Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5BVajeomedslGvpjOEaQbYJTB_0.cer
File:                     5BVajeomedslGvpjOEaQbYJTB_0.cer (raw, json)
Hash identifier:          59AMhsIPMhLUojV5tMFJ0oKG6Qv0JHCb+6mdmC6VXYs=
Subject key identifier:   E4:15:5A:8D:EA:26:79:DB:25:1A:FA:63:38:46:90:6D:82:53:07:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5B55930B37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/1c30e5-d968-45cb-b939-87a5d339e2eb/1/5BVajeomedslGvpjOEaQbYJTB_0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/1c30e5-d968-45cb-b939-87a5d339e2eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:53:56 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 95.214.104.0/22
                          IP: 2a09:df80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392277723959 (0x5b55930b37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:53:56 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e4155a8dea2679db251afa633846906d825307fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:ce:0b:f9:46:23:dc:a5:1d:71:c0:ba:2f:
                    9f:b0:3d:8e:e6:79:dd:f2:0a:1f:da:66:6b:b6:f3:
                    80:0f:87:d5:0c:ee:31:ad:2a:1f:57:81:af:11:d3:
                    83:fc:96:59:73:0b:ac:bf:8d:f3:fc:94:8e:b9:d9:
                    ad:b6:01:98:8d:7b:35:99:00:55:6f:ca:ca:e5:55:
                    80:c9:f1:93:59:0b:71:5f:4a:f8:5c:ed:b7:a0:46:
                    6e:6e:81:cc:4f:7f:10:19:e8:cd:e5:14:23:cb:c3:
                    b0:b9:b8:f4:52:d3:fe:2a:c3:a4:54:17:a0:ea:19:
                    0f:bd:ce:f7:23:b3:45:f3:16:10:31:2a:30:cb:0f:
                    28:a9:ca:b0:f2:31:d2:7a:5d:87:64:cb:3f:23:03:
                    e3:80:fb:ce:d3:4f:78:2f:da:24:e7:16:8c:2e:5a:
                    51:56:93:4d:0c:8a:5b:23:7d:3e:27:29:62:63:3e:
                    63:da:4c:23:c7:a0:a8:d3:a8:96:2d:8a:eb:24:d8:
                    be:4d:25:d3:85:35:f8:91:80:89:b3:b8:27:28:9b:
                    f5:cf:0b:d0:27:3f:bc:6e:38:9b:7f:25:0c:1e:a8:
                    d4:b2:90:be:88:38:63:23:62:c7:32:57:b2:77:4f:
                    3a:a3:ef:3c:94:9a:a4:f6:c9:40:e9:7f:7c:d5:14:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:15:5A:8D:EA:26:79:DB:25:1A:FA:63:38:46:90:6D:82:53:07:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c30e5-d968-45cb-b939-87a5d339e2eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c30e5-d968-45cb-b939-87a5d339e2eb/1/5BVajeomedslGvpjOEaQbYJTB_0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.104.0/22
                IPv6:
                  2a09:df80::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:03:a2:d1:c1:f8:2c:c4:59:14:b0:17:35:db:73:7b:d4:
         17:21:fb:68:12:ff:db:30:66:17:8b:e3:a1:3b:9d:36:6f:c0:
         0e:29:fd:bb:de:8e:e4:14:a3:4e:cb:d5:d3:f3:86:1b:a4:55:
         10:f1:7b:97:eb:95:57:e9:9d:40:de:09:61:9b:fc:7a:c5:ed:
         3b:c4:a3:a3:32:e9:77:08:d2:53:fc:4e:5b:16:fc:32:da:51:
         e2:55:4b:37:46:51:15:1b:fb:ed:32:fd:39:eb:80:f4:ce:56:
         28:50:2f:e5:64:c5:ef:c3:31:26:ed:83:87:7e:0e:d2:28:84:
         8c:fa:9a:e1:27:25:c0:17:d1:ff:b5:13:08:f2:d4:15:e7:64:
         76:de:be:50:f7:53:f6:e5:3b:45:9d:5a:d2:8c:2c:06:de:72:
         1d:7c:4b:44:6b:b3:97:21:13:f3:0e:96:bd:2a:be:33:8a:6e:
         0e:b5:c8:b1:03:26:22:0e:c0:15:0f:0a:7f:7f:86:8c:c2:2e:
         08:0c:ab:4b:d5:b8:a8:db:83:91:31:35:3f:fe:76:b3:19:87:
         ce:53:f2:0d:f2:a5:81:1e:d6:9f:87:b8:71:13:07:dd:1f:56:
         db:29:a5:4c:30:07:01:bf:e3:81:2c:e6:ac:38:29:99:fd:75:
         1d:5b:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----