Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1g7R9fhr2AfqhNHZedntAU8xRCI.cer
File:                     1g7R9fhr2AfqhNHZedntAU8xRCI.cer (raw, json)
Hash identifier:          fce0QGIT8+6/BhcFMzbC9WKPIgppzZDuG9zBELxjNz0=
Subject key identifier:   D6:0E:D1:F5:F8:6B:D8:07:EA:84:D1:D9:79:D9:ED:01:4F:31:44:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       776F7136F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4a/a57a9d-7c59-43d3-abc4-78b61a4c6a26/1/1g7R9fhr2AfqhNHZedntAU8xRCI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4a/a57a9d-7c59-43d3-abc4-78b61a4c6a26/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:50:25 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 39929
                          IP: 195.234.49.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512970798834 (0x776f7136f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:50:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d60ed1f5f86bd807ea84d1d979d9ed014f314422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:28:4a:9c:2b:69:29:55:1b:30:e4:f3:87:
                    b7:60:69:16:a3:30:ab:51:38:7c:d7:f7:61:ac:86:
                    ee:30:24:16:9d:22:b2:33:41:f7:a0:51:fc:5a:35:
                    3b:89:c2:7a:a1:71:84:65:24:84:47:d2:66:0f:ae:
                    e0:85:3c:c3:01:69:c0:eb:9a:bb:f3:47:7a:93:cf:
                    e4:0b:56:a2:f2:7b:eb:56:9d:50:34:e6:15:42:ff:
                    41:8c:6d:4f:7a:ad:e3:f4:f6:7e:63:be:09:34:13:
                    2a:a2:75:60:e5:b8:10:8f:0b:92:94:ce:7c:91:35:
                    c1:92:f8:8f:2e:07:4d:64:93:30:f8:bf:f6:70:90:
                    01:cc:ba:7b:a9:11:92:9a:e6:e8:94:36:8e:0a:37:
                    44:5f:46:7a:8a:20:af:c9:4f:87:89:24:15:74:1f:
                    d4:5c:88:74:93:bd:e5:a2:d5:a1:dc:3d:09:8b:52:
                    37:9f:da:4e:15:f8:4e:48:28:6d:ef:14:f3:a5:eb:
                    75:6c:36:03:97:ce:db:7f:7e:0e:82:55:f9:bb:f9:
                    8b:de:dc:35:7e:9a:20:e3:4a:92:62:5c:59:05:10:
                    c1:48:79:ee:a1:b1:46:5d:5d:52:fa:d8:81:82:27:
                    12:dd:59:8c:ae:a5:8b:67:71:31:77:70:4a:d4:52:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:D1:F5:F8:6B:D8:07:EA:84:D1:D9:79:D9:ED:01:4F:31:44:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a57a9d-7c59-43d3-abc4-78b61a4c6a26/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a57a9d-7c59-43d3-abc4-78b61a4c6a26/1/1g7R9fhr2AfqhNHZedntAU8xRCI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.49.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39929

    Signature Algorithm: sha256WithRSAEncryption
         64:70:b9:80:26:bb:86:17:2d:e5:16:8d:b2:6d:08:ad:82:58:
         5b:00:db:c6:51:4b:94:51:c1:da:97:10:69:f2:e3:7c:51:98:
         3c:56:ec:b0:b3:41:41:25:9f:f1:4b:06:07:f6:6a:6b:23:2b:
         43:44:1d:57:cb:65:2c:1b:e5:c4:0b:66:6d:a6:8b:fc:54:13:
         0f:70:ba:b0:e5:8f:c2:e3:18:3d:dd:57:d4:ce:ab:96:42:4e:
         e4:a6:46:e6:4d:cb:7d:81:a6:cb:39:34:ab:3e:a7:0b:55:68:
         02:18:69:1c:6b:01:f2:ec:82:69:82:ee:4a:eb:f7:3e:64:ac:
         67:46:39:41:67:cf:9e:69:37:8f:89:d8:47:66:51:82:b0:f8:
         2e:76:c4:d9:48:f8:79:68:98:63:53:0b:bb:c5:71:1a:aa:41:
         0c:06:c0:3d:72:42:a9:bf:5d:88:c8:53:ab:50:68:34:79:19:
         68:7f:9b:40:fa:0e:d0:63:3c:e5:cb:20:f9:f2:9e:f7:98:a1:
         d6:18:83:c2:3c:3f:d7:79:a0:8f:c6:f9:d9:1e:0e:63:ad:87:
         68:b4:53:9b:40:fb:ef:72:b7:64:2c:c2:6d:d0:a4:5f:cd:e1:
         bd:09:c9:01:e9:c4:7c:cc:18:c3:b1:cf:f6:e0:22:d7:b8:1d:
         59:63:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----