Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A2UgobjpKFCm4t4wf3Gn5OZtd0.cer
File:                     3A2UgobjpKFCm4t4wf3Gn5OZtd0.cer (raw, json)
Hash identifier:          j12FOLbEGlZqe5XACkYOjs43MzjdLm6roSh6Wirm4Zc=
Subject key identifier:   DC:0D:94:82:86:E3:A4:A1:42:9B:8B:78:C1:FD:C6:9F:93:99:B5:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       79BB4B9355
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/bd9495-3e6b-4402-bb10-e62859226741/1/3A2UgobjpKFCm4t4wf3Gn5OZtd0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/bd9495-3e6b-4402-bb10-e62859226741/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:59:43 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 141.98.136.0/22
                          IP: 2a09:11c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522833335125 (0x79bb4b9355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:59:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc0d948286e3a4a1429b8b78c1fdc69f9399b5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:18:5f:d4:f6:5c:d4:d4:21:62:c2:bc:c3:
                    e0:7e:0a:35:7a:0c:ec:31:21:d4:bc:9f:d7:e9:4c:
                    c8:2c:9c:a5:c0:97:70:f8:da:09:78:05:09:67:98:
                    69:f0:6f:74:eb:55:09:a8:84:d6:3a:09:e6:69:13:
                    9d:31:20:b8:f3:80:b9:3b:50:17:75:17:ec:29:e3:
                    72:a0:ac:10:d2:8d:08:2d:a5:3b:1a:22:c6:ce:82:
                    4b:86:64:09:7e:f4:56:f3:71:7a:a5:d5:ce:ac:b6:
                    2f:67:fa:ff:d6:88:f7:d5:65:1d:a7:be:e5:f0:6b:
                    b2:ce:f9:db:83:72:d0:f6:02:16:99:9b:9b:fe:c8:
                    9b:17:26:b7:58:8b:15:0b:85:8a:03:c9:ab:b2:99:
                    66:52:c2:7a:99:aa:3c:d8:62:32:cd:46:bd:44:72:
                    7d:db:58:e6:18:92:56:87:34:1b:26:ee:5a:0c:31:
                    4b:b8:e2:93:55:95:24:44:96:e2:67:b7:18:41:bc:
                    6f:b5:67:ba:61:ee:39:1a:22:5a:39:3f:c3:a0:9c:
                    d2:44:3e:dd:28:c8:2d:79:2c:9e:77:51:15:5f:29:
                    e2:bf:fc:cd:c3:98:5b:09:25:44:e2:f4:4c:cb:80:
                    70:7c:7d:71:b0:07:4e:fe:99:cc:19:f6:9e:9a:6b:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0D:94:82:86:E3:A4:A1:42:9B:8B:78:C1:FD:C6:9F:93:99:B5:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bd9495-3e6b-4402-bb10-e62859226741/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bd9495-3e6b-4402-bb10-e62859226741/1/3A2UgobjpKFCm4t4wf3Gn5OZtd0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.136.0/22
                IPv6:
                  2a09:11c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:b3:52:30:7f:40:84:b2:6d:6b:ce:dd:4f:82:d5:2c:e6:
         2e:d6:4a:ff:0d:f6:35:c7:8d:9e:72:3a:9b:bc:49:bb:24:19:
         b9:6d:04:ab:a4:f6:da:7c:fe:d5:24:ed:79:b6:f7:6b:67:cf:
         31:49:88:87:4d:19:48:36:b7:bb:48:e8:a7:93:f6:74:ef:8e:
         2a:e1:c5:c5:7f:4d:5a:a3:36:c2:95:91:1c:37:a3:65:6d:3f:
         d5:23:1c:74:d6:2e:5b:09:a0:b4:c9:d3:86:1f:6f:a1:88:3c:
         9e:3a:00:c4:8a:68:c3:62:26:86:e9:e2:0c:89:d6:62:e8:a4:
         24:16:8a:56:4f:28:e5:d6:46:5f:db:67:55:89:52:62:97:de:
         a3:75:c0:94:0d:97:73:d7:68:fc:01:f4:80:71:5f:a9:2f:7e:
         8b:b9:64:d3:a0:0a:83:41:b0:41:15:c8:da:7f:c0:af:70:7b:
         b5:bf:63:83:96:96:ef:28:f8:ce:0f:88:fe:96:de:14:32:25:
         c2:5c:3c:85:e8:4a:97:44:32:1a:3a:ef:7c:dc:16:fd:54:7c:
         c1:63:77:b0:48:7d:5e:bb:da:ba:8a:19:ef:c5:23:c4:7f:dd:
         bc:37:c6:f8:c3:e4:ac:17:5c:4a:d8:39:86:99:7f:87:e6:60:
         de:44:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----