Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Bi7pvYT8EZbaw-JVHFwkZqLzwc.cer
File:                     0Bi7pvYT8EZbaw-JVHFwkZqLzwc.cer (raw, json)
Hash identifier:          USqWhgbITY0xHiht6kJMTDIsMcwHgGgjNK/deFcWW20=
Subject key identifier:   D0:18:BB:A6:F6:13:F0:46:5B:6B:0F:89:54:71:70:91:9A:8B:CF:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5AA392DF88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/1281fa-2d28-443f-a5a6-10b8cda67d93/1/0Bi7pvYT8EZbaw-JVHFwkZqLzwc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/1281fa-2d28-443f-a5a6-10b8cda67d93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:50:30 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 2a0b:a040::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389291368328 (0x5aa392df88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:50:30 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d018bba6f613f0465b6b0f89547170919a8bcf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:e0:d6:79:86:c5:74:63:b2:fd:76:d2:ee:
                    e2:d4:7b:ff:ee:c6:d9:c6:31:06:f9:8d:42:99:8d:
                    3e:58:43:3a:f0:f6:9d:e4:05:68:c1:0c:ce:ef:7a:
                    aa:bd:66:89:de:22:c7:6c:cc:de:e0:0a:1c:7e:fa:
                    d1:00:3c:f1:e7:1b:f8:7d:b4:37:4a:a3:9e:37:b7:
                    83:b5:01:1b:e2:28:1e:84:16:aa:f5:6e:e7:d6:f7:
                    81:2c:1a:db:33:e9:23:8c:54:fd:66:c0:76:04:a4:
                    cf:02:f7:e5:8a:ac:c4:4d:54:96:0d:4f:33:65:69:
                    43:49:5d:a0:ee:55:ca:2a:ae:5d:48:c8:eb:4a:d8:
                    72:86:b7:54:50:61:1f:50:cd:dc:e2:ad:d0:bc:d0:
                    06:ec:94:b7:b5:2f:67:af:28:8a:1f:c9:d8:01:0c:
                    17:82:30:00:ad:e1:3a:f7:8f:72:b7:04:ea:02:06:
                    b6:65:ef:5f:63:69:22:ba:28:5b:13:e9:24:79:5c:
                    13:cf:b7:87:16:8e:42:f5:b3:80:e3:06:c2:6a:da:
                    30:6b:69:ee:52:47:ec:84:e7:4e:6b:30:0f:d3:2f:
                    0e:39:90:ae:12:ce:7d:bd:30:08:34:8c:6d:68:d2:
                    68:b2:7e:37:1a:3a:80:a5:37:e2:47:18:70:12:a2:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:BB:A6:F6:13:F0:46:5B:6B:0F:89:54:71:70:91:9A:8B:CF:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1281fa-2d28-443f-a5a6-10b8cda67d93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1281fa-2d28-443f-a5a6-10b8cda67d93/1/0Bi7pvYT8EZbaw-JVHFwkZqLzwc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:a040::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:c8:aa:c4:f6:30:ac:a7:e1:0e:fb:e0:e9:d3:d8:74:6b:
         b0:5c:7b:01:2e:6f:2c:55:8d:dc:2f:03:83:80:0e:49:a8:9d:
         5a:9f:9d:66:26:13:7c:98:9d:f2:06:56:e7:e5:ab:a2:0e:81:
         00:5c:f9:fe:8d:eb:6a:02:56:79:36:0e:7f:55:7a:a1:71:cd:
         d1:a2:7e:44:6b:8a:bc:61:80:40:ee:ec:42:40:ba:85:61:95:
         cb:88:02:0c:43:4a:7d:9c:a3:a8:2c:2f:50:75:7a:a3:0e:8a:
         95:ad:03:42:f6:eb:e4:b5:58:0e:61:30:57:09:81:d1:2a:29:
         1c:c3:a9:ff:8c:99:c3:b6:a6:77:61:3a:16:57:f1:90:61:84:
         cb:b7:dc:d5:d6:79:bf:b3:50:4a:1e:04:1f:7e:35:fe:1a:f4:
         31:51:8c:52:ba:c6:c4:e8:03:8f:8c:a0:17:d6:dc:b7:68:67:
         bc:e9:23:0f:78:b8:6e:1c:27:3d:8d:5c:79:ae:48:62:b0:c1:
         fb:ac:ac:03:a3:e8:f9:b1:41:51:8f:27:55:d4:bf:de:7f:1e:
         d9:45:b1:f8:81:54:83:b5:1c:c7:87:86:bd:67:5d:44:3b:15:
         e0:91:2e:92:73:b3:c9:44:80:8b:72:d0:10:e6:0e:63:ee:49:
         23:de:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----