Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46PDDEqfjPGwQJVqKSg-mjTnOtQ.cer
File:                     46PDDEqfjPGwQJVqKSg-mjTnOtQ.cer (raw, json)
Hash identifier:          RyoqJNfHQRmoAo23KX9sewYHHbez2QBKomV7OiSL/P0=
Subject key identifier:   E3:A3:C3:0C:4A:9F:8C:F1:B0:40:95:6A:29:28:3E:9A:34:E7:3A:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5DD2C579F8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/d13ecb-95cd-42fe-a04c-8d9e9413df0f/1/46PDDEqfjPGwQJVqKSg-mjTnOtQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/d13ecb-95cd-42fe-a04c-8d9e9413df0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:06:16 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 208588
                          IP: 45.95.8.0/22
                          IP: 2a0e:32c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402968115704 (0x5dd2c579f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:06:16 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e3a3c30c4a9f8cf1b040956a29283e9a34e73ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:ca:8b:09:e0:15:8c:ee:d2:ff:e2:da:12:
                    4c:e7:e3:48:16:80:bd:ba:04:1b:a3:0f:64:e9:9a:
                    1e:e6:79:78:9b:cf:2c:c4:27:35:4a:ac:8f:16:0d:
                    5f:5d:d7:a3:c0:a0:41:3b:d4:25:5f:e1:a1:f9:d5:
                    5a:57:df:0d:27:f7:30:4b:b9:6b:87:22:ea:0e:f1:
                    12:28:f2:41:0f:94:ed:8d:96:a0:f6:79:94:8a:06:
                    5a:02:ea:7f:a7:03:c2:c8:8f:e0:e0:60:5e:3c:22:
                    45:28:2e:29:bd:e6:32:33:9d:56:4c:af:e0:c2:0b:
                    80:ea:e8:85:8a:0b:a5:94:58:4d:a2:93:a5:73:87:
                    80:8b:4c:fd:eb:e3:94:fe:37:88:de:02:d6:1a:ce:
                    e6:ec:a9:6d:e1:6b:c8:2f:bd:a1:fb:d9:fe:84:21:
                    e1:c4:8a:a9:f5:bb:0d:75:ee:cf:9e:e1:30:56:35:
                    ff:fe:74:0f:0d:46:14:65:3a:38:cc:ab:5c:0c:59:
                    14:c3:b7:d9:23:b3:fc:a0:65:d3:c5:1c:75:c0:4a:
                    e4:25:00:91:8c:7e:8f:af:71:bf:17:cf:0c:27:de:
                    7b:33:84:ba:94:d4:93:49:30:7e:7f:11:73:25:92:
                    79:50:8e:f0:87:27:b4:3b:4e:2e:9f:1a:73:d4:e3:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A3:C3:0C:4A:9F:8C:F1:B0:40:95:6A:29:28:3E:9A:34:E7:3A:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d13ecb-95cd-42fe-a04c-8d9e9413df0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d13ecb-95cd-42fe-a04c-8d9e9413df0f/1/46PDDEqfjPGwQJVqKSg-mjTnOtQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.8.0/22
                IPv6:
                  2a0e:32c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208588

    Signature Algorithm: sha256WithRSAEncryption
         19:f3:17:71:92:c1:38:84:20:64:7e:94:0d:31:75:3e:4c:47:
         68:c0:3a:6f:e9:78:51:0c:2b:2a:8d:05:ab:c1:af:66:e5:a4:
         0b:db:46:b4:3a:0a:35:7f:31:94:52:98:49:5f:04:fd:49:50:
         78:e4:ca:d4:9a:97:2b:75:12:68:cb:9d:05:84:c1:bd:40:d6:
         07:0d:95:4a:97:db:ae:81:e8:63:6e:95:cd:eb:97:0e:5f:90:
         db:5b:6b:e5:0e:74:2e:d1:12:0b:50:6a:00:71:7a:b6:56:87:
         21:a9:75:01:ee:13:94:08:d3:bd:65:3c:65:ca:d9:3c:61:a7:
         5a:1d:79:81:3c:66:7e:32:03:47:e6:9d:7e:10:f9:4d:ae:43:
         d9:48:b6:23:06:01:6e:a0:07:c1:5c:1d:43:1c:93:f6:c1:fe:
         49:5c:15:53:83:ab:d1:92:1d:e6:e2:5d:21:6c:18:8c:82:e5:
         89:f8:0c:4d:58:0e:d7:e8:47:3b:9a:92:34:78:b2:cc:90:0c:
         a1:54:71:b0:95:1c:df:16:e0:b4:8d:a0:f6:44:85:02:d9:bb:
         46:f0:d5:d8:bd:09:db:92:b7:84:b2:91:f8:c4:61:1b:9d:aa:
         76:41:95:af:7a:f0:ff:e9:94:34:37:69:55:e9:3a:3a:d9:ba:
         87:12:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----