Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GcZHB81SdS8BCwsx7hXu6kE1Es.cer
File:                     1-GcZHB81SdS8BCwsx7hXu6kE1Es.cer (raw, json)
Hash identifier:          WT+1g9FPIhb71OyVPAMaMHxQEogAs6sd/LadSYs2zxQ=
Subject key identifier:   F8:67:19:1C:1F:35:49:D4:BC:04:2C:2C:C7:B8:57:BB:A9:04:D4:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7BC1246F74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/a7c97b-1c6f-4ed4-96d8-a17357a8f8ec/1/1-GcZHB81SdS8BCwsx7hXu6kE1Es.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/a7c97b-1c6f-4ed4-96d8-a17357a8f8ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:45:15 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 44409
                          IP: 185.237.176.0/22
                          IP: 194.113.166.0/23
                          IP: 194.113.174.0/23
                          IP: 2a0c:1b80::/29
                          IP: 2a0f:44c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531521367924 (0x7bc1246f74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:45:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f867191c1f3549d4bc042c2cc7b857bba904d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:2d:eb:46:d9:21:af:1c:e4:08:29:9f:16:
                    6c:42:72:b8:a0:73:e5:b4:07:a8:aa:1d:75:3f:5b:
                    3b:6f:8e:bd:ec:a8:33:a2:ab:48:6b:dc:7c:68:a5:
                    07:7c:0e:97:a3:11:04:8b:4a:1b:9b:5c:1f:e7:ec:
                    36:07:cb:bd:46:ed:64:08:be:93:58:2e:20:fc:6f:
                    51:01:70:b7:79:75:af:78:99:cf:bc:c1:60:da:8d:
                    98:19:1f:73:60:3a:89:a7:8d:f7:42:64:87:c0:55:
                    a8:c7:b5:10:ac:66:b2:83:bc:f7:80:d4:51:67:15:
                    7d:07:c7:5b:c3:e8:ce:6f:9b:72:48:ea:ae:88:c8:
                    84:3a:fc:7a:05:9b:4c:19:7c:0d:f4:78:8d:02:85:
                    a3:88:03:ec:1a:6c:e0:b3:30:ce:95:a5:72:6f:a0:
                    d1:0d:d4:06:6f:7b:bc:1f:79:8d:ba:4c:2d:1e:ca:
                    a3:7c:03:d3:2b:95:b4:a0:5b:2e:2e:d6:8a:11:d7:
                    de:39:30:a9:6b:3d:ce:e6:b0:be:e4:d8:87:33:31:
                    fb:d2:e8:5e:71:76:f4:b0:94:44:78:95:ba:69:93:
                    95:63:cb:9d:85:3c:61:ce:ed:87:95:5f:47:0b:f4:
                    30:fa:cd:05:d9:9e:3f:1f:ca:52:d6:55:62:6d:a5:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:67:19:1C:1F:35:49:D4:BC:04:2C:2C:C7:B8:57:BB:A9:04:D4:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7c97b-1c6f-4ed4-96d8-a17357a8f8ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7c97b-1c6f-4ed4-96d8-a17357a8f8ec/1/1-GcZHB81SdS8BCwsx7hXu6kE1Es.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.176.0/22
                  194.113.166.0/23
                  194.113.174.0/23
                IPv6:
                  2a0c:1b80::/29
                  2a0f:44c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44409

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:64:3c:54:68:d5:32:69:5b:a9:4a:eb:b4:66:45:9a:3b:
         cd:c1:68:9a:92:09:95:f9:bd:47:2a:2b:70:15:44:bf:3c:c9:
         e9:8e:4f:aa:14:10:9c:a7:30:c1:2f:ab:4a:8e:be:b5:d1:75:
         2f:c3:2d:83:bb:13:84:ea:65:11:ad:95:ec:b2:df:e2:1b:89:
         4d:f5:7e:41:08:fe:7e:95:07:83:18:c3:8c:40:0f:fe:3b:83:
         8d:c3:ca:7c:d5:3c:fe:44:d5:fc:86:de:52:0a:39:0a:0f:ff:
         7f:1e:36:49:b0:49:eb:03:69:ba:6a:ba:6d:c5:10:66:f6:4b:
         78:f4:a2:96:0b:1b:ae:a7:f2:19:53:10:ba:06:77:b3:c3:bf:
         83:f2:03:8b:9b:5d:6a:0b:74:df:25:cf:0a:56:2a:63:22:20:
         58:d9:53:d5:52:0a:3d:18:e4:37:8a:0d:e2:f0:b9:d5:77:78:
         a9:02:3c:ee:df:a5:5f:2a:d7:ea:01:97:d9:36:72:fc:4f:57:
         ba:ea:6a:c0:f3:75:c5:01:c2:8b:b5:5d:54:90:49:16:03:f2:
         04:d4:f9:0b:74:9d:1d:71:85:ae:25:55:38:20:91:99:75:72:
         20:73:88:b6:64:0d:f3:9a:9c:5a:8e:15:27:82:e3:5c:ba:70:
         11:87:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----