Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0oMEGa1MXcz46Xp8PD_TIxErCaU.cer
File:                     0oMEGa1MXcz46Xp8PD_TIxErCaU.cer (raw, json)
Hash identifier:          YnL9PAVaS0q7kP8RHbTubTUEHonwt18MdP43BOhov94=
Subject key identifier:   D2:83:04:19:AD:4C:5D:CC:F8:E9:7A:7C:3C:3F:D3:23:11:2B:09:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A964AC5E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/2f854c-73ca-4a40-9c91-9bb2e3bc8aad/1/0oMEGa1MXcz46Xp8PD_TIxErCaU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/2f854c-73ca-4a40-9c91-9bb2e3bc8aad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:18:09 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 48272
                          IP: 91.210.144.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526507492835 (0x7a964ac5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:18:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d2830419ad4c5dccf8e97a7c3c3fd323112b09a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:72:8f:f7:57:f3:07:13:fd:4e:d3:e5:61:
                    92:2d:f3:9f:1d:86:81:d5:ce:d2:92:88:5b:92:ea:
                    d1:9e:9f:56:f4:d5:3f:27:97:a2:e5:cc:7d:ba:5f:
                    c5:d9:cd:47:0f:ac:a1:7c:93:e6:eb:85:c8:57:d3:
                    41:56:66:a1:9d:37:95:14:91:cd:a8:d4:c4:f5:30:
                    56:51:15:b7:53:6c:22:ed:74:75:b0:21:97:02:bb:
                    43:79:f7:51:ad:89:1a:9a:88:26:d7:ad:45:53:57:
                    24:88:78:6a:64:b1:12:4e:e2:ba:05:19:73:81:24:
                    72:5c:de:67:f6:34:d0:73:2e:03:94:b9:21:07:9f:
                    d3:24:17:13:48:2e:66:00:f0:06:ab:9c:c1:69:f5:
                    3a:9f:d8:01:47:83:8a:e8:fa:c1:59:25:1c:c9:12:
                    48:e2:48:9c:3c:ee:e1:d8:4f:26:20:ae:7c:3b:76:
                    89:6f:4e:1c:61:ad:e2:07:bb:08:e3:f6:21:9d:39:
                    e2:37:e6:84:7c:06:91:4b:0f:09:3c:02:45:0a:8f:
                    9c:82:ff:99:3e:2d:86:af:b5:89:91:ec:9a:9a:f4:
                    fe:6f:5a:a8:ee:0b:f4:97:32:1d:e4:3d:83:e5:d3:
                    f8:2e:93:5b:1c:9f:fe:97:3f:6c:f8:34:b9:45:c6:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:04:19:AD:4C:5D:CC:F8:E9:7A:7C:3C:3F:D3:23:11:2B:09:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2f854c-73ca-4a40-9c91-9bb2e3bc8aad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2f854c-73ca-4a40-9c91-9bb2e3bc8aad/1/0oMEGa1MXcz46Xp8PD_TIxErCaU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48272

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:c3:90:8a:4f:6e:b8:db:01:83:e9:7d:26:9e:22:72:62:
         fb:69:81:28:ea:26:5d:f9:8b:00:0a:c7:b7:14:d8:27:e9:7b:
         f2:80:c9:c3:80:ff:3f:c5:e8:3a:6e:f0:a9:6a:15:aa:15:91:
         b7:78:d2:e6:a9:a5:4d:88:25:76:4d:e3:c3:4e:52:8b:3a:e5:
         03:11:d7:15:07:62:ed:ab:19:19:31:7a:23:ad:01:72:92:8d:
         22:9d:b5:7e:7f:9c:85:ea:71:73:5b:88:d0:74:f1:40:d1:9d:
         0f:91:5e:8c:2e:f7:27:eb:d1:75:0f:17:76:70:45:eb:0a:04:
         01:9e:99:39:8f:22:46:bd:6c:02:a7:12:6f:b1:c1:18:3d:c1:
         e2:a4:0d:69:ab:13:4e:b1:b3:0e:0b:02:73:1b:5d:90:5b:9f:
         48:88:c9:b9:04:40:e3:4e:da:b9:ad:a1:0f:06:20:0c:63:6d:
         3e:08:8d:8d:2e:40:7a:c7:21:af:e2:13:91:73:5e:50:ab:66:
         e3:eb:fa:ce:90:79:4b:d4:33:57:95:08:d4:d3:ad:cd:18:75:
         71:34:9b:59:99:c0:ec:d3:48:82:74:7f:cd:05:ed:9a:42:a2:
         42:0c:b9:83:55:e3:7d:6c:78:6d:54:60:f3:29:44:5a:45:af:
         f5:6b:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----