Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0MXAjZEgyv9wgQSvzAbgoB1aVO8.cer
File:                     0MXAjZEgyv9wgQSvzAbgoB1aVO8.cer (raw, json)
Hash identifier:          Ui8dlB3Ehg51TDahcYyrQsoRf0qzfgWS/3ExoGgUZYY=
Subject key identifier:   D0:C5:C0:8D:91:20:CA:FF:70:81:04:AF:CC:06:E0:A0:1D:5A:54:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       82FFF19125
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/f3e1ce-9e00-4c72-aea2-8d50d5ce50f4/1/0MXAjZEgyv9wgQSvzAbgoB1aVO8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/f3e1ce-9e00-4c72-aea2-8d50d5ce50f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:57:22 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2001:678:498::/48
                          IP: 2001:678:49c::/48
                          IP: 2001:678:4a0::/48
                          IP: 2001:678:4a4::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562639769893 (0x82fff19125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:57:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d0c5c08d9120caff708104afcc06e0a01d5a54ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:a6:b5:fd:2c:c9:87:96:0c:06:a8:2b:38:
                    79:02:06:87:3f:5b:2f:84:c8:ea:a4:2a:3e:3a:e1:
                    e8:53:40:8f:46:ab:49:76:a4:d4:79:17:de:f8:d2:
                    18:43:60:86:b0:3b:52:7d:22:4b:59:88:e6:d8:a6:
                    05:1e:4e:65:94:c7:4f:a1:a4:ff:56:de:12:96:79:
                    73:a4:4d:a1:84:87:f3:f5:cc:44:98:52:ab:8d:92:
                    7f:34:2e:9d:ff:34:c9:e8:13:10:f7:db:83:6a:a6:
                    1f:b6:7b:e2:1b:2f:6e:41:da:e1:33:f2:91:89:30:
                    f9:44:b3:c4:60:bc:4e:b8:0d:14:1d:91:3a:3c:72:
                    13:1d:c1:f9:bc:1d:36:4a:0a:ea:b0:ad:4f:e3:ab:
                    ab:d8:90:7d:19:7f:86:73:46:e8:a4:9c:10:9d:46:
                    80:7a:59:b7:71:c0:43:ff:cd:67:5d:97:2d:73:20:
                    5c:2f:6c:fe:b5:8b:12:c7:5a:4b:47:71:da:92:15:
                    38:a3:59:eb:9d:23:f1:2e:d3:2f:c7:fb:bb:c6:ad:
                    2e:42:cc:77:1a:4c:27:15:c0:b8:45:21:29:17:49:
                    03:92:67:03:93:cd:cc:1e:ba:1b:8e:b3:60:ef:0e:
                    92:8b:bd:38:ec:e1:ec:02:b1:22:b7:8f:5e:c6:80:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C5:C0:8D:91:20:CA:FF:70:81:04:AF:CC:06:E0:A0:1D:5A:54:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f3e1ce-9e00-4c72-aea2-8d50d5ce50f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f3e1ce-9e00-4c72-aea2-8d50d5ce50f4/1/0MXAjZEgyv9wgQSvzAbgoB1aVO8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:498::/48
                  2001:678:49c::/48
                  2001:678:4a0::/48
                  2001:678:4a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:e9:62:98:cd:bc:f4:e0:d0:55:bb:cb:ed:0c:2d:32:de:
         35:c3:62:b3:09:ad:f5:04:76:7a:99:fa:b5:05:7e:49:85:99:
         aa:04:e7:5e:a8:34:39:57:0f:37:b9:eb:aa:1a:8d:79:a5:df:
         b8:da:64:2f:21:1d:43:a8:06:d7:3a:0d:87:1f:cc:43:5d:a7:
         9d:1d:58:0c:e5:cb:dd:bc:72:4f:83:1d:8d:20:78:fa:8e:05:
         3b:ec:61:3a:6e:17:cd:88:30:c9:e4:5b:67:10:91:ad:e2:d5:
         ec:ec:86:54:91:ce:8b:08:3f:48:e4:47:61:9d:01:f7:e1:2a:
         2b:c8:dc:67:5b:89:c6:0a:85:a2:9f:db:37:b5:65:5c:b5:2c:
         93:1e:7c:28:bf:2d:9b:26:20:0c:bc:e3:ce:ab:5d:bf:a1:3e:
         e6:02:1d:27:b7:33:4b:3e:d8:08:1c:84:2b:93:7c:69:5a:67:
         6d:a9:f3:60:9b:84:e7:91:a6:9f:6b:bc:c3:13:09:80:fb:79:
         9a:a8:3c:f1:4a:7a:9f:d9:58:5a:6f:03:21:54:0e:d4:f3:f0:
         ae:a2:3f:e2:0c:6d:0c:33:2b:2c:13:b9:11:f2:e3:15:d5:71:
         fc:25:9d:7f:c8:0c:62:93:80:e7:b5:6a:fe:d1:f4:b3:f1:13:
         19:e7:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----