Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ksd-gAHw1KITg3ucZa2aHzPdi80.cer
File:                     Ksd-gAHw1KITg3ucZa2aHzPdi80.cer (raw, json)
Hash identifier:          ovI3ABl2f8hDfKEZT17jkENNlSKOCzQGO4X6oo2ehiA=
Subject key identifier:   2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856BD1160EA75C3077D72B4492338C66FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 05:32:22 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209616
                          IP: 2001:678:15c::/48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d1:16:0e:a7:5c:30:77:d7:2b:44:92:33:8c:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:32:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ac77e8001f0d4a213837b9c65ad9a1f33dd8bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:de:ed:f5:a4:0f:ae:14:bf:51:a7:5a:52:
                    2d:13:c6:af:d6:7a:ba:05:2f:a0:d6:57:9c:e1:ba:
                    8e:00:66:99:83:85:33:f9:3c:c3:2b:ba:f0:92:e4:
                    c5:39:f6:8d:c1:b8:c3:b3:ec:fd:4c:74:94:70:f0:
                    99:23:a7:32:1c:47:03:8b:ba:63:36:92:c4:9b:7e:
                    3d:bd:66:cf:d3:2f:3c:df:01:8a:71:46:79:7d:24:
                    cf:94:74:94:df:84:3e:34:61:80:07:2b:46:64:d1:
                    0b:7a:3c:04:f5:0e:71:07:ab:6d:72:b0:e0:6f:3d:
                    74:74:09:16:39:b3:10:db:16:db:45:98:2e:18:91:
                    40:74:d8:be:94:0c:3a:3b:c6:04:d0:47:24:f2:75:
                    08:ff:d5:29:81:4e:d9:90:55:f6:07:e6:9d:09:10:
                    14:4d:c9:94:db:09:bc:57:8c:ff:0d:e3:60:24:d0:
                    21:43:72:5a:5c:8c:e7:37:d6:97:da:97:d7:2a:8b:
                    da:d0:7b:79:f9:55:e4:a1:d8:53:fa:65:1b:9c:b3:
                    00:cc:e0:07:98:0c:8b:47:d9:85:05:18:45:11:94:
                    19:1a:dc:09:3f:98:12:b9:d8:a9:3d:fb:a5:1f:4a:
                    63:40:37:60:4d:a8:fb:e4:e4:99:73:52:09:d8:da:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:15c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209616

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:93:b5:3f:72:ca:56:9a:fe:66:cc:71:97:23:62:0c:a6:
         1f:cd:6b:89:da:36:0e:36:23:5c:9e:6b:1b:08:6a:a8:fe:e1:
         78:03:f9:d0:f2:67:1a:49:b8:06:02:81:04:74:13:1e:97:92:
         c0:f8:de:34:20:e0:fc:0f:8f:56:6c:d1:e9:d1:69:6b:04:3c:
         d7:fe:95:0e:c9:34:93:2e:2d:b1:cf:45:df:e2:de:98:75:d8:
         a8:3a:ab:ff:f3:c0:f8:c6:df:88:95:d6:14:5d:73:72:28:7c:
         96:75:8a:48:79:60:8a:a9:2e:55:5e:61:59:9a:60:f3:c5:df:
         06:d6:e8:1b:79:e2:32:f6:4e:ab:53:c1:0c:c1:4b:8a:cc:07:
         db:6b:ec:39:bf:01:9b:a6:8a:b5:d0:42:f7:88:2d:dc:8a:ca:
         8f:16:db:b6:10:d2:f6:47:73:86:17:dd:54:fe:b0:25:83:c9:
         ea:14:12:b1:88:6e:cd:0d:89:47:8b:2f:2f:51:98:75:78:bf:
         cc:c6:7f:be:97:78:01:90:8d:12:24:63:73:eb:dd:97:fb:ff:
         c1:cb:26:f9:58:ce:c9:98:16:fc:16:90:25:f4:47:0a:ff:5a:
         0f:71:f7:b0:44:ba:c3:d3:c1:cb:38:4f:d8:2d:bd:0b:25:8b:
         a1:65:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----