Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y9m4RAmfBGRc6_qAtFG-jixiB4c.cer
File:                     Y9m4RAmfBGRc6_qAtFG-jixiB4c.cer (raw, json)
Hash identifier:          glVgoCFTucI61byNixlTRkwYHjaXXDA5rel4f6Uv2lw=
Subject key identifier:   63:D9:B8:44:09:9F:04:64:5C:EB:FA:80:B4:51:BE:8E:2C:62:07:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8032CAD390
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/Y9m4RAmfBGRc6_qAtFG-jixiB4c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:44:17 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.10.0.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550607967120 (0x8032cad390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:44:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=63d9b844099f04645cebfa80b451be8e2c620787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:6c:b4:92:11:20:23:e0:46:4a:d8:3e:b0:
                    85:c4:99:9d:31:57:a0:b6:99:33:4c:29:44:45:ac:
                    c3:03:c2:71:54:61:76:3b:aa:e4:bc:f9:f0:50:4b:
                    aa:63:ad:d2:db:1f:2f:2a:cc:c5:57:7a:9c:ed:c8:
                    85:62:fd:f3:2e:45:94:c0:2a:a1:ba:09:e0:8c:63:
                    06:bc:68:2c:f9:e8:f1:f7:f3:95:a7:74:b2:2c:8e:
                    bb:6b:79:a7:2b:56:ca:00:12:95:11:16:4e:82:52:
                    26:b1:d7:e0:62:b0:70:04:50:98:72:85:f4:81:93:
                    9d:25:5f:1c:cb:11:0d:4d:dd:a9:93:fc:8e:d4:d9:
                    0e:5f:96:1d:4c:0e:7e:de:39:3b:39:84:1f:79:7b:
                    01:35:de:f1:75:a6:5c:69:05:99:0b:ed:c0:d1:a2:
                    16:f1:06:9b:e9:10:13:fc:d5:70:fe:b3:28:fe:66:
                    5c:07:80:e1:42:31:56:8a:f0:f6:28:88:ab:42:d8:
                    ee:e1:b7:ea:87:b6:0a:40:14:56:49:e8:a5:4b:fb:
                    39:71:5d:63:93:fc:09:fc:8e:1c:76:1d:1a:5a:e4:
                    50:32:86:9a:74:7d:07:76:17:77:b7:3f:58:59:2e:
                    18:8e:55:ee:50:f3:04:7d:56:d8:e4:5d:b1:55:66:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:B8:44:09:9F:04:64:5C:EB:FA:80:B4:51:BE:8E:2C:62:07:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e27b95-1a63-4459-97ad-06a25c5a59e2/1/Y9m4RAmfBGRc6_qAtFG-jixiB4c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:f2:66:52:56:e4:6b:7f:4e:90:71:a7:d3:97:14:63:85:
         cf:a3:76:19:1d:a3:a0:b5:d3:2b:9b:2b:db:01:78:d0:17:61:
         83:a6:ef:ef:d5:e8:66:b9:6b:65:8b:30:72:b6:55:da:35:2a:
         cb:3b:fd:f7:7b:c1:ba:cf:11:4b:de:6f:52:72:6d:97:0e:c4:
         0e:c3:a6:9c:78:bc:dc:1d:fc:38:38:83:50:a7:7c:10:5e:f8:
         b9:2a:48:4f:75:ac:7b:75:ea:47:ca:40:ba:49:d9:8f:04:7e:
         36:a4:59:6f:82:fb:86:84:18:55:36:2c:0c:b5:74:95:6e:71:
         74:0e:ed:a9:a9:18:d4:78:2d:6e:79:63:3a:37:e4:6d:17:7b:
         8c:de:df:84:82:2b:90:f2:63:c9:e3:d1:92:c8:95:e0:f4:27:
         e0:92:8d:3d:ac:34:54:98:6a:bc:39:95:9a:d8:b7:a1:45:a7:
         17:c0:54:75:bb:61:b4:17:db:0f:07:69:38:32:95:b5:a9:50:
         e2:13:02:78:69:49:2a:98:8a:d8:be:ba:a9:a7:46:69:62:98:
         1d:88:09:00:be:d6:1e:c4:84:50:ed:13:dc:04:d1:0d:8f:98:
         7c:ee:e9:dc:ec:23:ff:41:02:5c:74:3b:67:b2:71:65:c9:56:
         20:30:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----