:fd:48:d2:a7:b7:60:7b:28:84:
                    41:7c:51:51:86:49:3a:ad:85:87:5f:e7:3c:57:61:
                    ec:3f:f5:87:7a:aa:08:d6:1b:02:b7:58:d6:5c:7b:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8A:34:BF:1D:BD:72:09:CE:12:AA:2F:46:70:3F:FE:67:12:72:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c36a22-40fe-4976-850b-3a8bcb8fc0f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c36a22-40fe-4976-850b-3a8bcb8fc0f2/1/qIo0vx29cgnOEqovRnA__mcSchM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:4fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:11:ed:cf:ba:c1:55:bf:e0:6e:bc:c3:60:56:80:1e:b6:
         c1:d3:9f:0a:95:b4:45:45:59:67:cc:f7:87:41:1f:f7:99:fd:
         24:0f:60:f3:ac:db:76:c1:84:8b:c2:30:74:ba:bf:fa:06:05:
         9d:9f:36:41:36:1d:81:25:f8:82:db:9e:d1:33:73:6b:9d:34:
         75:4b:f2:36:41:66:ae:bf:46:f5:e0:02:b8:74:39:51:80:a5:
         4c:07:7e:ab:5f:82:19:4b:bc:38:df:3e:e1:ca:88:f2:df:2a:
         b5:50:81:d0:64:65:97:46:75:82:c8:a8:58:dc:10:b3:f7:99:
         f4:69:ba:2a:5e:51:38:2d:ce:34:72:61:6c:11:d9:ea:0b:f7:
         c4:e5:0a:14:27:60:a3:64:ae:61:63:c7:bf:19:7c:7b:d1:18:
         d1:e7:69:11:8a:95:11:ee:37:00:ca:a6:c2:e7:89:18:d9:e6:
         96:3b:d4:21:7d:b7:9b:49:98:3f:ef:b7:80:62:f5:a1:e7:7f:
         7c:68:79:ff:d4:80:d1:c2:ee:7d:bc:51:a4:0e:7e:96:b1:62:
         22:60:e3:d9:e6:50:ee:27:31:e0:fb:5d:8f:42:24:bb:1b:2e:
         0c:da:fc:21:8b:ed:68:2a:63:d2:c0:5a:48:9c:62:a8:2c:b9:
         2d:60:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----