Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E2Sg6dK0hyiuyuV26VO9sWqW81E.cer
File:                     E2Sg6dK0hyiuyuV26VO9sWqW81E.cer (raw, json)
Hash identifier:          twzQo7r0LJAxMSPbNEEF80NH9EL/Z1RvbSIW5docWWo=
Subject key identifier:   13:64:A0:E9:D2:B4:87:28:AE:CA:E5:76:E9:53:BD:B1:6A:96:F3:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       752676AF4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123982/0/1364A0E9D2B48728AECAE576E953BDB16A96F351.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123982/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:45 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 89.207.176.0/22
                          IP: 2a06:2b80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503156485967 (0x752676af4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1364a0e9d2b48728aecae576e953bdb16a96f351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:4e:32:9a:ec:ad:77:6a:e1:85:4e:15:d2:
                    e8:71:9b:7d:22:2c:a5:b0:a6:1b:29:ba:45:87:d5:
                    55:c1:6a:0b:e9:e6:b4:f2:b3:17:26:aa:98:bb:71:
                    f1:90:26:4a:fd:b4:dc:92:6c:9c:8d:3c:c3:5e:3a:
                    8a:7e:d1:2b:85:e9:06:8d:f7:7a:26:5f:99:c9:d1:
                    fb:5c:30:61:53:92:3b:7c:a3:9b:a3:69:52:ce:6b:
                    a1:af:b8:4f:56:96:2a:9a:c2:a7:6c:1e:a5:d9:28:
                    ce:f1:dd:28:28:6e:31:2e:60:2d:56:b4:c2:80:84:
                    5d:e3:a6:24:4b:8f:7c:b9:22:84:84:a4:df:75:9b:
                    04:ae:fe:28:fa:ab:0a:55:17:f6:f3:42:f6:8b:a7:
                    62:fb:4c:4b:87:3a:62:c3:22:16:6a:d0:e8:8c:52:
                    00:95:0d:12:d9:81:48:05:07:f7:4a:dd:cb:60:36:
                    bc:0a:74:1d:d7:c7:59:b9:bf:43:0f:6e:fb:9c:d3:
                    99:88:f1:cb:47:71:16:3f:54:79:08:9c:85:95:5d:
                    1c:f9:87:7d:d5:11:ab:fc:f9:e3:fa:08:f9:05:ec:
                    d4:db:ba:e4:e1:13:c7:95:3f:51:a1:03:be:64:11:
                    3a:ac:7d:5f:9c:97:a4:7a:3b:2e:56:db:ab:1d:7a:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:64:A0:E9:D2:B4:87:28:AE:CA:E5:76:E9:53:BD:B1:6A:96:F3:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123982/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123982/0/1364A0E9D2B48728AECAE576E953BDB16A96F351.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/22
                IPv6:
                  2a06:2b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:71:de:c8:61:e1:ed:48:b2:03:0c:8f:50:de:c5:7a:40:
         90:d5:08:a0:77:ea:d6:cb:98:b6:1d:61:69:9e:1d:04:54:40:
         4c:d3:b9:25:93:cd:9d:eb:56:18:4d:3a:3d:af:4d:c1:4c:93:
         34:0a:a8:8f:a4:b4:6a:4d:dc:3a:94:79:6e:28:46:98:2b:53:
         f0:17:f8:75:0d:1f:65:41:92:ce:df:8a:c7:7e:b8:14:e7:61:
         43:79:05:d4:bf:a3:80:3b:14:8b:97:7c:9f:03:82:5f:9c:14:
         cd:4c:68:ce:8b:a9:6c:bd:58:a3:ec:4b:14:83:d9:e5:35:40:
         7a:47:95:3d:23:d9:b1:38:bc:9d:d3:d1:f3:a1:d3:54:8c:8d:
         d5:f9:eb:72:25:ec:e9:52:3e:e3:7e:72:9f:14:0a:df:ba:e6:
         2b:d8:0a:c6:6c:6b:d1:9f:3f:e7:2c:1a:6d:7f:e3:f6:49:4e:
         64:1d:18:37:43:34:a8:fb:e3:be:2b:7e:ca:36:40:3d:00:df:
         05:3a:8a:14:c6:f5:02:5e:3b:40:b4:b2:e8:07:dc:2a:8f:1b:
         27:fe:f0:27:bd:b6:3e:03:18:ae:77:04:3f:e2:c8:03:a1:33:
         ab:d3:68:15:c3:79:fe:13:ca:67:9e:7a:ee:3b:b2:be:ff:63:
         03:cc:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----