Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-8IsFlsVwFEZBOyfTCBXCynSzDo.cer
File:                     1-8IsFlsVwFEZBOyfTCBXCynSzDo.cer (raw, json)
Hash identifier:          kkDjqbwiL/s8CaL7PjDYUnwka2NCs+6i6/NF9hUKxzI=
Subject key identifier:   FB:C2:2C:16:5B:15:C0:51:19:04:EC:9F:4C:20:57:0B:29:D2:CC:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       73634470DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/73/FBC22C165B15C0511904EC9F4C20570B29D2CC3A.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/73/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Tue 01 Dec 2020 20:51:22 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 88.218.164.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495586668764 (0x73634470dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  1 20:51:22 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=fbc22c165b15c0511904ec9f4c20570b29d2cc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:90:2c:4a:37:61:fc:34:bb:ca:a9:2a:5c:
                    fc:be:c6:81:dc:43:68:26:17:01:14:ec:af:88:8c:
                    98:45:d0:5f:93:c3:0e:da:5b:4d:13:35:d0:1b:b9:
                    1c:ba:6c:1f:29:1f:6b:f4:61:ab:06:b5:e0:bc:08:
                    c2:1a:63:d1:fe:b6:5e:23:51:91:c5:a2:b3:76:b8:
                    54:da:99:a4:1f:33:53:9d:e6:c3:20:00:8f:17:8a:
                    df:ae:aa:dc:f8:0b:a3:d7:d1:66:a0:ff:44:88:17:
                    f1:30:76:26:c0:a5:30:b0:11:b0:76:77:3a:7f:e9:
                    6a:5a:f4:7e:d5:14:02:6e:27:42:7d:0e:22:19:6b:
                    72:00:0a:0e:a5:5e:13:b1:0a:4d:1f:60:a4:a9:da:
                    7d:08:a5:08:2a:1d:ae:a4:be:6a:13:9f:b1:14:a3:
                    b5:d2:ee:2a:27:97:f9:e9:12:f6:4d:cb:48:dc:46:
                    52:74:4b:c6:c4:45:21:6e:da:aa:3c:1d:71:aa:09:
                    c9:54:89:6c:ed:0c:e0:cc:18:76:0f:9c:45:6e:64:
                    50:50:1f:92:ba:29:28:8c:21:8c:e4:d0:e3:53:68:
                    58:5d:98:d6:ce:6b:b1:c1:cf:88:74:09:b5:76:e0:
                    b7:44:ab:b8:b3:eb:0d:4d:f8:f7:65:68:36:b8:79:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C2:2C:16:5B:15:C0:51:19:04:EC:9F:4C:20:57:0B:29:D2:CC:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/73/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/73/FBC22C165B15C0511904EC9F4C20570B29D2CC3A.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:ba:8b:f0:07:4e:3c:00:ee:0f:5b:5e:76:3c:7d:f8:fb:
         b7:19:31:6a:f1:68:5c:c0:ee:bf:f9:83:9b:87:64:d0:6e:1a:
         97:86:49:38:b5:3d:32:3e:28:52:b0:c2:d1:56:61:bb:51:f4:
         dc:2b:18:06:f9:15:33:cf:71:e9:e2:4f:bb:df:ac:a3:ad:a3:
         ed:cc:18:d7:1c:f1:84:1d:06:41:11:15:cd:87:e8:34:8d:3a:
         59:78:ac:76:f3:7d:5b:31:7f:ec:5f:59:37:23:93:d5:0a:b3:
         fd:77:53:24:cf:d6:20:f8:9a:7f:00:93:6a:db:fe:71:b6:12:
         f8:4f:f9:be:3e:42:68:63:ce:a4:da:cd:fe:3a:de:cb:f3:ff:
         88:e0:a5:56:80:fc:b9:7b:aa:af:e7:aa:22:cf:ef:d3:68:84:
         3c:1c:dc:be:12:43:1f:69:39:ee:47:39:91:52:7c:6d:6d:36:
         94:8c:08:95:ba:88:7a:8e:57:2d:27:71:79:45:61:93:6b:6f:
         5b:2a:9a:23:db:04:1d:f2:7a:0e:3a:a9:50:86:e3:7c:12:47:
         8c:ad:18:f5:9e:ed:84:7e:a7:89:56:db:19:d2:4c:ac:bd:7a:
         0b:76:8d:02:d1:2b:9a:49:09:16:5a:5e:6f:9b:f4:b5:65:12:
         35:dd:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----