Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4CwoKDRT8d9qUL-VSOXItBd2Qso.cer
File:                     4CwoKDRT8d9qUL-VSOXItBd2Qso.cer (raw, json)
Hash identifier:          kA0BR/FVE/pCIew5KGL7om/9ggXmEsPT++1Q3zoWwWs=
Subject key identifier:   E0:2C:28:28:34:53:F1:DF:6A:50:BF:95:48:E5:C8:B4:17:76:42:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       76DD43A77D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/ff8111-2e2e-4a91-93c2-c8e206c9efec/1/4CwoKDRT8d9qUL-VSOXItBd2Qso.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/ff8111-2e2e-4a91-93c2-c8e206c9efec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:37:48 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.90.204.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510518339453 (0x76dd43a77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:37:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e02c28283453f1df6a50bf9548e5c8b4177642ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:5a:3d:3a:ef:2b:3a:e9:b0:c6:4a:d8:13:
                    06:ed:96:84:11:6a:0c:cf:35:14:68:c7:d0:ee:1c:
                    9e:3e:13:ae:29:03:1a:fe:52:31:70:ee:27:2d:8b:
                    08:88:37:99:b3:99:f3:3e:ef:99:0b:2b:31:ad:bf:
                    36:b8:f4:8f:08:d7:42:2f:80:f8:bb:17:f3:17:3e:
                    6a:ea:b4:9b:1e:a8:a3:30:b1:66:d6:a1:c8:dc:02:
                    a4:ff:5c:a5:90:b7:68:32:7c:6c:eb:02:e5:f8:ab:
                    a5:70:37:28:73:0c:bf:de:e3:fc:d2:40:f5:59:bb:
                    69:e1:a7:3d:b3:66:93:5f:c0:45:83:49:de:2f:27:
                    eb:bb:52:ac:56:18:0f:f3:bd:69:7a:cb:c7:e3:a6:
                    e5:91:63:54:8d:9f:2b:b9:a8:ea:01:88:d7:1d:a5:
                    6e:46:c8:b1:6d:c3:41:a9:78:96:dc:4c:68:a4:b2:
                    01:78:73:9a:38:00:8e:f7:2b:5f:71:ad:cf:9b:6e:
                    6f:0b:af:da:7f:42:3f:48:1f:22:18:85:5d:df:82:
                    7b:52:e8:b9:4a:28:bd:aa:d4:08:47:ca:be:c0:8d:
                    0f:66:7a:a3:de:09:e7:06:b6:97:49:f3:12:78:d3:
                    fc:00:05:0f:c1:5b:66:c8:73:18:16:9c:16:d9:28:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:28:28:34:53:F1:DF:6A:50:BF:95:48:E5:C8:B4:17:76:42:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ff8111-2e2e-4a91-93c2-c8e206c9efec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ff8111-2e2e-4a91-93c2-c8e206c9efec/1/4CwoKDRT8d9qUL-VSOXItBd2Qso.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:04:f5:49:74:33:eb:e3:cd:87:ad:ba:75:a8:6d:e9:af:09:
         65:a3:5e:dd:c4:42:e7:0e:02:99:51:12:aa:b5:87:1a:06:8a:
         1c:10:32:ce:f6:0c:dd:63:36:7d:56:14:c3:5e:08:df:b2:0e:
         e9:ed:b0:9e:9f:11:d3:45:27:38:ed:8f:4c:13:96:c8:cd:f7:
         57:03:fc:4b:4f:12:c6:5e:6b:b5:f7:50:60:b4:f8:c9:3a:b7:
         91:eb:6f:fe:c2:96:6b:8f:e7:e2:5e:bd:ab:0a:b0:b5:d7:0e:
         34:20:00:45:e8:ff:44:5a:4e:65:08:42:95:ae:22:df:e6:8d:
         51:e9:f2:da:26:b7:d8:5f:09:d5:cc:ec:36:18:01:4e:2e:9e:
         a8:e8:64:ac:c1:a4:6a:a7:72:da:88:e9:ba:53:44:10:fb:4d:
         25:7d:21:7f:3f:11:8a:7b:38:57:23:3d:e3:28:3c:86:15:fc:
         ca:5c:80:55:79:23:63:18:14:ab:b1:e8:fe:df:b1:ab:30:10:
         fd:66:57:23:a8:80:3b:41:a1:b7:79:67:41:5b:0b:55:35:bb:
         d8:86:89:36:f0:dd:d1:fe:87:72:30:cc:0f:e1:95:ec:28:a1:
         56:1e:ea:5a:51:19:d3:44:f3:44:3d:5d:30:e9:c5:20:d7:bd:
         da:0e:b3:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----