Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/095PsJIUv_ZCPLA9C1Wl8CMLA8Q.cer
File:                     095PsJIUv_ZCPLA9C1Wl8CMLA8Q.cer (raw, json)
Hash identifier:          bNV6ExB+Dl0cCiT3Wn6cegXYC36N6XSPZgihenkUqMY=
Subject key identifier:   D3:DE:4F:B0:92:14:BF:F6:42:3C:B0:3D:0B:55:A5:F0:23:0B:03:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81D9E5D13F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/4ae08c-53cf-494f-a074-86589025381f/1/095PsJIUv_ZCPLA9C1Wl8CMLA8Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/4ae08c-53cf-494f-a074-86589025381f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:43:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.135.224.0/22
                          IP: 2a0c:8140::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557706498367 (0x81d9e5d13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:43:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d3de4fb09214bff6423cb03d0b55a5f0230b03c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:7c:65:02:e0:a7:ba:fb:68:d4:92:af:dd:
                    b2:77:8e:39:ee:8a:3c:62:61:d5:1f:ef:b8:26:9a:
                    0c:74:39:46:be:c5:05:c7:a3:a4:68:f6:4e:2a:f0:
                    df:c3:ed:4c:fb:ea:70:e0:80:88:fd:6d:bf:b8:31:
                    ef:60:c8:b7:6d:01:51:d2:2e:b4:98:a9:c3:dd:78:
                    be:45:46:b0:63:e0:7d:75:24:30:7e:eb:b9:7c:2f:
                    61:4c:9a:4c:74:65:df:61:71:bb:69:65:b2:91:c9:
                    b3:63:e7:d2:72:85:5b:4a:08:0c:15:82:8d:0b:ce:
                    44:af:c2:ac:b7:e1:01:f1:a7:0e:50:d9:1b:c1:c5:
                    ae:fb:d6:a5:00:3a:04:87:ea:d9:ae:88:83:15:42:
                    af:ce:06:d7:5c:de:fc:05:a1:55:2f:4e:31:fa:c4:
                    43:7c:70:9c:c7:03:93:25:2c:30:16:b3:d1:e4:c8:
                    8f:5f:79:64:d1:3e:bf:5b:92:4d:90:8b:29:e3:31:
                    d3:3b:9a:2a:42:07:62:7d:86:48:92:4c:f0:36:df:
                    76:71:18:58:d3:e7:5f:3a:db:db:73:52:13:d0:03:
                    5c:91:98:be:0c:14:84:a2:11:a6:02:0b:5c:a2:67:
                    08:67:c1:57:2e:6c:2c:3b:35:e9:96:a8:81:b0:e5:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:4F:B0:92:14:BF:F6:42:3C:B0:3D:0B:55:A5:F0:23:0B:03:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4ae08c-53cf-494f-a074-86589025381f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4ae08c-53cf-494f-a074-86589025381f/1/095PsJIUv_ZCPLA9C1Wl8CMLA8Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.224.0/22
                IPv6:
                  2a0c:8140::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:9a:e9:42:bd:1d:9d:6e:d1:d8:43:00:67:fa:e5:22:d2:
         21:89:86:3f:0c:01:57:c8:c2:8f:e5:f0:02:07:1e:a6:1b:69:
         68:bc:8d:ee:c4:5c:56:98:a3:f5:cd:ef:19:d2:8b:7f:d5:f1:
         00:bd:ee:be:7c:57:c8:21:07:6c:ec:52:7d:f0:3d:c3:70:4f:
         2e:e1:3b:c1:95:46:e8:d8:de:1a:74:ce:94:c1:59:69:74:71:
         5c:87:da:9d:ba:f4:5c:e8:55:78:35:1a:09:c2:24:b5:16:8b:
         c0:37:ac:f4:6c:03:49:91:0d:48:c5:cc:8f:3a:f6:8b:b2:31:
         ec:9e:f2:44:34:b9:41:e1:00:f9:df:09:2e:1a:da:0b:f1:02:
         e1:e6:ca:e8:6a:37:3d:0f:d2:40:62:d8:e0:65:43:e6:b8:97:
         0d:61:d3:09:56:49:da:6f:c9:64:6d:0c:2b:9b:96:37:b0:c8:
         ea:80:3d:17:2e:65:a2:e7:f3:3f:53:bc:7a:65:eb:f1:fc:91:
         2d:87:4d:89:ce:2f:81:07:d7:38:7a:6b:5e:1f:3f:b7:fb:e2:
         5f:00:f8:89:46:f0:dc:47:d2:02:77:cf:92:ff:dd:2e:c5:6e:
         ab:87:2f:5a:96:d6:f1:89:05:51:ed:c0:75:49:ff:fc:7d:d5:
         59:05:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----