Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2p4ymRStkcFY_a4KXXN1puT1hxM.cer
File:                     2p4ymRStkcFY_a4KXXN1puT1hxM.cer (raw, json)
Hash identifier:          S/v7yA3GvZU0+dBVNm9PmKpeM4Qv80h1FMIlDEBMw0M=
Subject key identifier:   DA:9E:32:99:14:AD:91:C1:58:FD:AE:0A:5D:73:75:A6:E4:F5:87:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       71A3DAE14C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/dd3ef9-b925-4a42-9af6-bd400cbd5d88/1/2p4ymRStkcFY_a4KXXN1puT1hxM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/dd3ef9-b925-4a42-9af6-bd400cbd5d88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 04 Nov 2020 14:19:15 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 31.40.248.0/22
                          IP: 2a09:a200::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488080335180 (0x71a3dae14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  4 14:19:15 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=da9e329914ad91c158fdae0a5d7375a6e4f58713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:2f:99:23:71:0c:dc:78:b6:36:47:d8:a6:
                    79:bf:b1:9f:a4:85:fb:14:58:d8:a2:09:b6:22:5e:
                    67:2c:57:3d:e3:9e:13:9f:45:f6:c7:97:a3:a7:e2:
                    09:0a:0b:8b:14:dc:50:97:b3:63:15:cb:e4:75:ac:
                    08:51:62:f6:5a:b9:51:78:56:6e:2b:5c:09:4a:4f:
                    f1:1a:bd:78:4c:72:d3:3c:d2:dc:0c:f9:bf:39:98:
                    1e:af:89:2d:e0:7a:e8:ed:8c:0f:d3:56:ce:b2:79:
                    e5:fb:34:ae:2f:1f:67:3d:6b:93:3a:c4:1d:9d:2f:
                    7b:f0:4f:47:c8:c1:12:45:a8:6f:f8:3f:30:2b:de:
                    ef:54:81:c5:00:4c:5b:5a:a8:4b:17:ba:59:3e:b8:
                    47:ff:f1:8f:9f:dc:b3:c5:4e:4e:b9:f0:ca:74:91:
                    d9:0f:8d:37:1f:55:a9:4f:cf:97:8e:a7:61:a5:a4:
                    49:07:c9:05:bc:d2:c7:28:3f:96:a8:c2:29:0e:6d:
                    ac:93:5d:84:fb:b4:00:27:43:53:54:ff:67:17:be:
                    29:00:a0:3a:9a:5c:c8:a7:7d:0a:29:33:1e:5f:49:
                    3c:47:1e:5e:a9:bb:c3:bf:72:74:a8:b8:6f:6c:f3:
                    ea:f0:72:25:0d:4d:6b:f7:5b:ef:84:1f:48:7f:aa:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:32:99:14:AD:91:C1:58:FD:AE:0A:5D:73:75:A6:E4:F5:87:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd3ef9-b925-4a42-9af6-bd400cbd5d88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd3ef9-b925-4a42-9af6-bd400cbd5d88/1/2p4ymRStkcFY_a4KXXN1puT1hxM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.40.248.0/22
                IPv6:
                  2a09:a200::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:d1:b6:67:d8:f2:f0:40:b3:d3:09:74:fa:1f:bb:19:ad:
         a0:80:11:79:ae:82:1c:5f:bd:3f:0b:5f:91:9f:a9:25:c0:44:
         2e:9b:04:2c:dd:5d:b2:35:16:aa:da:a4:21:ba:3e:30:30:3a:
         28:38:2e:08:c2:fa:85:03:9e:2c:c4:2a:79:cb:0c:9d:61:9e:
         d9:45:b2:fb:08:8a:84:db:84:bd:b8:c3:22:3b:23:63:75:ce:
         88:09:1e:ec:0a:a3:ce:1e:d2:14:2f:88:4b:8d:d4:10:2c:dc:
         49:40:05:76:a5:99:e7:5e:e2:b1:ad:53:a3:5f:c3:b4:89:25:
         42:2c:bb:dd:99:84:22:8a:b8:1b:2e:dd:cf:c3:3e:78:81:fa:
         ad:6a:68:4b:ea:37:ca:d0:d8:81:64:1b:81:1b:18:43:73:4b:
         01:42:f1:59:ca:96:82:0b:3a:01:3a:d8:33:dd:c0:ef:57:0f:
         29:30:df:c4:04:47:27:44:cc:c9:61:27:80:9c:10:87:62:fa:
         e2:e9:aa:76:9d:1f:bf:66:f4:84:a0:d6:47:cd:4c:2c:d8:aa:
         f3:39:27:95:12:36:65:e7:88:e3:e4:66:a9:f5:88:1b:0c:a8:
         56:e4:57:2e:39:e8:c1:c8:77:14:67:1b:21:48:96:d0:00:59:
         59:55:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----