Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1kVFJXGG5dWCJyqrLyBps2ikeHM.cer
File:                     1kVFJXGG5dWCJyqrLyBps2ikeHM.cer (raw, json)
Hash identifier:          WqxNNd7KPpvkTfZtBibvNZTJ4FigkKmoF4dIL7yNwJU=
Subject key identifier:   D6:45:45:25:71:86:E5:D5:82:27:2A:AB:2F:20:69:B3:68:A4:78:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       787B1647F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/4f4755-cbea-4986-b277-78bcb85ed377/1/1kVFJXGG5dWCJyqrLyBps2ikeHM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/4f4755-cbea-4986-b277-78bcb85ed377/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:32:41 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.152.8.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517461133301 (0x787b1647f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:32:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d64545257186e5d582272aab2f2069b368a47873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:54:62:ca:6b:53:fa:15:ec:5e:1f:54:f8:
                    4a:f2:9c:a0:ea:85:26:81:ad:46:93:bd:c0:70:57:
                    01:0f:cb:85:71:73:79:d4:71:5a:d2:49:0a:cd:15:
                    46:8f:53:f8:e6:da:41:67:8c:1f:51:eb:b1:c8:0c:
                    96:6f:29:de:e8:b5:d4:6e:d5:b6:e6:2a:72:1b:a7:
                    b0:a6:21:7f:b3:64:23:5d:58:bd:a4:7b:e8:4d:b4:
                    60:0f:50:50:50:9f:a9:d2:91:21:15:b1:8a:2f:f8:
                    52:1b:34:8c:02:61:35:23:cf:54:1b:29:79:7b:ae:
                    b5:a9:2e:48:a2:43:09:db:45:e5:4c:3f:00:0c:b4:
                    b3:60:15:72:d3:f6:2b:af:fd:30:d8:af:d2:da:cd:
                    ab:0b:43:fe:df:a8:4f:55:8b:a4:75:6c:13:6e:03:
                    b5:b2:eb:7d:c3:03:e6:73:da:88:11:48:3d:ed:5a:
                    e1:d3:58:c0:df:46:6f:15:fe:6f:27:f1:0c:86:be:
                    49:29:4a:49:b7:13:0b:3e:a8:52:44:e8:a5:0b:c4:
                    81:8b:4c:58:ca:09:9a:1f:e6:44:63:36:97:92:e9:
                    36:e2:2a:99:21:b4:25:b3:3c:ae:39:29:81:d3:37:
                    f7:ce:26:b6:60:17:65:2b:19:bd:9b:43:9f:69:97:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:45:25:71:86:E5:D5:82:27:2A:AB:2F:20:69:B3:68:A4:78:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4f4755-cbea-4986-b277-78bcb85ed377/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4f4755-cbea-4986-b277-78bcb85ed377/1/1kVFJXGG5dWCJyqrLyBps2ikeHM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:4d:a7:a5:7a:39:df:ce:88:04:51:21:c0:32:04:b2:61:
         d0:f4:d9:43:9c:0c:2f:0d:c6:3a:f5:65:0c:dc:64:b0:7e:c1:
         8f:7c:5e:42:3f:28:f7:d6:c5:c6:cf:08:07:2c:39:01:12:e1:
         9d:41:c0:aa:a9:b1:23:50:99:c5:04:d3:1e:ab:71:92:19:2d:
         7f:eb:6d:06:09:45:a5:4a:3c:44:b9:65:4d:7e:08:40:14:24:
         c4:ff:ff:41:f8:e1:26:af:ba:19:25:d1:61:84:ac:28:3c:67:
         cd:c0:f6:25:22:d7:e2:8c:19:27:02:e7:07:63:35:d6:b0:07:
         e4:0a:07:42:ad:2e:47:67:7f:a7:55:21:4f:a7:6c:ec:ef:5e:
         fc:e5:8a:86:77:9e:e7:47:95:a3:15:ca:31:3d:4b:7b:51:21:
         06:8f:09:e9:68:43:69:31:47:10:1f:10:2f:12:fc:b8:fe:80:
         cc:64:8e:46:fb:91:e1:d1:f4:03:1a:89:12:69:de:54:8a:12:
         c6:3a:6d:2a:23:18:f2:87:50:70:61:b5:4d:6e:23:b6:a8:2c:
         89:12:8c:f8:27:51:13:4d:cd:27:f9:02:fe:49:0d:be:27:4f:
         bd:6d:c6:c1:d0:7b:f6:b2:41:c5:4b:f3:de:bd:c5:8c:90:ac:
         4d:23:fc:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----