Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52H46ZTGDx52RWOVrnWsdQtNnro.cer
File:                     52H46ZTGDx52RWOVrnWsdQtNnro.cer (raw, json)
Hash identifier:          fdPNqR4xT0KIaOEr6hjQjlwaEYgfg71YqhSETbfUHy8=
Subject key identifier:   E7:61:F8:E9:94:C6:0F:1E:76:45:63:95:AE:75:AC:75:0B:4D:9E:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7078022B69
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/47b740-f085-4a70-9759-9c48425eaccf/1/52H46ZTGDx52RWOVrnWsdQtNnro.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/47b740-f085-4a70-9759-9c48425eaccf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Oct 2020 18:52:41 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 51026
                          AS: 204544
                          IP: 185.53.140.0/22
                          IP: 185.126.202.0/23
                          IP: 2a0a:2fc4::/30
                          IP: 2a0d:9680::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483049745257 (0x7078022b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 15 18:52:41 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e761f8e994c60f1e76456395ae75ac750b4d9eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:c3:ad:0e:3b:5a:1f:56:44:97:cb:fc:d0:
                    5d:ff:78:ff:d7:40:14:a5:c9:a1:d0:c2:34:c1:4b:
                    f6:20:43:2f:45:6b:27:55:6a:69:58:00:c3:3a:03:
                    6f:bb:54:19:65:53:53:c4:f4:df:67:24:ff:05:47:
                    bf:8e:70:50:44:c5:72:69:1d:67:b1:d2:7c:0d:6b:
                    fb:3e:46:23:63:aa:10:a4:9b:0a:9a:7e:2c:3b:13:
                    49:a7:cf:d4:dc:25:9d:63:60:b9:46:05:71:ed:71:
                    32:8a:b4:95:eb:45:dd:40:19:ac:f9:6a:1a:e0:d1:
                    ca:c9:6a:04:2f:23:3c:ec:77:8a:cf:e1:e1:65:ce:
                    f5:34:74:bf:b1:20:75:df:f6:8c:0a:c0:73:4a:c5:
                    7c:bd:e8:b8:9c:0d:0f:c8:64:a1:f7:7d:8b:76:9e:
                    4a:36:fd:ac:0f:5f:7e:ae:9d:1c:35:9e:53:62:38:
                    7c:61:06:f2:34:8e:04:b0:a1:e6:f9:02:9f:4d:1f:
                    da:a9:77:20:74:ce:fa:25:27:ba:bb:1a:55:70:b1:
                    df:90:ff:e1:9a:48:1e:13:5d:aa:b1:bd:ed:29:79:
                    97:4b:89:c5:d5:49:a5:5b:0c:aa:22:75:05:3d:7f:
                    10:9b:45:04:09:92:06:0e:0b:41:40:b6:22:34:f7:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:F8:E9:94:C6:0F:1E:76:45:63:95:AE:75:AC:75:0B:4D:9E:BA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/47b740-f085-4a70-9759-9c48425eaccf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/47b740-f085-4a70-9759-9c48425eaccf/1/52H46ZTGDx52RWOVrnWsdQtNnro.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.53.140.0/22
                  185.126.202.0/23
                IPv6:
                  2a0a:2fc4::/30
                  2a0d:9680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51026
                  204544

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:01:e4:41:92:a1:06:15:2c:91:4c:79:bf:4b:79:1d:b0:
         a6:e5:d4:dd:63:39:1a:c3:ee:54:43:2a:36:57:63:7c:8e:7c:
         cf:77:3d:64:64:0d:41:25:be:6d:a1:8c:cb:b1:46:65:a8:f4:
         f5:cb:97:12:1e:1e:7e:27:93:ba:ce:7d:bb:c9:45:57:65:2a:
         bd:98:1a:15:bd:de:1c:56:73:b0:64:a8:7f:e7:5b:73:21:66:
         2d:ea:b0:f3:43:66:11:55:c4:ac:0e:f6:be:7f:ca:04:8f:b2:
         44:e7:ad:08:b0:16:45:5a:e2:d4:14:e1:1d:48:4a:8d:13:03:
         5e:2c:c0:d1:aa:25:fd:df:e2:71:ab:bf:e7:a2:63:f2:83:62:
         81:33:f1:37:35:bb:2f:bb:6b:a3:4d:ff:91:2f:bc:f0:e4:e8:
         de:22:56:a1:75:ac:04:fe:7c:a0:f6:49:75:fd:e9:08:4e:0b:
         a4:d9:9a:df:7c:cf:93:9f:dc:fd:9c:6d:c5:f6:82:df:36:4b:
         d4:c2:02:ba:0f:58:62:47:06:d6:49:26:b9:a1:a0:f6:bb:ae:
         cc:8f:11:e7:57:28:d7:e0:19:f3:bf:b2:5c:27:23:e5:7b:e6:
         e8:89:e2:a4:c8:d0:f9:a3:ed:2e:be:59:a0:74:73:51:77:cc:
         36:f2:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----