Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2UR0oc0tKAsHsFAeCTcrl5QB08Q.cer
File:                     2UR0oc0tKAsHsFAeCTcrl5QB08Q.cer (raw, json)
Hash identifier:          kYmcZ3jmJ64Q3eXcpC+Wu2E94FDgl/exIr+yLz9Xygc=
Subject key identifier:   D9:44:74:A1:CD:2D:28:0B:07:B0:50:1E:09:37:2B:97:94:01:D3:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       78E87ACCD3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/a31967-33d6-48f0-b877-cd075e95c778/1/2UR0oc0tKAsHsFAeCTcrl5QB08Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/a31967-33d6-48f0-b877-cd075e95c778/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:42:16 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.143.128.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519296437459 (0x78e87accd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:42:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d94474a1cd2d280b07b0501e09372b979401d3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:90:28:b1:56:0e:b9:cd:e8:4e:09:3a:70:
                    24:fc:0b:fd:e3:73:f5:b7:3c:2e:0e:86:8c:9d:00:
                    b9:6f:70:bc:d5:28:b5:cd:f3:42:1b:a2:03:c6:0c:
                    32:e0:55:c5:20:22:3d:b0:1e:c2:dc:ba:8a:96:a4:
                    4a:83:40:7f:6c:64:bd:a8:5b:c3:dc:21:ca:93:6d:
                    cc:e9:13:34:02:bd:71:54:36:26:a9:9c:2b:94:fc:
                    1d:b3:bf:91:3e:71:5c:2f:df:7e:18:19:27:6c:85:
                    ee:27:ab:e0:9f:1e:a5:64:aa:97:5d:bf:ac:f6:d9:
                    c3:ab:00:f0:4b:3a:19:f2:6e:32:28:d9:8d:4d:02:
                    40:97:de:ed:c3:2c:d7:c6:e8:62:0a:30:9f:14:f8:
                    11:8a:99:3d:c4:e2:1b:4e:fc:a7:67:e4:10:94:9a:
                    2c:fd:63:4d:26:d2:d6:29:fe:23:32:3f:b2:f1:4d:
                    60:31:46:40:2e:14:99:dc:c8:9c:12:f9:75:38:a6:
                    1e:0e:10:05:1e:46:88:c5:7c:b1:41:d7:7f:c3:7c:
                    ad:f9:69:6d:72:d2:15:24:16:15:70:9e:a6:2f:92:
                    52:67:cb:3e:0e:1e:54:97:25:64:86:eb:41:f9:64:
                    ea:78:e5:f0:e2:0b:c6:51:e4:91:0e:99:89:a7:3b:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:74:A1:CD:2D:28:0B:07:B0:50:1E:09:37:2B:97:94:01:D3:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a31967-33d6-48f0-b877-cd075e95c778/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a31967-33d6-48f0-b877-cd075e95c778/1/2UR0oc0tKAsHsFAeCTcrl5QB08Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:15:7f:95:7a:93:0a:b7:44:f2:23:90:b4:e8:63:92:7e:69:
         45:6a:2a:18:1b:4e:91:64:7b:ca:12:a4:ed:6a:06:b1:d0:76:
         f7:eb:02:2f:bc:cc:7d:26:8e:ec:25:b6:d1:f7:57:ad:85:91:
         dc:58:d1:98:09:28:8e:c9:73:8d:15:0e:8c:61:bd:2e:45:9e:
         64:cc:0b:6d:72:d7:3a:81:91:72:35:3b:86:47:4b:cb:16:f8:
         8f:c8:06:8a:3d:97:35:4f:94:bf:e7:04:13:d2:52:fc:87:73:
         5c:c3:9f:4f:48:25:a2:3a:d6:f3:c6:b0:85:43:2f:07:95:79:
         c0:b3:5e:02:e1:5b:30:5a:54:ba:67:69:d9:e0:f8:14:7b:ed:
         ec:57:a4:5d:8c:40:47:9b:c3:72:41:4f:5f:90:bd:71:36:5f:
         70:53:5a:77:2d:6c:b8:ee:2b:8d:89:91:b8:a5:b9:35:3f:21:
         fb:9d:b8:9b:f2:f8:66:e1:85:36:c0:1a:b4:f4:12:45:68:5f:
         1a:ed:89:fe:07:f9:75:89:33:c9:f1:f8:41:07:80:e7:d6:cc:
         16:b1:64:01:05:a9:b8:00:27:cc:81:0d:24:bc:de:82:4a:a1:
         98:3f:b6:01:78:76:b6:0b:a2:45:ab:e1:21:13:f7:12:f3:80:
         81:fe:fb:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----