Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a1aT-lPtmeUNWQWcYokRKMrT-I.cer
File:                     4a1aT-lPtmeUNWQWcYokRKMrT-I.cer (raw, json)
Hash identifier:          DIJGJXFNKBG8kEuNdeznkMoykEdF685hlqT0qtdDi6g=
Subject key identifier:   E1:AD:5A:4F:E9:4F:B6:67:94:35:64:16:71:8A:24:44:A3:2B:4F:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6236B6A863
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/45c7a4-598c-45e0-92c8-e76133c9da96/1/4a1aT-lPtmeUNWQWcYokRKMrT-I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/45c7a4-598c-45e0-92c8-e76133c9da96/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:28:08 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 208543
                          IP: 192.144.56.0/22
                          IP: 2a0f:3300::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421824735331 (0x6236b6a863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:28:08 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e1ad5a4fe94fb66794356416718a2444a32b4fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:9a:d1:5a:b8:96:54:f8:bf:9b:a6:f1:78:
                    35:0b:ec:77:92:d2:9b:4a:2c:27:7b:f5:46:20:93:
                    42:58:35:e1:c2:41:e2:1d:cd:a2:c0:48:ca:af:ca:
                    74:6c:96:e2:3c:49:14:f9:84:63:d5:96:ee:bc:84:
                    af:7a:bc:c6:9a:43:74:2f:5d:48:f1:82:a5:8a:a7:
                    43:30:12:1e:85:63:11:36:7e:a2:bd:a7:f8:6d:75:
                    ec:42:53:12:aa:82:ee:00:00:d5:41:21:40:0a:0c:
                    ee:df:14:15:1b:89:11:87:e4:5c:d7:0b:14:30:33:
                    44:fb:c2:0f:25:0a:53:85:a0:92:9f:51:40:50:92:
                    d3:ea:9c:20:48:84:52:c3:94:a6:c4:aa:8e:62:e1:
                    c1:a9:e8:c8:09:4b:75:37:d8:ee:25:c4:99:c0:e0:
                    f9:8f:11:4b:97:38:94:74:fa:13:c3:a7:2a:e6:cd:
                    b0:73:fc:a2:5b:cc:af:ad:19:89:86:81:81:ea:9c:
                    76:4a:69:cd:09:2d:df:7e:da:cd:83:d5:cc:5a:bf:
                    9e:db:f4:05:11:dd:fa:49:6f:45:e3:47:b8:72:74:
                    62:a6:2f:18:13:6d:68:9b:06:98:0d:5d:e1:50:0e:
                    19:7d:e6:76:e9:27:0d:08:a6:8f:a9:2b:d7:98:a2:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:5A:4F:E9:4F:B6:67:94:35:64:16:71:8A:24:44:A3:2B:4F:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45c7a4-598c-45e0-92c8-e76133c9da96/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45c7a4-598c-45e0-92c8-e76133c9da96/1/4a1aT-lPtmeUNWQWcYokRKMrT-I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.56.0/22
                IPv6:
                  2a0f:3300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208543

    Signature Algorithm: sha256WithRSAEncryption
         78:44:8b:a1:01:ea:39:b1:9c:62:29:a7:96:88:76:44:e1:db:
         64:ef:ae:9a:16:3e:e3:55:f4:2b:b6:00:b5:97:a8:a0:c3:7d:
         13:e6:b8:20:5a:73:0e:d4:b8:3b:04:02:7b:fc:75:e3:1b:74:
         4e:4b:d1:fd:0a:cb:f9:aa:86:9c:79:9f:ce:72:7c:cb:19:19:
         65:0a:19:ad:bc:15:64:99:2e:d1:c9:db:a0:94:01:b7:8c:95:
         82:cb:b5:78:32:5c:1d:0b:72:cd:f7:eb:3e:ed:e7:57:aa:52:
         85:b3:5b:56:7a:fe:32:3c:81:fe:68:b7:64:b1:51:65:76:84:
         12:9d:1e:cb:52:43:fb:cf:fa:6e:ec:81:16:74:40:2c:30:29:
         b3:53:53:18:da:e0:8a:ff:62:8e:ce:41:b8:1d:20:f9:a4:95:
         c7:ce:75:8c:be:ab:28:bd:a7:39:a8:b7:4b:55:a5:50:5f:ab:
         6a:c4:7a:17:1d:f2:65:cf:d7:ac:d1:08:14:03:aa:ba:6f:d2:
         15:02:4f:82:5f:8d:4c:1c:0f:2f:fc:97:ec:ce:ef:92:e1:40:
         c3:e1:aa:60:dc:7b:e8:08:0d:48:7e:cb:c1:eb:34:e4:c4:e0:
         91:ea:bf:bc:28:02:f4:a4:87:9d:5b:80:8e:c5:80:48:0f:17:
         ed:44:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----