Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-E1efB0gi9hoaQIeHMeI9uBy9Bo.cer
File:                     1-E1efB0gi9hoaQIeHMeI9uBy9Bo.cer (raw, json)
Hash identifier:          SbfCEoMOzkxeN4Cuu5X6iQgdGeOaEsA2HuyKv85iNJU=
Subject key identifier:   F8:4D:5E:7C:1D:20:8B:D8:68:69:02:1E:1C:C7:88:F6:E0:72:F4:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75F0BA8F07
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/6b4f4c-c511-413f-aae2-cc25672edd02/1/1-E1efB0gi9hoaQIeHMeI9uBy9Bo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/6b4f4c-c511-413f-aae2-cc25672edd02/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:16:52 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 193.58.168.0/22
                          IP: 2a0e:9180::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506549931783 (0x75f0ba8f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:16:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f84d5e7c1d208bd86869021e1cc788f6e072f41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:22:1f:db:1b:24:18:d4:bb:60:ef:7b:d0:
                    76:9c:6b:85:4c:a2:f1:f1:ae:74:af:3a:ad:9c:db:
                    91:74:7d:97:28:15:b0:0e:e0:97:98:34:12:55:bc:
                    07:07:ba:be:43:f3:cf:cf:c5:f4:ec:a1:d4:81:86:
                    22:d6:23:2e:23:4a:53:d0:b0:15:0d:52:8f:57:d6:
                    58:ef:bc:66:81:7d:56:0f:7e:9c:2f:aa:6f:ac:7e:
                    80:db:c3:8c:e1:83:87:ef:20:71:99:b6:fd:08:54:
                    16:e5:79:57:f8:39:67:ec:1e:29:d7:69:44:94:1d:
                    b2:b5:41:b0:03:9f:43:01:40:da:30:c0:58:d4:fa:
                    fc:4f:3d:a5:b6:07:c1:e1:b6:bc:1d:5f:3e:94:e0:
                    7f:2b:df:24:cf:87:44:61:42:0d:2e:07:3c:fc:ef:
                    a2:a2:c6:e3:6a:49:1a:14:83:cb:bf:7c:73:9a:a2:
                    0e:72:b8:24:fb:09:7a:de:da:c6:08:4c:6a:a5:e2:
                    84:7a:34:33:61:9c:4c:3e:46:1b:bf:8e:fc:f8:7c:
                    06:04:8d:94:b1:a4:53:56:4c:5e:b1:0f:48:03:a3:
                    4a:e6:3f:a8:03:0a:da:ee:3e:41:ae:c4:93:56:ed:
                    00:ce:4b:7e:c4:5c:af:ff:f0:53:8d:69:e3:3f:66:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:5E:7C:1D:20:8B:D8:68:69:02:1E:1C:C7:88:F6:E0:72:F4:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6b4f4c-c511-413f-aae2-cc25672edd02/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6b4f4c-c511-413f-aae2-cc25672edd02/1/1-E1efB0gi9hoaQIeHMeI9uBy9Bo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.168.0/22
                IPv6:
                  2a0e:9180::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:51:97:89:f5:65:db:39:f8:3e:39:d9:ee:7e:19:66:4a:
         41:bb:f0:6c:74:73:7e:05:84:3d:b0:86:23:3c:9c:f8:98:cb:
         f5:6b:7c:94:b8:0c:bd:91:96:b9:65:94:73:cf:be:7c:fd:48:
         84:2f:c4:72:0d:dc:a8:c0:2e:a5:db:bb:ee:f7:40:98:68:aa:
         af:6d:3e:32:42:ba:e3:6c:bc:e3:eb:bf:4b:11:f2:59:da:a6:
         d1:a1:ff:2b:f4:81:ef:b3:b0:f7:a6:05:21:7e:5e:1e:d9:a0:
         ca:c6:c8:f0:7a:f7:80:67:7e:4b:60:04:dd:cd:4b:b6:22:f7:
         1a:bc:55:9f:b9:62:20:2c:eb:03:c8:6e:4e:5f:4c:6b:32:f7:
         8c:fe:24:e8:9b:5e:f0:76:f8:08:2b:bb:7f:6d:2b:a0:74:f3:
         fe:48:9a:39:a7:23:2b:be:43:98:26:bd:b8:91:6a:53:dd:bd:
         46:59:db:35:21:43:28:80:5f:ba:c5:d1:5b:7c:b6:16:50:7c:
         93:47:cf:f8:15:90:29:a9:93:c6:1a:77:81:0c:4d:8d:61:4e:
         e6:b5:4c:ac:68:11:4e:2d:dc:8a:65:c5:a0:cf:b1:de:3a:4d:
         1a:2f:93:de:60:89:f1:b3:00:54:bd:65:c5:06:53:6a:ba:1d:
         69:9c:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----