Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1wrfH3p5PTln7RmQHpEr7OZSa_U.cer
File:                     1wrfH3p5PTln7RmQHpEr7OZSa_U.cer (raw, json)
Hash identifier:          lQoY3GwtTh5YL6PlUjbX6Dw+eGGeh4nrYPwFYNGvAEI=
Subject key identifier:   D7:0A:DF:1F:7A:79:3D:39:67:ED:19:90:1E:91:2B:EC:E6:52:6B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7B65F7744D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/76d292-2c97-415c-9376-3fbe7784faf7/1/1wrfH3p5PTln7RmQHpEr7OZSa_U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/76d292-2c97-415c-9376-3fbe7784faf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:36:33 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 197588
                          IP: 178.219.128.0/20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529991693389 (0x7b65f7744d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:36:33 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d70adf1f7a793d3967ed19901e912bece6526bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:0a:83:72:88:98:53:11:3e:13:83:38:cf:
                    2f:e5:34:00:08:0d:f0:81:1d:53:ac:16:1e:fd:df:
                    3a:e5:0a:30:19:82:7e:0f:61:34:7f:5a:ef:97:c6:
                    ec:96:67:a8:be:ec:80:f4:db:47:8d:22:60:2b:ee:
                    24:7f:e5:e6:30:6a:97:91:be:32:40:4a:7b:07:cc:
                    a5:95:ca:50:df:c4:c8:4e:cb:38:09:af:0c:7d:31:
                    95:96:e0:d1:bd:f3:7d:93:83:cc:51:88:e8:ca:f6:
                    5b:a1:cf:57:24:7f:48:9f:72:86:92:79:bc:02:7a:
                    9d:18:ce:0b:11:0a:84:ae:cf:58:af:9e:5c:c4:d7:
                    76:dc:de:d9:79:ea:52:ed:f3:dc:36:bf:fc:79:9d:
                    a5:18:5c:b8:c4:5c:1c:73:81:df:12:ab:bc:b7:ca:
                    3b:ab:b6:aa:64:eb:5c:c4:81:59:49:d1:97:46:08:
                    1a:c3:2b:ae:ef:4f:d4:58:6e:3a:26:54:94:cc:d7:
                    31:0f:19:1c:74:8e:36:4b:40:20:03:73:e3:5c:43:
                    79:4b:95:b3:18:9a:e7:04:fe:94:6f:62:31:87:8b:
                    4e:88:34:70:eb:10:e6:26:fe:20:8d:b2:3d:61:ba:
                    ea:9d:03:2f:f7:f9:64:9d:e0:0b:7c:48:9b:a3:0e:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0A:DF:1F:7A:79:3D:39:67:ED:19:90:1E:91:2B:EC:E6:52:6B:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/76d292-2c97-415c-9376-3fbe7784faf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/76d292-2c97-415c-9376-3fbe7784faf7/1/1wrfH3p5PTln7RmQHpEr7OZSa_U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.219.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197588

    Signature Algorithm: sha256WithRSAEncryption
         94:33:e4:35:8c:d3:8e:1e:5e:1e:75:22:fb:83:ac:27:6a:a7:
         43:71:b4:af:95:be:36:a6:da:66:1f:07:d6:af:09:38:da:43:
         11:bf:c6:eb:b5:d4:bf:6c:07:1d:b4:44:3b:03:ce:a3:2b:0a:
         1c:18:05:7f:b8:eb:93:d0:94:55:8f:5f:8c:38:b7:68:d2:ba:
         ae:88:50:73:4f:31:64:fd:0f:ec:3f:50:c6:12:3f:a2:e1:db:
         30:03:cc:05:48:d6:8e:92:25:cd:f0:49:88:b2:d3:ee:f8:45:
         33:84:4c:45:e5:c7:02:25:5e:de:46:7b:98:34:0e:a7:a0:c7:
         32:b4:97:77:04:a0:af:22:a7:8c:f9:11:53:d9:2f:bc:96:bf:
         4c:ee:43:31:ac:c1:94:d6:a8:75:5c:f1:28:a8:ea:18:68:a8:
         69:7c:dc:13:ee:7b:f1:c1:1a:06:19:3d:b1:d8:a8:95:1f:c8:
         39:4c:9c:c2:30:e1:61:bd:48:7c:65:cc:29:c2:88:8b:8b:b5:
         30:39:c3:49:39:24:82:f5:1b:59:20:e4:58:26:b7:07:fa:34:
         86:4f:9f:f5:dd:e9:cc:d0:ac:66:24:98:0f:9e:0a:26:2e:bc:
         a5:74:00:da:98:17:f3:39:e4:e8:ff:c9:f5:eb:8a:0d:18:9b:
         dc:69:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----