Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ivHULBcdDDd1dvmvaIS0DSucDM.cer
File:                     1-ivHULBcdDDd1dvmvaIS0DSucDM.cer (raw, json)
Hash identifier:          oNnxfML0+IFDr7ENHQPC9UdCzpPVej39T6+wEN+xzWQ=
Subject key identifier:   FA:2B:C7:50:B0:5C:74:30:DD:D5:DB:E6:BD:A2:12:D0:34:AE:70:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81CC823F9A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/591a76-a45e-4aca-b53b-e711f3c4bf14/1/1-ivHULBcdDDd1dvmvaIS0DSucDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/591a76-a45e-4aca-b53b-e711f3c4bf14/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:41:35 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.158.20.0/22
                          IP: 2a0f:7880::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557481869210 (0x81cc823f9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:41:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fa2bc750b05c7430ddd5dbe6bda212d034ae7033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:8a:a1:8c:38:89:71:45:7d:b9:5a:23:55:
                    37:0f:a8:82:ed:4b:84:df:02:47:63:b7:51:b3:a0:
                    d8:d4:e5:f8:30:70:eb:61:dd:cc:5d:ce:81:c3:0b:
                    f0:26:08:ee:58:59:9e:c1:7c:b7:08:77:99:db:6e:
                    d6:1b:28:22:a0:58:a6:c8:26:3f:f7:8a:1b:84:8b:
                    03:ac:ac:bc:85:12:f2:38:93:e4:cd:c6:1b:81:2b:
                    c9:7f:7b:22:47:fe:a8:7f:35:95:be:be:2a:6b:68:
                    ed:28:e1:b4:01:9f:99:7f:01:71:bc:d0:3d:a0:74:
                    28:82:ef:e0:be:1b:a6:a4:5a:24:f4:35:72:eb:31:
                    af:a3:19:ee:4d:6c:db:ee:60:f6:8a:9b:f5:2d:71:
                    1d:01:f0:68:cb:9f:59:7f:9e:df:e3:a3:14:06:db:
                    aa:50:54:f1:98:08:95:8e:6f:02:19:bd:97:1a:f6:
                    30:51:70:b6:9a:11:36:8c:41:69:c6:c4:b5:90:66:
                    88:4f:79:d1:e2:8c:c6:20:3f:d8:48:09:9f:46:46:
                    05:a8:7d:6e:07:de:26:75:31:f3:e6:c2:0b:22:51:
                    fe:a4:f3:42:9e:3a:89:50:88:5f:66:81:f0:48:1c:
                    d8:b7:5a:b2:f5:4f:cc:8e:7a:55:5f:ce:42:e5:34:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:C7:50:B0:5C:74:30:DD:D5:DB:E6:BD:A2:12:D0:34:AE:70:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/591a76-a45e-4aca-b53b-e711f3c4bf14/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/591a76-a45e-4aca-b53b-e711f3c4bf14/1/1-ivHULBcdDDd1dvmvaIS0DSucDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.20.0/22
                IPv6:
                  2a0f:7880::/29

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:6a:58:af:6b:b4:36:fe:72:07:0a:e2:2b:4b:3b:e2:c4:
         07:b6:ec:5e:9b:98:22:5c:e0:ec:bf:87:9c:28:47:91:2e:29:
         2c:ee:8e:88:dd:09:79:94:73:35:c3:72:d8:e8:44:f9:6d:10:
         2d:60:c6:a1:b1:84:72:a1:88:d1:85:5b:43:b2:70:cd:e5:fe:
         f6:a6:e6:9c:38:42:58:bf:41:b9:15:ad:97:13:fe:5d:a4:da:
         14:34:c0:04:34:61:9f:15:ee:4c:84:32:56:63:72:54:2b:8b:
         63:5d:db:21:c7:27:78:49:5b:2b:af:2f:bb:f0:5b:f3:10:4d:
         11:c3:67:31:b5:ce:76:1c:78:bf:46:7c:e8:d4:4b:8a:09:99:
         46:72:dd:fb:5a:57:57:8c:63:ec:5a:e5:aa:80:08:35:5b:a3:
         57:58:02:0d:ab:83:a7:f5:bb:13:2b:6e:82:6a:fc:87:c1:06:
         7b:e9:2e:22:25:b8:52:07:07:ee:41:23:0e:ab:53:ec:f5:41:
         c5:4b:93:f8:05:1a:9c:61:98:1a:51:98:87:38:00:e9:91:c1:
         d5:bb:9b:17:32:14:75:0d:9d:67:7e:05:4e:ae:a6:74:db:0b:
         a5:f4:24:18:0e:8b:e2:fd:36:07:91:b2:37:27:d5:43:9f:20:
         b7:6c:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----