Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3X5xy2LxGf6i0DPe0t80aMzx6Ak.cer
File:                     3X5xy2LxGf6i0DPe0t80aMzx6Ak.cer (raw, json)
Hash identifier:          IZbuFq4NQsWVPCMZfWsu5VWexxwMrYKtP7GGasLNtzk=
Subject key identifier:   DD:7E:71:CB:62:F1:19:FE:A2:D0:33:DE:D2:DF:34:68:CC:F1:E8:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A40B9B3B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/cd23b3-3a24-43bb-9a4c-a6da0a45e510/1/3X5xy2LxGf6i0DPe0t80aMzx6Ak.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/cd23b3-3a24-43bb-9a4c-a6da0a45e510/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:10:46 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.157.180.0/22
                          IP: 2a10:14c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525071922103 (0x7a40b9b3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:10:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd7e71cb62f119fea2d033ded2df3468ccf1e809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:40:d8:40:1b:be:65:dc:8c:e4:53:48:6a:
                    42:4f:dc:ad:f5:e6:5f:0e:94:44:97:5e:67:fe:cd:
                    b2:51:f0:d1:31:94:33:25:76:31:c2:aa:d7:5e:0f:
                    07:f8:7d:e0:08:ff:d4:b5:be:2f:c5:1b:5a:a2:f3:
                    a8:57:38:f1:08:40:20:07:95:24:e8:79:1e:af:87:
                    8c:46:af:ad:9f:cc:fc:93:5f:a1:e7:47:79:87:61:
                    f3:78:93:4b:61:aa:a5:c8:dc:4b:7a:f2:da:be:11:
                    60:b4:3e:3b:03:90:07:ba:41:9f:2e:70:02:8d:5e:
                    48:84:19:03:68:b7:21:26:74:27:c7:a5:f9:2e:07:
                    c6:60:69:82:08:1e:31:d9:b0:d8:73:fe:56:b1:92:
                    eb:b9:d9:92:63:86:16:7a:c3:99:6c:7e:40:1b:4b:
                    e3:52:ab:a0:ae:0c:00:33:10:4f:3e:40:84:c7:43:
                    fb:e9:47:44:3b:74:be:0f:7b:32:33:2b:2f:d3:3f:
                    bb:3d:f2:b9:08:e3:79:95:ba:1e:db:0f:d7:ec:57:
                    8b:b1:9c:88:b6:b6:97:66:9f:15:0e:6e:6f:c9:46:
                    a5:93:89:80:38:6a:b1:d7:ed:ab:47:0a:bf:dd:e3:
                    3a:80:85:17:52:2b:b2:04:39:07:05:15:17:04:ca:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:71:CB:62:F1:19:FE:A2:D0:33:DE:D2:DF:34:68:CC:F1:E8:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cd23b3-3a24-43bb-9a4c-a6da0a45e510/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cd23b3-3a24-43bb-9a4c-a6da0a45e510/1/3X5xy2LxGf6i0DPe0t80aMzx6Ak.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.180.0/22
                IPv6:
                  2a10:14c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:46:74:7c:ae:ab:d3:20:cf:b6:f3:02:9e:92:9e:cd:91:94:
         05:f1:27:c9:d0:97:4b:e7:5b:95:10:6e:37:f8:27:61:93:39:
         85:d9:37:80:1f:03:36:ed:93:52:2c:7f:5f:46:ae:fd:8a:db:
         1f:84:2d:3f:91:67:a5:1f:bd:47:14:54:4e:ce:b9:09:aa:b1:
         03:da:59:df:1f:a9:ec:0f:b9:5a:d5:27:99:5c:c3:a4:ce:4f:
         15:88:98:be:3b:52:0c:23:19:ca:b7:fb:d1:cc:f1:d6:49:06:
         d9:dd:1f:24:e3:44:f1:11:26:cc:45:6a:79:3b:0a:20:f2:cb:
         92:3c:eb:a4:c1:ce:fe:9c:b6:64:7c:01:4f:da:fe:5d:74:73:
         c0:0e:33:3c:33:8e:9b:96:5b:3f:35:a0:22:0d:e2:9b:02:98:
         cc:52:d8:ef:d9:7d:bb:39:fa:dd:aa:b4:ac:17:1e:e1:95:0c:
         58:61:ea:cc:82:20:35:6e:aa:07:1f:a2:c0:b8:fc:f1:e0:45:
         3b:01:bd:18:93:05:fe:22:37:a6:de:01:4e:e2:fb:8d:0e:65:
         37:24:02:5d:03:a8:0b:15:d4:c0:de:29:f4:93:1b:d7:bd:4f:
         fb:87:20:f4:79:5d:b5:87:ac:0c:a6:55:32:98:2e:68:fb:26:
         f2:75:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----