Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1l0w_MM_LzHYa87G1UpWjUdwSXo.cer
File:                     1l0w_MM_LzHYa87G1UpWjUdwSXo.cer (raw, json)
Hash identifier:          NWp78CGU7NNrBwcyF+ynURvcSiFPPZtSiRN/PLryLV8=
Subject key identifier:   D6:5D:30:FC:C3:3F:2F:31:D8:6B:CE:C6:D5:4A:56:8D:47:70:49:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       775653149D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/3e20b8-73e3-40ff-a812-ac1d6c28f9a0/1/1l0w_MM_LzHYa87G1UpWjUdwSXo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/3e20b8-73e3-40ff-a812-ac1d6c28f9a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:48:36 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 207279
                          IP: 91.244.246.0/24
                          IP: 2a10:7ac0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512549393565 (0x775653149d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:48:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d65d30fcc33f2f31d86bcec6d54a568d4770497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:10:95:33:2d:8c:ab:4f:5d:42:6b:4d:6f:
                    95:4b:a4:a4:ca:52:3a:6a:5d:05:61:b0:a7:ae:7e:
                    e7:82:5e:da:09:92:81:6c:24:86:65:a6:b3:89:e8:
                    91:12:a6:21:0e:0e:54:e1:ee:68:81:71:43:25:a0:
                    0e:d4:94:cb:07:e9:c4:26:04:38:e4:33:90:5e:48:
                    49:1c:9d:6e:8c:a1:bf:aa:52:e3:51:24:f9:28:0e:
                    a9:49:d9:4f:b2:de:a3:10:f7:7c:49:ce:6b:e9:32:
                    38:24:28:e4:15:a0:5e:d7:b9:7d:a9:e1:3e:94:4c:
                    2d:00:36:f5:ad:d3:63:52:a6:4b:d3:ec:d1:e0:5a:
                    86:f4:1d:a1:bb:96:80:83:5f:61:30:16:79:8f:21:
                    fe:d0:5b:78:86:8f:c2:ea:35:4d:53:92:eb:13:1a:
                    af:03:c6:bb:09:1c:95:ec:ed:ec:b0:66:41:f3:6c:
                    81:5b:19:81:4f:78:f6:08:64:2a:13:5d:07:38:8b:
                    f6:88:90:27:4e:b9:aa:a7:c9:77:61:d5:53:4e:1a:
                    12:58:0d:d7:14:a8:be:f7:c2:a9:55:15:36:77:07:
                    18:c7:93:8f:f6:35:3d:b2:49:30:a8:92:b3:76:b7:
                    6a:66:ae:73:ac:5e:99:8c:1c:d0:1e:e1:d1:59:10:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:30:FC:C3:3F:2F:31:D8:6B:CE:C6:D5:4A:56:8D:47:70:49:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3e20b8-73e3-40ff-a812-ac1d6c28f9a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3e20b8-73e3-40ff-a812-ac1d6c28f9a0/1/1l0w_MM_LzHYa87G1UpWjUdwSXo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.246.0/24
                IPv6:
                  2a10:7ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207279

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:b3:6a:61:3b:37:b1:60:e6:d5:a9:da:f5:b2:0d:62:02:
         78:b0:a9:6f:64:70:68:e7:de:7f:ad:e5:10:68:bd:d9:fb:11:
         93:f4:63:34:51:39:e2:71:26:54:47:d4:94:37:f1:cf:f3:c6:
         98:68:df:46:e7:e0:e5:72:f2:53:ca:ca:c7:94:eb:c9:55:9a:
         08:1a:c8:9d:ee:ee:a0:63:2c:e7:34:7f:ad:80:0b:92:ce:93:
         b9:cb:a0:fe:b0:63:ab:01:c1:a3:82:c0:58:40:9b:66:e9:02:
         a1:90:f9:b5:66:88:67:ce:1e:22:3a:e7:83:79:54:7a:9f:43:
         55:3e:c7:fe:74:66:a5:25:6c:9e:7b:a0:cc:a1:81:04:1c:74:
         45:b2:80:0e:fe:9f:a9:1f:7f:47:f8:e8:26:49:ec:e1:74:a0:
         3b:c4:38:aa:09:be:af:b6:59:24:65:32:4c:83:32:49:38:cc:
         0a:0c:5d:10:93:f6:61:7f:24:79:2a:ef:fe:04:4f:b4:38:ac:
         47:cf:0e:4c:d6:f8:e3:0b:5e:1c:25:6d:9a:00:eb:5e:51:aa:
         e1:2d:07:78:50:42:9d:14:49:5f:d6:28:f8:4f:f6:59:f5:e5:
         58:b4:3c:dc:3e:48:d6:29:15:89:2a:53:a2:2b:5e:9f:26:88:
         8e:86:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----