Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48WV387n0x0QGRTZzNNMRMQuzew.cer
File:                     48WV387n0x0QGRTZzNNMRMQuzew.cer (raw, json)
Hash identifier:          NsbEgG5ypJSipyYZIMgHRqOrHBTHd26Yovz/9Q75Xwo=
Subject key identifier:   E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       83492F3F3B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/48WV387n0x0QGRTZzNNMRMQuzew.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:06:01 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.90.244.0/22
                          IP: 2a0e:940::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563868548923 (0x83492f3f3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:06:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e3c595dfcee7d31d101914d9ccd34c44c42ecdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:37:87:74:b0:45:fa:38:dd:e6:5d:a1:20:
                    b7:b6:66:2e:a7:2d:fa:e6:80:be:57:db:93:32:2c:
                    92:f4:50:f5:0a:a5:07:d5:6a:e7:a5:1e:60:79:d3:
                    38:b2:bd:3c:00:0e:26:92:a6:cd:38:82:ff:fa:fe:
                    32:0f:1c:be:70:05:c7:65:95:f6:65:a9:01:f9:13:
                    d4:da:b2:f6:54:f7:06:0d:74:33:9c:a8:9e:9f:0b:
                    fd:96:f5:cd:d9:5b:82:7d:c7:00:3e:ae:69:b2:99:
                    e5:7b:49:ed:bf:89:d2:ef:2b:34:e1:eb:4e:88:58:
                    76:28:17:4e:02:fc:b3:a0:0c:ae:1d:95:ef:e0:ad:
                    d7:94:24:a4:b1:2e:77:6b:42:02:bf:30:85:9d:05:
                    8e:29:8b:b5:6f:cb:f5:66:dc:7b:c5:db:ec:be:d3:
                    8b:a8:be:b5:60:e2:7b:49:c4:0b:9e:9f:6c:d5:82:
                    51:8f:89:a8:63:31:e9:d8:0b:e2:50:98:30:b4:d2:
                    3e:c0:72:81:7b:86:71:ca:46:e1:a9:ad:01:55:15:
                    d4:46:5c:ae:7a:de:d0:c8:5e:a5:4e:d0:99:fd:78:
                    24:55:c2:74:9d:6c:58:c5:b0:af:32:37:63:81:d6:
                    71:57:cd:5e:3a:9c:2f:6d:a8:2f:15:e7:6a:b8:7a:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:95:DF:CE:E7:D3:1D:10:19:14:D9:CC:D3:4C:44:C4:2E:CD:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6c45b4-80fc-4c70-8320-8270150f4027/1/48WV387n0x0QGRTZzNNMRMQuzew.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.244.0/22
                IPv6:
                  2a0e:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:2d:97:73:89:24:f7:0e:db:d4:9d:c1:60:31:6e:26:67:
         e0:cf:b1:14:ce:35:6f:30:0e:b7:85:34:64:61:57:88:ff:1a:
         91:94:92:58:a4:ff:0a:2f:ff:11:c5:48:11:2b:c6:d5:fc:c5:
         cf:e5:f4:e2:dc:eb:2f:da:33:00:9a:5f:44:45:41:f7:de:1b:
         f3:ed:fd:72:59:27:72:82:d5:8f:59:de:99:50:f1:b6:c3:c5:
         28:e2:9f:f3:7b:2a:43:e9:19:d9:23:3e:5a:b3:98:d7:53:6e:
         a7:4e:d1:6f:3c:81:09:2e:bc:3f:db:28:f4:25:07:bf:f6:41:
         12:17:ca:0f:8d:e6:29:ef:1b:e0:48:5b:b7:49:ed:77:c8:9e:
         28:15:e8:15:9b:be:78:3a:fe:56:e6:62:27:7a:7a:27:10:46:
         7e:5d:a5:6f:85:95:e3:45:2d:7c:0f:18:ad:9c:1f:78:41:70:
         dd:6e:0c:d1:e0:3a:3b:f9:68:b9:4f:37:2e:c8:d8:a4:1c:32:
         54:1f:25:34:b0:a7:02:e0:70:21:72:04:ee:d8:db:62:0d:f2:
         a6:e4:38:e9:4b:da:1a:2a:fd:0a:90:32:1f:00:f1:1a:57:49:
         ab:7a:17:4e:49:ae:0d:81:e9:37:a7:48:31:dd:87:e4:a4:d3:
         49:1e:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----