Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DE0YsMy_1bmF0-9ojjM63UObs9w.cer
File:                     DE0YsMy_1bmF0-9ojjM63UObs9w.cer (raw, json)
Hash identifier:          F4m33p2dTq6TKe/R9zex+m/yurVDXwYv9ABtm7+tJho=
Subject key identifier:   0C:4D:18:B0:CC:BF:D5:B9:85:D3:EF:68:8E:33:3A:DD:43:9B:B3:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       754D741BD8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123601/0/0C4D18B0CCBFD5B985D3EF688E333ADD439BB3DC.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123601/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:02:50 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 185.137.12.0/22
                          IP: 2a0a:8e00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503810628568 (0x754d741bd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0c4d18b0ccbfd5b985d3ef688e333add439bb3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:ff:67:2f:c0:f3:43:ff:9a:48:66:d9:61:
                    df:03:58:21:55:0e:75:4f:55:39:86:c0:9e:95:33:
                    c8:c3:9a:f5:58:31:c8:54:5e:7a:b0:d3:32:ab:30:
                    c6:d3:e3:73:e7:c9:9e:69:fc:77:2c:70:7d:2a:56:
                    fe:7c:ce:bb:48:86:85:78:8f:a0:00:00:07:c0:a5:
                    bb:89:e8:3a:0c:f5:44:09:da:a0:58:c3:ce:76:68:
                    86:03:19:11:1c:10:73:b5:24:16:f7:25:11:46:00:
                    c9:76:86:8a:41:d1:54:4e:73:26:76:ab:a8:84:80:
                    b9:ae:c0:a5:6b:52:bc:2b:a7:74:dc:4d:a2:51:e1:
                    57:c1:74:9b:a2:09:ae:38:49:5d:e7:27:e5:22:06:
                    a6:c7:b9:12:3a:16:a2:ae:4f:ba:4d:6b:9c:ca:a9:
                    a3:bf:2e:a3:5f:87:fd:aa:36:ef:9d:22:e7:e4:d7:
                    1a:99:dc:42:e9:9f:7d:b8:a7:c0:4b:d6:ad:38:af:
                    b2:46:98:05:85:18:73:e0:1b:b2:58:b1:6b:8c:1a:
                    55:d9:6b:9a:b5:d0:91:bb:31:05:50:38:ec:39:72:
                    e0:2d:c3:09:4e:0f:bb:27:9d:ef:ad:81:7a:00:22:
                    cd:8d:8d:9c:04:c3:99:94:c6:e1:f7:a6:ea:c2:72:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:18:B0:CC:BF:D5:B9:85:D3:EF:68:8E:33:3A:DD:43:9B:B3:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123601/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123601/0/0C4D18B0CCBFD5B985D3EF688E333ADD439BB3DC.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.12.0/22
                IPv6:
                  2a0a:8e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:9b:89:26:b6:a4:80:49:bf:05:65:1c:cf:24:03:8c:06:1b:
         71:03:c0:a6:3a:8b:37:69:b2:30:d8:ac:2c:2d:ae:be:60:d2:
         09:58:36:c1:eb:9a:77:3c:6a:ee:9e:c3:3e:17:63:dd:1f:cd:
         7d:fc:7d:7f:82:5d:db:a3:5c:db:0c:c7:45:89:eb:dd:f5:6b:
         91:3e:43:8d:a0:5b:31:21:4b:6e:8f:a3:2a:36:07:b0:ac:55:
         03:96:66:5f:b8:55:bc:f0:00:ea:d9:de:6d:fd:1c:8d:2f:42:
         de:9c:d1:fa:ab:e5:ec:5f:b2:e3:74:8d:23:21:bb:de:0c:46:
         9b:13:68:61:8a:b8:4b:4b:1a:7b:56:c4:83:bf:a6:1f:71:34:
         c2:ec:31:25:4b:64:5b:d8:90:08:a9:bb:5e:b8:2a:e1:70:c6:
         04:bc:04:b8:2e:0a:87:2f:2c:82:8b:90:4d:6a:48:1b:26:1f:
         10:ff:74:2e:08:7b:ed:98:81:f4:4f:17:a2:81:44:7b:75:5c:
         7f:c1:21:5a:a5:08:5e:f3:01:a0:60:2b:99:5d:b4:5f:10:40:
         ab:6b:f5:00:cc:fe:49:f8:e8:a6:37:ed:b4:50:7e:7b:e7:1d:
         5c:ca:06:39:a9:a5:f3:73:67:fd:a3:b6:15:6b:00:7d:78:7b:
         27:fd:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----