Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17yI2EZaDWzpz1mlN1CIQKpGHto.cer
File:                     17yI2EZaDWzpz1mlN1CIQKpGHto.cer (raw, json)
Hash identifier:          nLuSLebXredwdT97gRdE7Qlg6l5D0RhMo4ecg2v0DT4=
Subject key identifier:   D7:BC:88:D8:46:5A:0D:6C:E9:CF:59:A5:37:50:88:40:AA:46:1E:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5DCFB5A19B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/81cbbe-5092-4d1f-a35a-34446423ba9f/1/17yI2EZaDWzpz1mlN1CIQKpGHto.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/81cbbe-5092-4d1f-a35a-34446423ba9f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:06:13 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 109.236.48.0/22
                          IP: 2a0d:49c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402916745627 (0x5dcfb5a19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:06:13 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d7bc88d8465a0d6ce9cf59a537508840aa461eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:e0:67:ee:4e:08:24:b9:52:3a:4d:82:1f:
                    7b:7c:31:d4:6c:75:a9:ae:b5:4f:bb:b5:fa:ee:15:
                    a1:28:8a:4d:a6:34:ea:9e:ce:8d:f4:8a:0f:4f:d3:
                    4f:85:59:98:d4:18:c9:93:26:39:d9:0e:84:93:66:
                    66:71:09:3c:c7:70:7f:13:cc:c9:da:fe:c5:d7:fb:
                    c5:47:32:73:dd:fc:44:e0:8f:50:87:63:0f:4f:e5:
                    85:76:1d:fb:b0:f8:0a:56:dd:da:a1:8f:01:87:57:
                    5a:6f:13:fd:35:4f:90:e8:58:ab:88:dd:78:63:b0:
                    ef:1d:e1:f3:ed:8f:0f:3e:38:7a:a3:9e:f3:6f:b6:
                    66:24:4b:5d:35:98:ae:f2:7d:ed:a2:22:a4:ae:f2:
                    58:95:72:7e:ac:61:cc:ba:44:7c:e7:63:24:19:46:
                    ff:9b:04:cb:54:1d:61:11:78:ae:c7:5e:24:0f:95:
                    63:aa:f4:85:5c:80:ea:58:db:28:32:5b:46:0a:56:
                    b2:1c:c6:21:bc:89:2e:0c:f5:64:d2:af:ce:63:7f:
                    7d:96:95:c6:b3:fd:32:c2:1d:34:69:b4:7b:04:9c:
                    f5:7e:d9:b1:26:f9:fe:47:41:2d:f4:c0:ac:7c:48:
                    0e:4e:8a:77:a0:83:27:d0:2c:1c:98:e1:7b:81:6b:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:88:D8:46:5A:0D:6C:E9:CF:59:A5:37:50:88:40:AA:46:1E:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/81cbbe-5092-4d1f-a35a-34446423ba9f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/81cbbe-5092-4d1f-a35a-34446423ba9f/1/17yI2EZaDWzpz1mlN1CIQKpGHto.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.48.0/22
                IPv6:
                  2a0d:49c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:db:a7:da:f4:ca:74:b0:d7:ef:ef:49:4a:a2:1a:92:a8:7c:
         a5:ee:97:1f:2d:3e:ba:dc:2c:30:f0:55:2a:b3:ed:9f:3d:2e:
         3c:80:f5:73:b2:a0:63:48:81:14:c3:c0:7d:6c:e8:07:24:13:
         1d:0e:58:9f:34:3c:d5:6f:10:f1:ec:b1:80:38:10:7e:fb:56:
         3d:2c:ca:5f:27:44:be:49:56:bc:d6:56:60:0e:60:32:ab:6c:
         c5:d1:44:b5:a9:e8:ce:0a:36:e0:c6:5c:ff:58:41:94:61:cd:
         f6:df:6f:03:24:07:2e:c4:5b:13:e8:d3:eb:83:2f:ec:00:10:
         29:d3:cf:9d:43:73:49:01:b0:aa:63:b7:10:9d:da:41:11:1b:
         5d:26:25:96:46:87:5f:b3:5a:ee:d9:65:f2:59:9f:d8:40:3b:
         1f:1f:19:78:ab:70:a9:c7:33:87:ab:04:22:5f:cc:fe:e5:d0:
         ff:87:73:97:f6:e3:34:8d:dc:d1:3d:13:d3:31:64:c6:7d:c6:
         d4:6a:b9:3e:a2:6d:72:84:3c:c4:be:e8:5b:b9:f9:71:48:86:
         8a:8a:16:2b:49:e4:5a:cb:d5:43:36:df:07:7e:6c:57:7d:03:
         85:5d:5a:aa:68:cb:db:71:fd:1d:c0:34:9d:5f:30:f3:af:f2:
         35:ee:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----