Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Q5-Q-RHj1e17YJW-ZJpRFRfCA4.cer
File:                     3Q5-Q-RHj1e17YJW-ZJpRFRfCA4.cer (raw, json)
Hash identifier:          76dXUhDeNigyjT4OXJsA3HdyJRn2EVm9c1NOksKtwAU=
Subject key identifier:   DD:0E:7E:43:E4:47:8F:57:B5:ED:82:56:F9:92:69:44:54:5F:08:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7B038D0FB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/dbc574-d997-4d9b-ad08-af344b23a746/1/3Q5-Q-RHj1e17YJW-ZJpRFRfCA4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/dbc574-d997-4d9b-ad08-af344b23a746/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:27:29 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.82.28.0/22
                          IP: 2a07:c440::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528340553648 (0x7b038d0fb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:27:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd0e7e43e4478f57b5ed8256f9926944545f080e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:0b:62:03:98:ae:8f:81:a8:cc:a0:4d:99:
                    10:82:31:d8:b1:36:60:7a:cd:4e:2d:88:8f:c5:49:
                    07:c7:a2:20:e2:07:1f:48:49:d7:76:8e:fb:a7:f3:
                    32:7d:a0:93:d7:05:fd:9e:d5:b1:94:03:87:b4:e0:
                    95:a0:15:bf:12:79:19:fa:2f:79:8d:1c:79:2a:56:
                    9f:33:3e:99:b5:da:40:eb:89:3b:f5:39:99:a2:ab:
                    de:31:6b:0c:33:16:53:6a:f0:a7:f4:2c:c1:cc:a6:
                    b4:87:34:2e:7e:f0:27:c4:c3:37:97:54:5e:c3:03:
                    98:1c:97:16:b8:e9:08:3b:ef:e0:49:33:ff:44:67:
                    b2:05:02:3e:81:c8:01:4b:73:e8:b9:d3:c3:a8:84:
                    ef:3c:52:3b:66:0d:2e:97:86:e3:dd:87:6a:e5:c6:
                    a2:2a:ef:e7:b7:01:fe:3d:92:40:d3:9a:69:37:09:
                    d0:f0:a9:3e:92:49:54:10:ad:6e:be:91:96:d7:7e:
                    38:98:49:4f:83:63:f9:9f:63:0a:59:14:35:5f:f6:
                    9b:dc:ba:38:ae:b3:bb:0b:73:62:52:d4:02:12:27:
                    8f:55:89:89:20:f8:77:3c:5e:d3:4e:d6:58:22:63:
                    85:bc:40:12:51:b8:59:4d:9d:4f:19:44:a4:eb:c2:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:7E:43:E4:47:8F:57:B5:ED:82:56:F9:92:69:44:54:5F:08:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/dbc574-d997-4d9b-ad08-af344b23a746/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/dbc574-d997-4d9b-ad08-af344b23a746/1/3Q5-Q-RHj1e17YJW-ZJpRFRfCA4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.28.0/22
                IPv6:
                  2a07:c440::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:fb:f2:c7:a1:77:d2:a8:99:c2:ee:e0:50:1e:3d:1f:88:
         97:53:f7:39:96:b4:3f:e6:69:51:45:7a:0f:9f:e2:4a:68:5d:
         83:71:b0:09:07:e0:8f:ad:05:13:21:96:77:58:82:95:d3:7c:
         be:ac:1f:f3:07:e4:b9:63:b0:4b:05:f4:41:c8:0f:57:a9:b1:
         20:9c:a2:1a:c7:e3:ae:d6:99:8f:7a:97:a5:4b:7e:ea:d8:5c:
         28:62:1c:12:03:1e:5b:ed:95:77:94:49:13:df:3b:97:ef:40:
         28:e0:5b:35:f2:21:96:d3:1e:74:08:13:15:96:b6:ce:0f:d8:
         8d:28:45:96:66:17:e3:41:c1:e3:13:26:99:7e:b2:f4:b4:fe:
         36:d7:9d:7f:5c:cf:7c:06:68:9d:83:3a:d7:0a:05:9e:cf:92:
         ca:35:d3:a2:fc:bb:ee:0a:84:3d:71:21:1d:9b:0a:d1:f8:58:
         f6:f6:ce:30:e7:57:3b:e3:f0:d2:7c:9f:a1:22:0d:e2:fb:64:
         44:af:cd:55:6b:0e:63:61:0d:85:76:49:82:74:2f:f8:6f:f1:
         de:b9:79:59:38:2c:e8:08:3a:c7:70:29:1e:0a:b7:71:6b:3e:
         13:a9:bb:48:3a:fe:d0:18:cc:bd:17:c5:71:07:5e:37:7e:75:
         d4:97:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----