Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mAi4CVZWXM2VFY5znGbgcMN1K8.cer
File:                     1-mAi4CVZWXM2VFY5znGbgcMN1K8.cer (raw, json)
Hash identifier:          kP/AoNgw5dTyqPynVFBFGQun0VHrmXa2erl11O4zEWg=
Subject key identifier:   FA:60:22:E0:25:59:59:73:36:54:56:39:CE:71:9B:81:C3:0D:D4:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       775C21D889
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/a333c1-32df-47f7-b420-ed7ec2d7e62a/1/1-mAi4CVZWXM2VFY5znGbgcMN1K8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/a333c1-32df-47f7-b420-ed7ec2d7e62a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:48:58 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 56396
                          AS: 197108
                          IP: 46.228.160.0/20
                          IP: 2001:678:cb4::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512646830217 (0x775c21d889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:48:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=fa6022e02559597336545639ce719b81c30dd4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:48:bd:5f:41:47:da:70:07:9d:8a:bd:87:
                    9a:7f:8d:54:b8:5b:b4:6b:68:52:2b:77:85:8b:5b:
                    69:af:e2:69:85:14:14:c1:f8:82:66:0b:3f:09:69:
                    34:dd:c4:17:0b:d9:d9:90:d6:66:eb:a1:f1:2f:27:
                    09:24:c0:6e:e4:20:fc:08:bc:d8:43:44:ae:dc:c0:
                    9a:89:b3:69:13:97:4b:01:02:27:41:48:b2:0f:80:
                    92:f6:63:23:cc:6f:c9:96:d8:8e:06:9d:83:e4:c3:
                    4d:2a:42:3e:98:82:90:06:6b:6d:9c:95:13:18:7c:
                    94:95:9d:ea:7f:98:37:53:9b:a2:28:a5:ad:0f:d2:
                    d2:62:1b:2a:4a:1d:2b:49:27:24:4c:50:08:40:47:
                    b9:06:52:8f:1e:6d:d9:e7:07:90:a2:26:d0:8a:02:
                    84:8a:ca:de:9f:5d:22:6f:15:b9:f6:d2:58:ba:b6:
                    83:be:69:4d:99:26:a5:27:aa:24:80:04:2d:cc:b9:
                    b4:cf:b6:11:6a:90:9f:44:0c:b9:72:9c:bf:b3:c0:
                    9c:b1:21:9d:6f:b8:23:2e:4c:e6:f4:00:e8:2e:a4:
                    af:86:7f:15:ee:04:7e:e6:da:55:87:0f:cc:ec:e8:
                    dd:c0:ac:fe:ee:b1:5f:a8:68:7b:86:48:ae:5c:65:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:22:E0:25:59:59:73:36:54:56:39:CE:71:9B:81:C3:0D:D4:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a333c1-32df-47f7-b420-ed7ec2d7e62a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a333c1-32df-47f7-b420-ed7ec2d7e62a/1/1-mAi4CVZWXM2VFY5znGbgcMN1K8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.228.160.0/20
                IPv6:
                  2001:678:cb4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56396
                  197108

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:ee:91:af:29:f5:91:c8:70:8c:36:4f:41:1e:54:0f:2e:
         26:3f:32:f9:37:0d:3d:38:7e:4f:4a:f1:03:be:5e:fe:89:c2:
         3a:5f:3c:14:55:6b:05:76:35:b2:39:dc:f4:42:74:50:7e:3f:
         28:71:f8:48:a9:be:69:68:59:28:79:b2:37:c7:43:3b:02:83:
         85:97:38:e0:15:d2:53:99:bf:6e:0c:8e:eb:1b:28:dd:d1:9a:
         3f:6b:b9:c5:bf:48:c9:3b:cd:b0:68:fb:e0:fe:f1:89:f1:e4:
         3f:62:38:5b:c5:25:fe:c3:3c:f9:37:ee:75:86:47:0f:e6:aa:
         ae:e1:a1:aa:81:a1:50:2b:23:45:92:c5:d7:82:85:f0:e5:ba:
         1b:74:37:90:f7:8e:b3:f5:fb:41:d3:17:5a:6d:38:b9:73:a5:
         8b:2b:e6:3c:9a:6a:80:a9:8b:c9:6a:07:f2:78:7d:6f:ad:0c:
         29:fe:fb:50:ae:dc:9f:ec:1e:5e:0c:c7:66:51:02:d6:4c:01:
         96:50:86:46:a3:dd:eb:08:64:0b:c1:2e:90:44:b3:7a:38:a8:
         30:89:de:b5:71:73:f3:82:08:41:f9:71:78:be:c7:af:56:8d:
         07:72:76:53:d6:88:45:39:7b:d7:4d:31:6e:c8:51:4f:26:4f:
         23:ec:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----