Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VMe8GXPe3TPJiTCyg1-mSFF-os.cer
File:                     3VMe8GXPe3TPJiTCyg1-mSFF-os.cer (raw, json)
Hash identifier:          x4EZCzj7KL6MSr30Y7omU8aVX47zCvXnmx7j/v3uhsI=
Subject key identifier:   DD:53:1E:F0:65:CF:7B:74:CF:26:24:C2:CA:0D:7E:99:21:45:FA:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       837FF8E46E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/46/8978eb-4279-49bc-abf9-24eb2a318fa9/1/3VMe8GXPe3TPJiTCyg1-mSFF-os.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/46/8978eb-4279-49bc-abf9-24eb2a318fa9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:13:08 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.132.168.0/22
                          IP: 2a0f:6c00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564787733614 (0x837ff8e46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:13:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd531ef065cf7b74cf2624c2ca0d7e992145fa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:2a:4a:ff:c2:a1:bb:9d:ad:66:c4:cc:59:
                    2c:cd:08:f2:e9:d0:77:26:be:9e:6a:cb:d0:9f:32:
                    f8:32:3b:46:7b:8e:6e:c5:c1:ff:88:98:f2:c7:39:
                    8c:29:28:fe:de:f0:0e:21:ad:c0:3b:b0:6e:eb:48:
                    6f:70:5f:4e:e8:1b:f7:32:9b:4b:47:e5:5b:a3:8b:
                    85:4e:e3:cb:1c:20:8a:a3:8a:1d:bd:52:4f:f2:f4:
                    95:ee:77:c6:8e:3f:21:37:78:ca:3f:f5:61:a7:3e:
                    77:2c:d9:19:84:1f:71:25:1a:ca:85:f6:df:54:e9:
                    a5:48:d6:aa:c3:36:35:ca:30:c7:6b:5f:f1:9c:0f:
                    5b:3f:64:98:de:ed:a5:c2:b9:18:41:ac:bb:b1:b9:
                    16:82:cd:f3:fc:4c:d3:26:1f:06:e3:10:51:9a:ac:
                    f1:cf:e6:27:e5:39:47:b0:4e:e1:dc:ab:de:c8:a1:
                    88:a7:b8:45:e1:2a:c2:b9:f5:6f:8a:c3:71:7c:e7:
                    21:43:81:b8:82:3b:56:f7:03:85:e6:84:35:fd:80:
                    a0:9f:f7:fe:6e:22:c9:0d:6e:65:b9:b5:96:65:b8:
                    c7:bb:c0:a0:2a:62:36:2c:56:9a:64:05:55:5a:94:
                    96:02:e0:6a:fa:a9:be:12:77:e3:c1:13:86:14:42:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:1E:F0:65:CF:7B:74:CF:26:24:C2:CA:0D:7E:99:21:45:FA:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8978eb-4279-49bc-abf9-24eb2a318fa9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8978eb-4279-49bc-abf9-24eb2a318fa9/1/3VMe8GXPe3TPJiTCyg1-mSFF-os.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.168.0/22
                IPv6:
                  2a0f:6c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:af:1e:5a:5e:33:2c:d7:a9:a5:ab:bb:65:45:12:19:f0:
         e1:57:62:13:13:77:c5:98:8c:70:42:c6:7b:66:20:4a:01:08:
         a8:75:49:32:c5:d2:fe:b0:72:cc:cc:48:32:2c:c6:65:32:d9:
         79:08:c2:e6:fb:00:82:b6:e1:3d:06:b0:c3:81:23:6e:ac:71:
         23:95:50:3f:82:88:0e:7c:78:ce:4d:a5:46:f7:1e:9a:3e:84:
         73:14:ce:a6:0d:e5:22:73:27:32:8e:b2:1a:4a:6a:2e:76:59:
         67:35:2f:91:45:50:35:dd:3d:82:00:3f:0b:2d:2a:e9:ff:c8:
         ff:2c:0c:51:11:8e:f5:bb:4b:b4:c5:ae:6e:48:77:2a:79:c8:
         63:5e:4a:bf:53:ea:1a:66:4f:81:5a:e4:df:7e:af:d4:b9:e9:
         2b:93:b4:03:b4:1d:db:0d:ec:8b:78:0e:88:d8:39:11:97:a7:
         34:0e:20:f6:df:1f:c3:9e:e4:69:00:15:1c:12:c7:50:a7:33:
         41:83:e0:d7:d5:a2:9e:c3:8e:88:90:ea:1f:b0:21:c2:1c:9c:
         76:38:71:70:02:03:a3:1e:f5:31:d1:aa:49:f2:36:f8:06:12:
         36:df:23:f7:1f:1d:e9:83:b3:a0:ce:55:ea:d2:7d:51:d4:33:
         6c:85:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----