Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AH6WrqKPdR34Tn3bCPBaVFCEBk.cer
File:                     3AH6WrqKPdR34Tn3bCPBaVFCEBk.cer (raw, json)
Hash identifier:          7LJpCLtAz/J/66DmywosHZWjyceAGYOeDILjyz3CXUI=
Subject key identifier:   DC:01:FA:5A:BA:8A:3D:D4:77:E1:39:F7:6C:23:C1:69:51:42:10:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       83889E27A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/3AH6WrqKPdR34Tn3bCPBaVFCEBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:14:39 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.135.236.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564932781986 (0x83889e27a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:14:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc01fa5aba8a3dd477e139f76c23c16951421019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:5d:da:be:9a:1a:a4:bb:43:26:8a:c6:39:
                    b5:4d:fa:8b:97:5c:6e:cc:78:a1:83:d8:95:c2:1f:
                    5f:56:2c:e6:d4:48:a8:c1:64:20:12:8e:41:0d:76:
                    be:7c:dc:88:e5:bd:97:ed:d6:1b:a0:52:a0:2a:5c:
                    1e:da:72:32:b5:2c:44:c7:10:4c:2f:c0:80:78:1e:
                    96:bd:aa:ed:f7:8b:82:53:eb:d7:76:f6:85:94:25:
                    7e:e6:ad:f6:77:94:38:ab:11:8b:10:e2:ad:40:8e:
                    f2:96:14:81:16:4d:61:ae:a0:f7:44:67:bb:84:93:
                    c0:7b:50:6f:d2:29:80:ca:0d:4e:be:1f:18:bb:e0:
                    0d:ec:3c:6d:3d:99:4a:76:58:94:5e:07:61:cb:07:
                    42:c4:ca:15:12:6f:24:ee:f7:87:41:0d:62:b2:17:
                    84:7a:1f:7e:99:1a:2e:d3:be:1c:cb:c8:61:0d:e7:
                    6e:6d:d9:50:e9:31:f1:f8:f1:aa:66:7c:0f:78:43:
                    3f:10:a8:c5:8b:03:9d:39:da:95:c6:7e:6c:f5:7e:
                    9d:22:e9:cf:c0:f9:89:4f:be:f4:75:95:02:46:33:
                    00:40:e7:c0:7e:6b:fc:2c:a3:de:c0:fd:10:13:07:
                    03:1e:13:f0:a0:10:1b:45:be:08:04:e0:b3:38:af:
                    39:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:01:FA:5A:BA:8A:3D:D4:77:E1:39:F7:6C:23:C1:69:51:42:10:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/3AH6WrqKPdR34Tn3bCPBaVFCEBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:60:e1:82:bd:f4:cc:0b:da:63:eb:67:06:d1:11:51:e0:
         6a:4a:31:c0:c2:99:b9:1a:5e:02:a6:7c:3b:c3:ae:67:07:9e:
         23:b9:06:9f:71:fb:ba:3e:71:8a:b5:f6:4e:3c:05:a0:01:87:
         8e:aa:dd:48:1a:b9:35:a2:6b:5a:61:a9:45:60:fc:e0:a0:51:
         da:e5:d1:d1:48:f0:de:37:dc:28:db:10:76:f7:9b:dd:f2:ed:
         22:82:92:43:ce:ad:e4:9e:05:b0:10:a2:81:f6:6d:05:dc:e3:
         ec:a8:7b:ac:c5:4e:bc:d5:50:f2:a5:ce:7c:c6:c7:c9:98:fd:
         ed:1f:b5:73:a8:2f:bf:e6:67:21:68:bc:b5:9b:86:5a:b6:97:
         29:2e:0e:fb:a5:7d:9d:cb:10:4b:a4:54:46:a4:28:4c:39:52:
         38:ce:bf:e9:05:27:ba:54:16:53:0f:d9:b9:a5:e7:24:01:26:
         cb:b3:ab:4d:e6:7c:60:5e:90:48:24:91:ca:8a:46:05:d9:48:
         a9:d4:2f:42:8e:58:5f:7f:47:fb:9c:6a:9f:fa:d7:af:9c:b0:
         d6:03:1c:92:5e:1c:3e:b1:e9:03:ea:a4:b4:05:a9:ba:d1:b2:
         6c:06:f4:04:04:2c:b4:f8:c3:e0:c7:81:43:bb:e6:e2:92:32:
         5e:fd:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----