Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-SXAejxmC6IkCYfO2L6iHXS9TY0.cer
File:                     1-SXAejxmC6IkCYfO2L6iHXS9TY0.cer (raw, json)
Hash identifier:          +BQKNQ73JjN7N6pMepTH3KDpXczk2FX6qr4dTd0Ox0I=
Subject key identifier:   F9:25:C0:7A:3C:66:0B:A2:24:09:87:CE:D8:BE:A2:1D:74:BD:4D:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8158C2A037
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/d3362e-bf50-4664-8e2e-3cb2b7b40ae0/1/1-SXAejxmC6IkCYfO2L6iHXS9TY0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/d3362e-bf50-4664-8e2e-3cb2b7b40ae0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:22:23 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.15.128.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555539931191 (0x8158c2a037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:22:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f925c07a3c660ba2240987ced8bea21d74bd4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:fc:7d:e3:03:f9:63:75:bf:70:f7:5c:57:
                    b2:6d:1b:07:2e:e4:c3:36:28:b3:59:cc:07:5f:d1:
                    2e:79:09:c5:9c:6d:8c:fb:94:93:0c:b4:fe:a5:6f:
                    49:54:b7:fe:af:49:55:31:85:2d:df:1f:d9:da:ea:
                    48:8a:27:34:e6:9c:42:16:56:63:3d:53:92:db:ff:
                    75:55:4b:f1:a6:42:6a:bf:7b:b7:a4:6e:ae:72:c0:
                    85:9f:dc:d3:b1:82:40:6d:90:2d:d9:8a:ca:a3:6f:
                    67:b4:9b:28:2b:b9:3e:b4:0d:fe:e9:19:e1:35:57:
                    4a:89:76:60:f5:12:db:56:13:36:e9:9b:d0:33:ef:
                    09:a3:7a:c4:ca:ba:ec:b5:0c:38:a5:c6:f5:ba:09:
                    e3:5a:f2:14:21:9c:e3:5a:4f:ff:47:4c:92:0f:b8:
                    21:c5:b4:67:2e:b5:f5:1a:70:ca:13:0a:87:31:47:
                    98:26:8e:f3:90:91:a1:bc:b5:53:94:70:15:1a:c8:
                    64:9e:6f:02:79:92:54:37:4f:c1:ca:bf:99:f8:53:
                    c4:61:3c:d5:a7:4f:9f:37:b9:f3:2e:7f:44:48:28:
                    04:80:72:dc:95:bb:3e:25:7d:08:7f:0e:8f:6e:f9:
                    26:eb:af:7e:a9:27:11:2b:07:a3:70:bc:df:ad:c1:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:C0:7A:3C:66:0B:A2:24:09:87:CE:D8:BE:A2:1D:74:BD:4D:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d3362e-bf50-4664-8e2e-3cb2b7b40ae0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d3362e-bf50-4664-8e2e-3cb2b7b40ae0/1/1-SXAejxmC6IkCYfO2L6iHXS9TY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:0e:fc:30:76:a3:12:23:e0:c8:a9:b2:77:32:3e:d7:89:
         55:26:e8:16:bc:ce:82:43:07:99:4a:1a:fc:8b:1d:33:d8:00:
         34:da:f8:ed:9c:64:c7:43:e7:47:fb:85:69:53:15:40:51:d1:
         a0:ba:35:be:62:d6:6d:fa:26:2c:0e:76:dd:e6:83:96:13:a0:
         36:d9:15:ee:fb:83:0c:36:b0:72:7b:e2:ec:fb:c8:c5:3c:10:
         bf:35:9c:fc:9c:04:e7:f0:92:9c:a0:56:f2:b6:80:a7:ae:e6:
         70:90:28:01:e9:4e:4d:59:22:e5:64:76:67:eb:2e:15:12:ec:
         e4:e4:e0:04:74:f6:2e:ba:7a:e0:72:68:74:12:5e:95:6e:a3:
         ef:86:7f:7c:44:19:89:a3:88:a6:e2:e9:b3:54:ea:dc:ab:60:
         3e:a6:99:61:03:99:9b:4e:49:4f:74:65:76:68:44:63:d5:81:
         b9:00:2a:fe:ad:f8:b4:76:9f:6f:24:8a:26:35:0f:79:43:51:
         64:a0:09:c5:00:32:e6:03:8d:9f:00:00:d6:6a:93:3e:fd:0e:
         ea:55:c4:fe:da:85:89:3e:89:ec:83:c7:f4:c2:21:e9:13:44:
         c1:a7:9d:52:72:9a:e8:70:e6:bb:1f:06:5f:bb:7e:5a:ad:3c:
         c0:0b:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----