Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2XUzjErjS2VRt0K7r6wjM-uQwi0.cer
File:                     2XUzjErjS2VRt0K7r6wjM-uQwi0.cer (raw, json)
Hash identifier:          psZa6c5txqDO0Asjyw76DiTUW2h/XeCQDoPFT3j69AU=
Subject key identifier:   D9:75:33:8C:4A:E3:4B:65:51:B7:42:BB:AF:AC:23:33:EB:90:C2:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75D4B2C7B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/ed225a-db15-477d-89cd-378fd27668fe/1/2XUzjErjS2VRt0K7r6wjM-uQwi0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/ed225a-db15-477d-89cd-378fd27668fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:14:35 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2.57.40.0/22
                          IP: 2a10:43c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506079659953 (0x75d4b2c7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:14:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d975338c4ae34b6551b742bbafac2333eb90c22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:89:6a:88:23:f1:3e:3c:19:4d:ca:17:1f:
                    aa:00:9e:92:96:02:f1:c2:f5:ee:7a:83:2d:d0:d7:
                    a3:fd:f3:c4:3d:92:6b:47:58:29:84:5e:e6:ca:c9:
                    da:b0:eb:12:3b:d0:b9:1a:b9:44:87:06:fd:bf:73:
                    50:08:97:5d:9c:fd:30:6d:2a:33:4d:41:56:bd:08:
                    d5:db:25:6b:36:b8:24:cf:be:e0:73:a7:4a:28:28:
                    60:d8:ba:a0:f2:37:d2:b6:d7:64:20:e4:02:dc:f6:
                    bf:b5:5b:d3:04:30:32:90:b5:11:b0:64:55:13:bc:
                    42:c3:e0:85:64:26:d7:38:39:ba:3c:0e:e5:28:9f:
                    6c:32:5e:38:aa:cb:37:38:f8:f8:5f:81:98:ff:5e:
                    05:47:6b:34:d7:2d:a0:51:a4:68:70:cd:8d:65:a0:
                    53:9a:71:93:35:43:9e:40:fe:4c:38:4c:44:0a:da:
                    ff:05:a0:14:30:39:f4:c2:33:1f:c0:a5:7c:6d:9a:
                    06:24:3c:e2:f8:17:73:1f:ee:66:ff:fe:8c:f9:4a:
                    15:f5:ff:cb:92:10:f8:1b:26:a6:2e:46:e9:ed:ef:
                    ff:a2:1f:35:76:33:79:cf:52:2d:e6:ba:43:1f:37:
                    74:1b:4f:52:f5:f7:6b:d8:af:d5:39:65:01:12:c4:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:33:8C:4A:E3:4B:65:51:B7:42:BB:AF:AC:23:33:EB:90:C2:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed225a-db15-477d-89cd-378fd27668fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed225a-db15-477d-89cd-378fd27668fe/1/2XUzjErjS2VRt0K7r6wjM-uQwi0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.40.0/22
                IPv6:
                  2a10:43c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:62:b0:41:c8:33:73:ad:48:2f:39:09:d0:ea:d5:00:cd:9f:
         bc:4d:fc:70:b8:cc:df:0c:6c:9a:a1:47:77:6a:d8:b9:6d:dc:
         e6:8a:31:5b:b1:d8:35:c9:0d:45:f9:d0:d1:14:3b:54:81:d7:
         c9:47:09:82:83:00:3d:5e:18:2c:6c:8f:f5:4a:ee:cb:bc:3c:
         72:96:38:19:fb:9d:9e:41:a5:c8:59:b4:ec:f8:92:72:4d:3f:
         86:93:05:b6:fb:01:40:4f:52:3f:30:f0:d5:a0:72:e3:23:77:
         1f:5d:ab:0d:68:de:29:03:a5:ec:b4:11:76:34:83:27:43:dd:
         57:92:8c:5c:a8:e7:1e:92:5d:e6:85:b4:5f:4f:f0:ec:ec:ae:
         78:c8:dd:01:e3:12:92:ee:05:f0:94:d6:98:d6:30:f9:b1:4a:
         d6:2e:89:4c:29:28:32:1b:a1:ed:89:fe:88:88:03:09:11:18:
         ef:b1:0e:36:bb:6d:7e:dc:08:4c:58:47:90:b3:af:b0:95:26:
         26:30:96:92:b9:03:5e:fe:ab:a8:12:7b:55:a6:b1:7d:92:dd:
         5e:d7:6b:d7:ee:43:05:23:c4:82:01:25:99:f8:e9:fb:7a:87:
         0f:66:4b:6e:55:d4:72:69:0d:41:74:bb:a0:c7:c1:34:98:d2:
         de:94:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----