Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-WqBpFtbVI6CV3SGTvyNCbPOWlA.cer
File:                     1-WqBpFtbVI6CV3SGTvyNCbPOWlA.cer (raw, json)
Hash identifier:          GAApa5And2G+aYFry/FYwt7pZ4AnI8AaVG2ZrO+Swpc=
Subject key identifier:   F9:6A:81:A4:5B:5B:54:8E:82:57:74:86:4E:FC:8D:09:B3:CE:5A:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       84D3D757D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/76de46-dfca-438c-acba-b62eae5dec91/1/1-WqBpFtbVI6CV3SGTvyNCbPOWlA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/76de46-dfca-438c-acba-b62eae5dec91/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 08:02:06 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 47440
                          IP: 31.10.6.0/23
                          IP: 93.174.48.0/21
                          IP: 185.31.132.0/22
                          IP: 2a04:4a00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570489788375 (0x84d3d757d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:02:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f96a81a45b5b548e825774864efc8d09b3ce5a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:a3:1e:07:23:fd:02:39:28:dc:d1:3a:69:
                    55:a4:e0:73:22:76:02:e9:a3:54:12:2a:f9:ac:e5:
                    d9:3a:b8:10:8a:be:ab:40:8b:0d:43:cf:84:1f:2f:
                    22:ca:e6:b0:69:ab:b0:ec:06:dd:5d:63:32:32:a9:
                    e3:d2:ed:1d:ef:55:d6:95:19:24:cf:d5:7c:f2:9f:
                    c9:4a:0c:58:9d:57:fe:6f:34:33:c7:9c:be:6f:33:
                    17:42:4b:fa:d8:a4:83:3e:e4:bf:d2:1d:98:94:21:
                    cc:71:ac:03:b1:28:c1:9c:a3:cc:5c:e4:52:4e:72:
                    ca:28:44:6a:76:90:2b:56:1a:c9:7e:b6:ea:32:a9:
                    1c:56:56:20:0e:b0:26:79:c7:6f:d6:01:1e:05:8f:
                    10:46:12:31:33:88:bc:a6:08:2b:dc:b4:01:4d:64:
                    bf:bf:f3:6f:d7:4f:99:98:ea:ee:0b:f5:7d:ae:49:
                    ba:a4:77:1c:66:e9:34:4c:da:62:84:aa:dc:21:3a:
                    2c:90:d5:fa:5b:72:b5:6f:75:88:5f:43:6c:ca:41:
                    98:02:47:65:df:64:c3:a1:2e:3a:1a:f9:23:b5:81:
                    6a:b2:0e:c6:fc:75:e7:59:db:2b:69:43:06:29:37:
                    27:49:ec:d9:d7:1a:cd:d2:69:6a:6d:29:56:d9:2e:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:81:A4:5B:5B:54:8E:82:57:74:86:4E:FC:8D:09:B3:CE:5A:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76de46-dfca-438c-acba-b62eae5dec91/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76de46-dfca-438c-acba-b62eae5dec91/1/1-WqBpFtbVI6CV3SGTvyNCbPOWlA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.10.6.0/23
                  93.174.48.0/21
                  185.31.132.0/22
                IPv6:
                  2a04:4a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47440

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:01:00:28:4b:bc:da:43:c7:f8:0f:81:80:a1:c9:1e:4c:
         04:2b:6e:ce:2b:68:63:34:5d:40:ee:0f:80:ea:22:58:a2:33:
         4c:b3:60:63:1f:64:c1:0b:d7:49:28:07:58:0b:e5:57:e5:dc:
         92:71:4b:fa:12:55:d2:c1:46:13:3a:9d:70:f3:2a:94:05:3c:
         8a:1e:9a:05:20:db:fa:4e:28:1f:f6:ae:bb:e0:bc:87:b6:69:
         88:43:5e:95:ee:0a:21:02:c9:7e:5c:bc:b8:1c:2a:43:93:a3:
         49:1b:d3:17:f8:e2:55:64:c1:05:95:f5:45:d4:b0:0e:1e:2a:
         70:71:b2:f9:53:fc:66:d6:b7:84:6f:45:93:b5:f9:04:d2:72:
         72:86:71:27:38:9e:b4:d0:bb:cc:eb:50:ae:33:1e:5b:ab:f3:
         c8:c1:ba:49:9d:6a:df:03:ec:6c:c0:de:28:25:ac:5e:00:f6:
         71:42:5f:73:55:83:c0:6d:6c:fc:5a:fb:5a:86:0c:bb:21:2b:
         5b:e9:d6:1c:45:00:f3:fe:2f:7c:7b:88:25:6b:a5:7a:71:46:
         d7:83:af:d0:ad:da:9c:b9:09:e1:2a:4c:7b:be:29:44:9c:3c:
         28:29:e6:53:58:c4:78:e6:c6:00:3b:fa:c8:32:52:41:f8:17:
         8e:8a:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----