Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y_eqeAQE8hqINK_o7AkzLq_CKKc.cer
File:                     Y_eqeAQE8hqINK_o7AkzLq_CKKc.cer (raw, json)
Hash identifier:          8wqMJZLuI68dpZ2Fl6silc3YEzFhwUwkOqKW87ZH8n8=
Subject key identifier:   63:F7:AA:78:04:04:F2:1A:88:34:AF:E8:EC:09:33:2E:AF:C2:28:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7B53C888F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/c9072a-2f0f-4850-a357-23d9dee01d33/1/Y_eqeAQE8hqINK_o7AkzLq_CKKc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/c9072a-2f0f-4850-a357-23d9dee01d33/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:35:04 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.181.184.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529686628601 (0x7b53c888f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:35:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=63f7aa780404f21a8834afe8ec09332eafc228a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:db:68:84:7e:10:e9:b3:68:43:ee:42:28:
                    66:a6:d2:cb:96:92:a7:af:d0:07:eb:3f:4a:03:cd:
                    45:06:04:f4:cd:df:03:9d:17:20:98:e3:64:dd:b6:
                    bb:d3:c2:ce:38:fc:d4:d8:61:0f:0b:de:3e:76:3f:
                    65:83:03:37:bc:41:36:1d:b6:44:8f:aa:6c:bc:f0:
                    5b:63:a9:0a:5f:f3:c8:3b:ea:2e:4f:b1:81:a9:6b:
                    06:f7:5a:29:ba:4d:b1:e6:04:68:32:af:ec:1f:52:
                    2d:90:67:02:71:17:dd:ce:a6:31:ce:55:14:07:f9:
                    6f:98:fd:5a:55:a6:ab:69:8a:9c:a7:fa:65:60:f6:
                    28:2f:73:0c:fb:e7:33:b3:78:6e:88:7b:81:bc:1e:
                    2a:9b:6d:74:67:88:11:37:0c:63:75:2a:8a:0b:a5:
                    b9:90:da:6a:3a:e6:a1:8a:79:07:47:03:2f:37:df:
                    6a:89:71:56:c8:6d:d7:82:65:5d:18:a8:0e:48:37:
                    2c:0f:98:58:2b:37:1f:ec:09:22:48:e0:6d:d5:e3:
                    18:3f:5d:03:75:40:be:d9:1f:02:98:d6:9d:07:de:
                    1b:ca:98:0c:9e:83:07:35:b9:c5:12:be:c2:94:10:
                    69:ef:12:43:a1:d7:4e:cf:0a:04:ce:ec:75:ef:0d:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:AA:78:04:04:F2:1A:88:34:AF:E8:EC:09:33:2E:AF:C2:28:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c9072a-2f0f-4850-a357-23d9dee01d33/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c9072a-2f0f-4850-a357-23d9dee01d33/1/Y_eqeAQE8hqINK_o7AkzLq_CKKc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:84:9b:f1:f1:09:5e:c6:ca:9e:4c:62:41:a6:6a:9d:06:93:
         83:ca:fa:61:83:76:7d:9f:43:70:7f:34:52:6b:65:e8:50:49:
         13:3e:2e:55:cf:47:0c:2d:f8:87:94:f6:a2:ab:10:3e:1c:20:
         b3:4e:4c:4a:b4:9a:83:c3:91:54:7c:58:38:0f:60:5c:2c:82:
         d9:96:ca:5a:1b:1c:10:f3:3c:5d:ca:08:c2:2b:e4:e9:58:d0:
         3d:aa:0f:9b:79:66:28:2b:c9:73:8c:e9:0b:b3:ac:c8:2e:0b:
         21:dd:b9:05:cc:2f:59:b6:81:8e:60:99:b6:b7:6b:1c:46:39:
         ea:84:c6:ef:2b:ec:76:bb:71:ba:d3:f8:74:a3:74:52:3c:9f:
         f3:c0:5f:79:e6:b5:e9:4c:7e:a7:36:b3:db:c8:9b:c2:0a:54:
         cc:27:cd:55:e7:a8:37:a7:cb:56:3d:66:ac:a8:de:77:56:58:
         98:19:78:f9:77:54:d0:d0:50:05:89:34:1e:39:93:c0:2c:34:
         02:ad:66:20:4d:17:1c:3f:7e:e9:d6:9d:48:5b:56:1c:cb:e0:
         60:5b:59:86:51:46:0d:7f:c7:ef:68:33:88:3d:8e:aa:f5:ea:
         2a:f8:5e:43:54:95:ef:11:52:4b:c3:19:2a:34:44:ca:11:12:
         f9:80:f1:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----