Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1w0I0T_9pbWta1Rtx4pT_yyw27M.cer
File:                     1w0I0T_9pbWta1Rtx4pT_yyw27M.cer (raw, json)
Hash identifier:          0pf3gyDqbPIjX22GIerUWYwjWhCzdFnQP3bwfjsqbKE=
Subject key identifier:   D7:0D:08:D1:3F:FD:A5:B5:AD:6B:54:6D:C7:8A:53:FF:2C:B0:DB:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7598A31196
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/df297f-01bc-4de3-90c3-af75a307164c/1/1w0I0T_9pbWta1Rtx4pT_yyw27M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/df297f-01bc-4de3-90c3-af75a307164c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:08:29 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.84.172.0/22
                          IP: 2a0e:9d80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505071997334 (0x7598a31196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:08:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d70d08d13ffda5b5ad6b546dc78a53ff2cb0dbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:25:f1:00:d7:ae:a8:36:0b:8b:81:5e:4d:
                    d2:8e:97:c6:21:24:24:dd:7d:d2:e5:be:89:e1:bf:
                    62:0f:c2:06:74:7a:cf:b2:b4:f9:17:31:4c:73:3e:
                    66:b6:04:dd:08:35:70:24:af:67:76:73:30:0a:dc:
                    45:df:95:ff:f4:23:78:fa:26:80:7a:7a:7e:e9:6e:
                    18:c0:d1:d6:bf:d7:2d:0f:25:23:4b:5c:4c:5e:3e:
                    05:3e:22:62:b8:4e:e1:18:d5:9a:f0:48:f3:67:05:
                    8a:fa:4d:58:4c:84:ce:8e:8e:d1:94:16:17:f9:ed:
                    7f:96:ce:c5:88:0d:95:f2:7d:56:07:00:da:88:50:
                    93:1a:e5:29:5d:d4:8d:17:71:d9:14:33:c9:1e:70:
                    e6:f1:58:52:5b:46:9f:cc:95:19:f7:dd:82:ce:3d:
                    63:83:e1:fd:b4:ef:73:11:12:93:e2:6c:ef:18:e6:
                    5c:98:41:dd:be:05:e4:2e:79:ab:2e:bc:c7:d8:57:
                    94:8e:a5:82:43:0f:0e:f3:07:84:cd:25:10:8e:e7:
                    41:1a:0c:5e:18:9e:43:44:f4:87:8a:f7:4e:42:d8:
                    7f:9a:3b:24:11:47:cb:9c:d4:b4:57:e2:77:0d:c5:
                    56:38:93:6d:20:35:28:2d:dd:13:ca:f9:3a:92:ae:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0D:08:D1:3F:FD:A5:B5:AD:6B:54:6D:C7:8A:53:FF:2C:B0:DB:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/df297f-01bc-4de3-90c3-af75a307164c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/df297f-01bc-4de3-90c3-af75a307164c/1/1w0I0T_9pbWta1Rtx4pT_yyw27M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.172.0/22
                IPv6:
                  2a0e:9d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:56:c3:95:00:7a:fe:9d:ce:f0:09:20:72:01:e9:0c:cb:c7:
         b0:0f:2d:70:4f:14:bf:1b:d2:84:25:29:16:bf:1c:ae:b1:4c:
         53:2f:ec:87:a0:63:eb:53:9d:d2:0d:19:62:f6:6a:5b:c6:ad:
         4c:63:cc:25:d1:43:38:fe:5e:4d:77:9e:8b:1c:35:3d:df:f5:
         94:57:79:5b:b9:d4:eb:03:85:6e:ed:e2:54:79:07:c8:5e:d6:
         bb:39:24:fe:6d:93:a4:ca:00:2d:e2:bf:de:a2:12:4c:c1:f6:
         0c:06:67:34:ce:a1:85:1f:dd:23:20:54:99:0b:65:e9:e9:d0:
         3f:48:ef:bd:de:5e:b2:c8:d5:d5:c0:ad:ca:a9:15:e2:f9:47:
         5a:37:30:8c:5d:72:ec:12:33:57:e0:13:9e:da:ea:6a:aa:f9:
         19:ab:89:b6:83:77:b7:e9:ba:be:b6:7f:05:fb:c0:d5:76:18:
         36:60:fa:95:e2:8c:01:92:4e:23:87:49:0b:cf:35:92:31:2f:
         ae:cf:60:8e:a9:31:7c:fb:87:d6:72:d5:ee:a1:39:22:00:9f:
         98:fc:b7:3e:59:c2:bf:bb:fa:1f:9f:f2:b0:25:db:fc:c5:b2:
         6a:75:d6:65:97:cd:f9:92:a0:9c:44:93:82:25:ca:1e:aa:d2:
         c7:d9:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----