Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0skTINZi9ah3ZHj85GkT1FtfCgs.cer
File:                     0skTINZi9ah3ZHj85GkT1FtfCgs.cer (raw, json)
Hash identifier:          y9jWCpyQndhHr6iRSOP+Y3cbTtotfuWmhS9l1MFuPnA=
Subject key identifier:   D2:C9:13:20:D6:62:F5:A8:77:64:78:FC:E4:69:13:D4:5B:5F:0A:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81730C3520
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/cecb3c-b16a-4186-8196-f9ce31ed9c31/1/0skTINZi9ah3ZHj85GkT1FtfCgs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/cecb3c-b16a-4186-8196-f9ce31ed9c31/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:26:17 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 212.102.105.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555980961056 (0x81730c3520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:26:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d2c91320d662f5a8776478fce46913d45b5f0a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:9b:af:e0:56:f8:54:af:ce:66:a7:6e:a6:
                    0a:6c:68:3d:42:36:e4:3a:27:da:40:a3:37:e7:d6:
                    e3:7b:a9:f5:e3:5a:cb:d7:8b:8e:b2:a5:4e:c7:92:
                    f9:b7:16:b7:29:ba:cf:5e:23:82:06:58:ad:64:a5:
                    ba:95:b3:ab:2b:38:8b:06:c4:b8:6c:7f:f0:1a:5d:
                    c1:5d:83:88:ec:63:ee:c5:45:f3:d9:42:fc:2b:f7:
                    53:bc:88:ac:b5:dd:b7:bd:99:c0:57:40:b6:23:b0:
                    47:0a:e7:f6:d2:97:67:a5:68:71:c5:6b:b2:79:aa:
                    81:2d:41:1b:4c:ce:fe:8c:d0:05:4f:e3:a7:71:c4:
                    15:8f:be:2e:5c:0e:61:56:d1:e1:36:0f:5e:ac:7a:
                    1c:9a:37:6c:c4:22:d0:4b:de:2f:7a:7f:f3:82:2a:
                    e5:5d:d9:f3:66:86:22:a1:c9:ae:be:eb:7b:45:90:
                    47:b8:4f:4b:0d:e9:a3:5b:c5:bc:eb:59:40:09:bf:
                    93:2d:d7:e6:ed:37:45:f2:ab:37:c6:79:34:72:3e:
                    c0:6e:1b:fe:37:67:48:ef:50:eb:7c:8c:bb:ab:4f:
                    39:2b:cf:db:23:d2:b0:0c:94:0e:f2:cd:7b:e0:3f:
                    67:6a:d3:ce:dc:6b:20:f4:e1:25:77:94:86:4b:50:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:13:20:D6:62:F5:A8:77:64:78:FC:E4:69:13:D4:5B:5F:0A:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cecb3c-b16a-4186-8196-f9ce31ed9c31/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cecb3c-b16a-4186-8196-f9ce31ed9c31/1/0skTINZi9ah3ZHj85GkT1FtfCgs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.102.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:49:00:85:1d:93:de:13:77:93:f6:60:ce:d8:4e:9f:0c:27:
         32:6d:92:8e:73:1b:2d:9e:7a:43:c2:56:16:a9:7f:ac:81:75:
         85:b2:de:55:7f:e7:90:98:5e:63:c1:6f:96:4f:75:7a:d3:f5:
         07:4e:27:61:85:b8:db:62:1c:99:de:3f:76:0d:3a:c8:c4:19:
         ac:f9:86:b5:ee:ab:0b:9b:78:17:c2:1d:e1:d6:c3:d2:92:27:
         53:40:c6:9d:32:6b:62:d9:28:2c:95:4f:f7:ef:da:cf:6e:4f:
         75:d7:47:95:2f:80:ad:f3:7b:43:56:fc:77:40:e3:a7:f4:96:
         08:ac:e9:2d:8b:37:ec:24:65:88:d3:ca:d2:74:f0:2a:f8:6e:
         e6:62:45:4d:24:a2:12:46:e2:c4:74:54:a8:d8:5f:e7:48:e2:
         9c:08:ac:6d:d7:67:9d:12:92:ab:1e:fa:2a:35:43:de:da:04:
         fc:4c:f0:d5:64:b3:69:48:fa:46:1f:c4:9e:ec:16:8f:f8:a1:
         70:f2:8a:a4:b1:69:f1:39:c1:13:18:ed:ce:d3:5c:5c:d0:a4:
         cc:47:0b:20:15:40:d1:dd:ed:1a:fd:dc:d8:9d:b4:d2:bb:dc:
         42:79:c5:73:b0:76:34:96:80:d4:ed:d2:66:e7:07:ef:e1:e3:
         f0:34:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----