Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
File:                     aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer (raw, json)
Hash identifier:          UVJr/RhSVnD1VepiA3KwQ4coDNkHfHeHgnOYTPAY3/4=
Subject key identifier:   68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89614CC395F5245D3CCA0D442A4CE5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 94.103.184.0/24
                          IP: 2a11:4340::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:61:4c:c3:95:f5:24:5d:3c:ca:0d:44:2a:4c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:2a:f5:3c:63:1a:b9:7c:5a:58:8b:0b:d0:
                    a8:b2:b6:e0:b7:3f:dc:12:a9:6a:04:37:7c:d5:89:
                    c9:60:aa:4d:36:a3:a8:7f:e8:71:30:a0:cc:d6:c9:
                    c1:36:5d:3c:2f:9f:a8:01:47:5c:89:0a:04:3b:17:
                    d8:b6:2e:a4:e6:af:50:c0:2e:70:d5:7f:18:36:4b:
                    fc:96:98:40:ce:73:d1:93:87:94:2b:53:cd:dc:94:
                    22:c4:ba:3a:e4:ae:75:e4:25:49:d0:35:3a:93:56:
                    a6:ed:13:76:8f:96:43:04:cb:1d:62:31:0b:60:08:
                    61:d2:27:68:b5:9c:d1:1f:a7:9c:80:a9:b2:af:76:
                    ed:38:af:ff:35:a1:6e:f6:df:08:91:77:d5:76:36:
                    45:f0:55:11:69:d3:e3:fc:91:43:6d:31:ae:7e:c7:
                    4b:a8:f2:94:ee:c5:cd:17:c1:50:8f:78:e1:66:e0:
                    bf:47:f2:49:0d:61:52:aa:bb:9c:4c:95:7c:8f:f1:
                    0f:8f:be:7d:26:4c:ee:7a:25:f1:ad:ba:34:c0:27:
                    1c:28:26:04:e5:83:bc:7b:12:2f:07:99:3c:4c:92:
                    55:1c:e8:4e:05:77:2e:3e:9c:28:75:9b:df:9e:d2:
                    9d:7e:49:d1:46:0d:ea:1a:93:81:23:e0:04:3c:95:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.184.0/24
                IPv6:
                  2a11:4340::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:a0:72:7c:2c:ae:5b:e5:2e:91:4c:44:2e:54:14:c8:6b:
         70:91:79:43:29:2d:31:6d:55:6d:08:fe:4c:29:ed:52:a7:c7:
         3e:29:91:f6:d0:ed:0c:dd:0e:ee:88:2c:c7:af:cf:de:b6:a5:
         4d:56:43:6f:11:90:8f:b6:e9:53:7c:83:85:e3:e5:76:e2:dd:
         3c:0e:ef:68:41:98:f5:56:35:07:2f:39:ab:ad:c5:b1:13:cc:
         44:fd:86:6d:cd:b3:cb:de:27:fd:b3:d1:6b:22:2f:6b:ec:ac:
         c3:5d:18:2c:2f:97:1c:31:6d:0d:76:b2:0e:f8:da:1b:a0:78:
         ab:0d:6f:27:5a:76:c6:76:cf:90:8b:3b:ea:1b:5e:c2:64:c3:
         ab:63:00:c7:a2:74:d5:42:72:01:f6:0d:79:4e:b4:0f:f5:6b:
         84:78:91:29:82:e9:fa:77:0f:0b:f0:38:15:85:f3:8d:ee:3b:
         7b:c9:e1:65:7e:ff:73:16:5c:04:a2:d7:90:e1:e0:54:82:2b:
         ee:bc:e2:0d:10:77:06:35:7e:63:c7:ac:ee:5c:3a:84:43:53:
         fc:d1:5c:44:5f:e9:c8:fb:69:8a:44:4b:0f:2b:69:ab:f3:72:
         78:56:db:36:24:5a:e4:d3:b9:55:cd:7d:85:f7:84:67:8d:1b:
         8f:90:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----