Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aLig781Jvk9yFw__b2XiL-8X6eA.cer
File:                     aLig781Jvk9yFw__b2XiL-8X6eA.cer (raw, json)
Hash identifier:          rti1I4xYyMsoCg7NRfNKWrhnlQix+i7DJfrfTjCQaV0=
Subject key identifier:   68:B8:A0:EF:CD:49:BE:4F:72:17:0F:FF:6F:65:E2:2F:EF:17:E9:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       754C7422DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123581/0/68B8A0EFCD49BE4F72170FFF6F65E22FEF17E9E0.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123581/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:02:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 130.185.124.0/22
                          IP: 2a0d:4b40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503793853148 (0x754c7422dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=68b8a0efcd49be4f72170fff6f65e22fef17e9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:6c:00:bf:59:3c:8d:b4:e1:0a:04:cd:32:
                    ab:51:b9:9e:e1:0f:20:0c:2c:e2:63:83:a4:b2:6d:
                    0e:af:91:f9:df:80:1e:a3:b6:ea:68:a2:88:b0:d9:
                    4e:28:f3:75:02:55:8b:7f:8c:6b:4f:84:b0:93:c9:
                    61:95:8c:7b:b6:70:c8:39:55:b3:bb:fc:32:2f:24:
                    4c:42:98:6d:44:a6:c1:76:6b:3c:78:28:34:22:fb:
                    7c:ff:80:9a:77:1a:40:a4:2e:b1:a0:88:77:fc:2f:
                    11:49:d7:58:fb:99:1b:24:ce:45:1d:76:30:0a:c1:
                    b3:8e:5d:ff:6b:d0:d9:ea:52:d8:a9:8c:41:81:8c:
                    99:78:21:24:8c:91:22:28:f5:c8:fa:fa:01:1d:5e:
                    f7:68:73:eb:5b:c5:63:d2:96:94:9c:a7:44:37:83:
                    c5:d0:68:13:2d:01:44:67:eb:f4:e7:02:e1:d0:24:
                    9f:a6:23:46:d1:f3:51:7a:4f:3f:b9:37:6e:6d:c5:
                    55:5f:7b:5d:b5:e9:30:72:1f:bc:66:5c:cd:ad:48:
                    4b:d8:8a:b6:9b:19:4b:70:d0:06:5b:1c:2d:42:9a:
                    f7:6a:fd:b2:25:c9:33:dc:6d:99:69:5e:da:87:4e:
                    b0:c5:b5:c4:0e:06:48:fa:b6:e4:4e:9a:cb:34:c8:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:A0:EF:CD:49:BE:4F:72:17:0F:FF:6F:65:E2:2F:EF:17:E9:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123581/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123581/0/68B8A0EFCD49BE4F72170FFF6F65E22FEF17E9E0.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.185.124.0/22
                IPv6:
                  2a0d:4b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:3a:ae:7c:bd:d7:da:b9:e4:1f:26:48:66:3b:cc:b2:d2:
         2d:79:35:b8:76:53:dc:c4:ec:eb:50:8d:9e:8e:ca:e5:74:40:
         a0:07:d0:71:f2:74:f2:43:f0:cb:7d:a0:b6:03:5c:ae:5b:f0:
         dc:45:cf:c9:dc:72:46:bf:19:cf:38:5a:db:af:72:b5:23:67:
         c4:69:f0:b7:e7:35:1e:63:fe:77:ec:55:73:e9:85:73:ef:db:
         5d:4a:0a:96:4e:9e:39:3e:a4:c2:fe:7d:0a:31:d5:35:54:1d:
         65:b6:91:e1:75:b0:ba:3e:69:7f:95:5e:92:3a:1e:c7:fa:10:
         fc:a4:97:32:5e:e4:17:6d:27:f7:53:50:32:30:db:ec:50:51:
         6c:b8:bf:aa:cb:42:d0:81:4b:2a:d0:df:60:29:df:3d:1b:a3:
         1b:60:75:ff:d8:b5:77:1c:6c:97:9b:de:be:7e:5c:3a:ff:57:
         67:6d:d6:ba:30:6e:cc:0e:be:a6:3f:64:68:68:f9:f9:91:ee:
         4c:37:3b:4a:6b:84:93:27:a1:77:ff:89:e3:0d:9d:0a:b5:6d:
         a2:4a:f0:1a:39:de:19:cd:13:16:b9:a0:a3:0a:6a:08:3e:f5:
         53:ce:8c:c1:0b:85:b5:53:9d:a1:58:37:e4:eb:ca:10:df:ec:
         7c:f2:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----