Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42tjN0xv0AkMdQFJsEnu3ZLYn2k.cer
File:                     42tjN0xv0AkMdQFJsEnu3ZLYn2k.cer (raw, json)
Hash identifier:          WybqaM7T/Mt581Vfw+yiEYswnJHKu2dCSOcrumxz/yQ=
Subject key identifier:   E3:6B:63:37:4C:6F:D0:09:0C:75:01:49:B0:49:EE:DD:92:D8:9F:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7CDBCCD05B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/a708dd-8632-4abf-a095-4f9aa062ba05/1/42tjN0xv0AkMdQFJsEnu3ZLYn2k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/a708dd-8632-4abf-a095-4f9aa062ba05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:12:32 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.133.124.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536263577691 (0x7cdbccd05b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:12:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e36b63374c6fd0090c750149b049eedd92d89f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:bd:f4:ff:09:6e:1f:4b:a5:0c:57:83:ec:
                    dc:d6:69:2b:3a:40:70:66:fc:cc:71:5b:d9:92:9b:
                    ef:7f:3e:d2:f5:0f:62:48:e4:63:78:ae:30:f1:65:
                    c0:5d:a8:65:46:7f:d4:53:ce:06:59:b6:b0:b8:97:
                    99:de:08:de:c3:27:07:7d:45:d4:e8:06:8c:72:a0:
                    7c:ed:d7:85:2e:9c:85:2b:09:0d:84:8e:a7:df:a5:
                    bc:c8:07:9c:7c:36:13:f1:27:ae:59:ba:0b:ac:f7:
                    81:00:d2:dc:a3:82:24:84:d8:fa:f4:5f:3c:00:81:
                    28:77:d8:02:71:bc:77:4b:0e:88:63:65:a0:08:fb:
                    eb:3a:7e:f9:a4:6c:19:3e:35:40:c7:5b:95:bf:64:
                    f2:f9:66:7b:e2:69:f7:b7:cd:b5:02:45:7e:e9:c6:
                    b2:18:57:12:f9:e3:45:8e:79:05:19:57:dd:93:e1:
                    bb:b6:cb:87:12:e6:55:00:02:7b:42:80:e6:18:6e:
                    d9:22:51:1e:73:52:49:95:9c:76:e5:be:e9:e0:cc:
                    af:a6:0b:e3:5d:54:ab:8d:d8:09:f2:c2:9c:26:80:
                    7b:c3:c2:0f:63:41:e6:50:bc:02:a3:99:a7:69:04:
                    1a:0d:6d:bc:62:3b:6e:3a:ff:08:0c:b9:1a:dc:96:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:63:37:4C:6F:D0:09:0C:75:01:49:B0:49:EE:DD:92:D8:9F:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a708dd-8632-4abf-a095-4f9aa062ba05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a708dd-8632-4abf-a095-4f9aa062ba05/1/42tjN0xv0AkMdQFJsEnu3ZLYn2k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:e6:c3:8f:5b:22:ea:a2:1e:37:5c:0a:ad:e0:1e:d4:c0:
         1f:73:5a:9a:c0:88:9e:1a:cb:08:43:33:7b:5b:b0:4b:fe:b6:
         c4:6c:15:69:98:b3:cc:b3:7a:01:26:ff:3d:dc:fa:92:ca:9f:
         60:d7:49:1a:f6:f4:a9:16:b2:99:e7:4a:cf:2b:98:21:ec:d2:
         37:1b:e3:ce:89:43:15:69:5e:13:84:f1:8f:22:de:59:93:19:
         53:bc:b8:d7:70:04:a9:d4:e2:70:5e:a2:c1:58:90:32:d9:b8:
         cb:fe:00:c7:9d:af:c3:a1:66:de:50:d5:1b:71:51:b1:44:c6:
         61:98:ef:a3:a3:f6:d6:28:37:ac:bb:3c:b2:d0:67:cd:a4:e7:
         ba:47:61:ac:37:86:db:13:d3:68:8f:48:a4:42:60:7b:bd:18:
         c2:bf:e4:fd:b7:b5:d9:59:9d:c4:1f:b8:2e:2a:ee:c7:03:45:
         58:16:48:36:b6:28:70:11:7f:d4:24:77:94:76:03:74:b6:9b:
         ac:53:00:8e:5e:0f:f6:b7:59:b6:df:9f:5c:58:39:bb:70:ca:
         3f:a0:de:bc:ee:93:b1:fd:21:fa:b3:d4:97:3d:bc:cf:d4:77:
         1e:8b:54:5b:97:3f:06:dd:6d:88:a6:a0:f0:e6:84:41:4b:bb:
         54:96:f7:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----