Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Iptb4cP5hZziEGzX6pKhRZs0Og.cer
File:                     3Iptb4cP5hZziEGzX6pKhRZs0Og.cer (raw, json)
Hash identifier:          8S+t4iIGCekmDEx/2DbPfMJ5OCG5+koqXhHcGJfk4fU=
Subject key identifier:   DC:8A:6D:6F:87:0F:E6:16:73:88:41:B3:5F:AA:4A:85:16:6C:D0:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       76ECEB8215
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/a53eca-4dab-41dc-85b3-302f8ba8c713/1/3Iptb4cP5hZziEGzX6pKhRZs0Og.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/a53eca-4dab-41dc-85b3-302f8ba8c713/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:39:10 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.81.216.0/22
                          IP: 2a0e:6380::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510780998165 (0x76eceb8215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:39:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc8a6d6f870fe616738841b35faa4a85166cd0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:e3:2c:4a:b4:0a:0f:b3:00:ff:8c:ec:cd:
                    2a:12:32:84:65:1f:de:5d:37:a2:6f:22:ed:2e:d6:
                    f9:49:8d:5a:bc:f0:59:83:64:c5:e5:ea:55:7f:35:
                    b7:4d:40:99:d4:04:88:82:c5:8b:8d:a7:a7:af:be:
                    62:9e:c5:13:30:67:48:d5:0c:e4:17:4c:73:76:bf:
                    a8:0c:44:cf:6b:3e:9b:5f:dc:9e:69:0f:9b:00:6a:
                    65:2f:76:7b:3d:c6:bc:13:51:49:92:da:49:65:99:
                    56:04:50:a3:47:e1:aa:40:84:9d:9d:b2:f5:75:74:
                    56:ee:91:32:af:69:ea:bc:e9:d8:00:ff:b4:da:63:
                    cb:8d:f2:61:8e:d4:94:a7:85:0d:3c:95:61:39:48:
                    0b:4f:16:b5:c7:c7:7f:94:51:73:3c:de:43:6e:ee:
                    c7:1d:4c:bd:cf:55:ef:07:b0:b8:be:5f:77:32:29:
                    59:36:7f:77:47:2f:c8:d9:0d:78:c4:94:d2:fe:d8:
                    d3:18:8e:e5:92:b2:fd:ad:9d:e2:72:79:0a:43:4a:
                    c5:24:97:24:c7:33:64:cd:7a:d6:3a:e1:23:30:d3:
                    8d:8d:17:37:db:2e:1d:71:0e:5a:f0:29:6d:1c:1e:
                    86:4a:8c:ac:1b:a6:5a:b4:8c:32:b6:60:fb:e0:4f:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8A:6D:6F:87:0F:E6:16:73:88:41:B3:5F:AA:4A:85:16:6C:D0:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a53eca-4dab-41dc-85b3-302f8ba8c713/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a53eca-4dab-41dc-85b3-302f8ba8c713/1/3Iptb4cP5hZziEGzX6pKhRZs0Og.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.216.0/22
                IPv6:
                  2a0e:6380::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:97:00:0e:91:16:23:e8:b8:1c:90:1e:4b:3f:94:34:10:1c:
         9e:2f:ca:c2:7a:f6:66:cc:22:a3:75:65:66:f5:8d:f9:aa:e4:
         13:86:f5:19:c8:5e:31:e0:1a:cf:b7:45:07:ce:ec:91:10:fc:
         08:4b:70:85:a3:08:5a:51:42:dd:24:d0:ab:39:0a:c7:f7:ed:
         17:5f:e6:d5:a6:26:77:74:26:cf:4c:5a:3a:b5:80:24:66:73:
         52:d4:11:37:7f:b9:62:84:30:87:75:fc:dc:1d:6d:0a:1c:f5:
         50:6a:12:96:0a:9d:3a:6e:8d:64:85:2e:81:2c:b8:3d:06:39:
         f2:06:b1:c6:d9:e3:ad:82:6b:09:1c:00:75:5d:38:08:38:50:
         f7:f6:df:39:99:2a:82:d9:31:79:f5:55:05:6d:b0:71:89:2d:
         80:8c:26:df:31:7e:d2:1d:fc:ff:c3:29:59:fb:30:91:62:25:
         94:92:77:52:92:9e:cd:fc:94:d1:5c:fe:ac:f3:30:3d:fe:da:
         21:24:a3:f6:0a:c3:05:5f:ba:9b:49:c1:e6:df:9f:a2:fd:ad:
         c6:f1:e2:8f:0c:ed:58:75:29:33:ab:ce:13:88:e0:48:d7:76:
         a5:23:e6:ec:4d:16:e8:38:41:33:fe:84:be:19:12:f6:ce:51:
         f8:2f:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----