Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Ld2lg5fldzMFODom2pNp7eh9w0.cer
File:                     4Ld2lg5fldzMFODom2pNp7eh9w0.cer (raw, json)
Hash identifier:          6z7FWZBpPjaYV9coOf1EDnO1DPSsh5tImE9ZDNBK7v0=
Subject key identifier:   E0:B7:76:96:0E:5F:95:DC:CC:14:E0:E8:9B:6A:4D:A7:B7:A1:F7:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77A7A0AEBE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/37/1b6626-fc1e-4301-921d-85f1b9de84c8/1/4Ld2lg5fldzMFODom2pNp7eh9w0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/37/1b6626-fc1e-4301-921d-85f1b9de84c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:55:59 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.159.44.0/22
                          IP: 2a0f:7180::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513913433790 (0x77a7a0aebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:55:59 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e0b776960e5f95dccc14e0e89b6a4da7b7a1f70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:f8:64:62:36:27:1a:a2:66:ff:da:10:e0:
                    22:bc:22:e9:47:01:d7:b8:30:a4:b4:4a:a3:72:7d:
                    7b:41:fa:26:5e:7e:cf:7c:a5:bf:fa:ac:66:5c:a1:
                    4c:b1:46:48:d1:3b:9f:70:7b:09:cb:e6:0c:0a:f5:
                    3c:f4:b7:39:4b:59:83:d6:c8:6f:b8:4f:f9:46:95:
                    86:2a:da:76:73:bd:54:84:f1:6c:44:21:1f:fb:01:
                    a6:6d:bf:8e:4e:b8:3d:18:2f:66:82:4e:ac:f9:36:
                    27:4c:62:be:be:ae:03:23:d3:a9:cf:35:e0:6e:1d:
                    da:a9:78:fb:94:41:ea:a1:ed:d4:b9:d2:56:fc:e6:
                    1e:0f:41:d3:06:c4:7a:10:ae:20:f8:1b:e7:49:87:
                    4b:a0:b3:78:e4:69:53:de:6f:c5:1c:64:b1:99:04:
                    da:1d:49:76:7d:06:89:95:0a:2a:36:bc:51:48:98:
                    8d:c6:fc:5c:c9:7f:e6:e8:73:c0:ce:60:ec:7d:92:
                    40:20:a7:2f:0c:f0:2e:74:9e:f3:d0:9e:f8:ad:4b:
                    79:08:e1:0f:12:bc:aa:d4:b6:17:d0:f7:5f:14:f4:
                    ba:8a:be:7e:0f:22:48:b1:3c:e4:4a:85:84:62:29:
                    22:c4:b9:ff:aa:be:fa:7c:46:6a:c0:3b:dc:24:c1:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B7:76:96:0E:5F:95:DC:CC:14:E0:E8:9B:6A:4D:A7:B7:A1:F7:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1b6626-fc1e-4301-921d-85f1b9de84c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1b6626-fc1e-4301-921d-85f1b9de84c8/1/4Ld2lg5fldzMFODom2pNp7eh9w0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.44.0/22
                IPv6:
                  2a0f:7180::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:4a:e8:7a:7d:8a:c4:94:1b:b3:2c:71:27:04:d2:bc:2a:
         54:1a:39:98:b1:9d:a9:6f:47:c7:53:24:db:04:a0:4a:f5:22:
         22:21:1c:96:03:7e:77:e1:da:25:e9:ad:e1:96:2f:26:bd:6b:
         ec:f8:5f:4d:21:48:c9:ba:a1:64:41:f8:57:e1:06:d6:30:7b:
         88:43:1c:6e:eb:84:ba:c1:ab:d9:6b:75:32:e1:d9:30:34:ca:
         a7:7d:95:f9:68:c6:6b:8e:16:f3:66:78:61:c7:3b:d6:3a:4d:
         a7:4a:53:4b:e9:1c:53:d5:2c:6f:24:3e:ff:a5:e0:af:21:f4:
         20:07:17:47:b1:cb:ce:42:de:e6:33:de:ef:a3:76:ab:38:fd:
         0d:90:56:05:61:63:1d:6c:3e:e4:e1:cc:04:3d:a5:e3:27:c2:
         e6:62:83:8d:66:ce:e8:ef:e4:4b:28:80:4d:96:f6:1f:42:27:
         58:13:db:d9:06:12:bd:98:18:15:f7:70:9f:c5:c3:7f:30:2c:
         b7:c9:9e:98:9b:da:c0:51:5c:26:09:2a:d2:a2:e1:af:06:04:
         1c:be:7f:7f:45:cf:3e:5e:28:63:0f:1d:c5:60:c6:e0:10:59:
         9e:02:2b:61:b4:26:93:39:09:64:c9:d6:d8:f3:f5:38:d8:dd:
         bc:1f:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----