Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4LpvOTGBSv9Q7W5K2indSABeZuA.cer
File:                     4LpvOTGBSv9Q7W5K2indSABeZuA.cer (raw, json)
Hash identifier:          lwO26v6KzNFgRY28zUpVjvlOVQq8oB0amTd1ECuhWZo=
Subject key identifier:   E0:BA:6F:39:31:81:4A:FF:50:ED:6E:4A:DA:29:DD:48:00:5E:66:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       767E20C4E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/b979bb-295e-4e11-a70c-0a0455f95b64/1/4LpvOTGBSv9Q7W5K2indSABeZuA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/b979bb-295e-4e11-a70c-0a0455f95b64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:28:43 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 197291
                          IP: 194.36.0.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508922217702 (0x767e20c4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:28:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e0ba6f3931814aff50ed6e4ada29dd48005e66e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:47:ee:ee:d5:1e:ab:04:73:42:c1:73:51:
                    5b:34:9e:ce:ee:83:51:4f:8b:19:36:4f:75:8d:77:
                    30:14:de:4b:98:38:c6:35:6b:16:cf:fd:2a:cc:18:
                    1c:96:e1:d1:71:d4:5f:a5:77:f6:8f:86:0d:bc:45:
                    33:82:6f:ac:8d:4d:a1:68:4f:08:58:ea:df:6f:b8:
                    3e:20:be:74:ad:7e:61:48:c5:62:9d:d0:c6:12:13:
                    46:76:f1:5c:9c:f1:19:af:12:1c:bc:d4:49:4b:77:
                    9b:1b:46:06:a9:e0:1b:c8:3e:33:88:67:b5:34:23:
                    55:9a:90:68:93:d1:3b:c4:e4:b4:a6:aa:92:5c:34:
                    c0:fb:a8:29:b9:01:73:c9:d4:72:2c:6f:90:7d:2e:
                    a8:00:40:0a:f8:aa:17:1d:f8:05:66:b1:97:55:fd:
                    83:e9:53:62:98:5c:b8:49:d4:7c:cb:4a:11:a0:10:
                    b0:2d:76:d2:9e:15:5d:04:d9:c6:9c:47:36:c7:06:
                    b7:c1:93:9d:20:26:25:0a:1c:d7:18:d0:e2:fb:fe:
                    bf:a5:5a:5f:1a:c0:af:e3:1d:3a:c7:ce:dc:82:48:
                    de:a4:19:27:59:97:77:f1:e3:ae:17:b8:3f:4f:c2:
                    5e:18:c6:91:cd:c6:47:be:88:77:a3:06:b8:9b:57:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:6F:39:31:81:4A:FF:50:ED:6E:4A:DA:29:DD:48:00:5E:66:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b979bb-295e-4e11-a70c-0a0455f95b64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b979bb-295e-4e11-a70c-0a0455f95b64/1/4LpvOTGBSv9Q7W5K2indSABeZuA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.0.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197291

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:72:f5:97:ca:a6:84:36:2f:b7:03:f8:d0:fa:c1:9b:8b:
         d3:a7:4f:98:9b:5a:02:9d:62:be:77:6c:da:a5:1b:30:b7:73:
         63:29:d8:e3:13:76:6b:81:00:6e:6c:a8:b8:af:30:e4:1f:76:
         f8:64:22:02:1e:e6:4b:7e:39:f9:a8:34:82:6d:bc:6e:d5:f6:
         1a:f8:54:34:16:19:5b:46:48:e0:79:b1:4a:30:0c:d3:55:71:
         d8:4e:ff:2d:f8:a2:fa:d2:15:e6:64:46:94:e7:02:2b:12:38:
         f3:0f:41:a0:85:8b:d3:5e:54:5f:fe:db:93:3a:1e:2a:b0:86:
         d0:3f:17:52:cd:c4:bb:b4:9f:5c:6e:a3:7c:17:3d:ed:e7:f1:
         b0:a8:a6:85:13:26:79:01:51:04:a0:5b:4d:16:d9:44:15:71:
         40:cb:06:a7:7c:39:32:c1:d7:28:f0:7f:71:be:d1:45:4d:ec:
         2d:e8:0b:d8:e6:7f:26:44:0f:c8:ee:60:3d:f1:ce:a5:ac:8e:
         4b:13:89:5e:aa:0f:6b:b9:bb:a0:b1:63:bd:2e:04:cd:db:fa:
         12:1e:13:cd:f9:89:7f:ec:93:e7:4d:91:82:b0:9c:8b:c5:cd:
         73:99:56:5c:04:17:54:f4:55:ce:f3:9e:27:57:da:c3:cd:dd:
         ed:dd:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----