Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4G2FUPO2KCqgVBxRwTdXADsBThw.cer
File:                     4G2FUPO2KCqgVBxRwTdXADsBThw.cer (raw, json)
Hash identifier:          MiyyEc8BZ9FIgVODJWuuMdUk5pI980gvY+AeZORmULk=
Subject key identifier:   E0:6D:85:50:F3:B6:28:2A:A0:54:1C:51:C1:37:57:00:3B:01:4E:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5BA4CD373A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f8/c3926e-10d3-4668-9929-ba4bd91f77ca/1/4G2FUPO2KCqgVBxRwTdXADsBThw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f8/c3926e-10d3-4668-9929-ba4bd91f77ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:55:27 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.252.132.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393606936378 (0x5ba4cd373a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:55:27 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e06d8550f3b6282aa0541c51c13757003b014e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:53:d5:36:4b:a7:8d:84:c2:02:02:1b:de:
                    f8:67:8b:b4:26:aa:ae:b6:d8:ae:47:c7:5a:67:8f:
                    42:05:53:17:bd:53:ef:3e:55:ad:44:df:f1:33:9e:
                    03:25:ea:f6:0f:8e:3b:63:c3:31:2f:e5:f6:59:2c:
                    48:2f:f9:a3:52:c9:f1:b3:52:0d:a4:7d:8f:ba:a0:
                    12:d4:35:39:e5:f6:bb:a7:5f:6a:ef:30:65:fd:0b:
                    ac:c7:75:86:e6:f6:33:d6:df:a2:5b:e1:59:83:fe:
                    6e:76:00:09:9a:e5:93:74:17:5c:f9:60:31:f8:cb:
                    47:75:51:9e:06:f1:2a:58:69:28:cb:38:a9:24:52:
                    4e:14:c4:df:47:2c:19:26:91:bc:9f:e9:5a:7d:27:
                    4a:15:bd:f8:c7:92:ea:a6:c9:58:b9:cb:48:26:5f:
                    fd:01:39:82:39:c7:5b:e1:fe:1c:1d:91:a6:d0:f7:
                    49:eb:2b:69:77:37:18:e7:fe:58:5e:27:ad:19:1e:
                    c2:27:92:83:c4:3c:4e:2f:08:e9:06:2e:f6:b6:e3:
                    69:ef:9a:a7:af:ed:ca:ee:f0:15:45:41:92:f4:97:
                    02:4d:87:e4:68:0d:5b:9c:c1:60:f6:d0:26:98:74:
                    56:7c:54:d3:f7:de:0a:d3:4d:24:7f:c2:91:e9:c1:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:85:50:F3:B6:28:2A:A0:54:1C:51:C1:37:57:00:3B:01:4E:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c3926e-10d3-4668-9929-ba4bd91f77ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c3926e-10d3-4668-9929-ba4bd91f77ca/1/4G2FUPO2KCqgVBxRwTdXADsBThw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:fe:25:4f:d0:3e:97:3b:7f:ec:bf:bf:8d:e2:1a:0c:41:
         6d:d3:83:cf:b8:95:69:cc:9b:67:22:16:ee:fd:e6:1c:9f:62:
         c0:b9:10:4f:82:1b:0f:f3:2c:a0:7b:32:ab:9f:5d:f4:c5:09:
         d1:c9:a4:07:af:19:bf:38:ba:5d:33:63:10:ce:b8:ee:e7:e4:
         21:13:9d:7e:23:ec:d7:b4:f4:26:01:9b:f4:00:2b:63:68:aa:
         62:7a:bf:09:51:bc:5f:19:b5:7d:7a:db:50:be:ef:d7:7d:c8:
         65:6d:8b:f5:f4:b4:35:c9:29:0b:66:30:5a:43:cf:87:66:00:
         04:69:31:5e:10:5e:75:cd:e2:c7:4e:36:d8:07:83:91:7b:03:
         cb:bd:e7:59:72:e7:1c:59:81:fe:f0:1a:e7:7b:30:28:96:31:
         17:94:5a:54:4a:89:83:1b:86:06:5c:f4:7d:36:b3:84:cc:26:
         00:1e:35:f6:7b:30:2f:c0:fa:f4:aa:97:a9:95:b9:46:32:15:
         b8:82:68:8b:82:85:06:2d:cd:ca:fd:11:94:10:c2:30:ae:f7:
         48:8e:5e:98:b1:25:65:21:c1:83:40:af:ff:62:48:14:c6:b5:
         39:1c:c0:b8:50:ca:a4:0d:9d:2e:93:f7:2a:d1:fc:0e:5c:bc:
         23:3a:29:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----