Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5HgYVTz3YM-KIMyFs5oSRhxHIM4.cer
File:                     5HgYVTz3YM-KIMyFs5oSRhxHIM4.cer (raw, json)
Hash identifier:          APLyULFaQ0i478fDfT7RHvw63ccb3an85BjaKYbjbzM=
Subject key identifier:   E4:78:18:55:3C:F7:60:CF:8A:20:CC:85:B3:9A:12:46:1C:47:20:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7D8ADC733D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/d0c278-06d8-49b1-a07b-0b253eff57c5/1/5HgYVTz3YM-KIMyFs5oSRhxHIM4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/d0c278-06d8-49b1-a07b-0b253eff57c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:29:49 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 15583
                          IP: 62.233.0.0/19
                          IP: 2a01:9100::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539200615229 (0x7d8adc733d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:29:49 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e47818553cf760cf8a20cc85b39a12461c4720ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:2e:2c:b4:06:c2:78:4a:dd:32:69:52:94:
                    38:ec:a9:f2:af:8d:d7:b6:93:a6:3c:7f:87:17:4d:
                    2c:07:2e:dc:5a:e4:ab:df:41:8e:39:76:51:05:83:
                    3b:c0:b3:da:46:9c:07:24:28:07:4f:72:78:94:c8:
                    cd:9e:3c:2a:ea:80:f9:c4:07:93:23:5b:5b:64:69:
                    23:61:f1:14:61:2a:54:5e:4d:74:bb:96:bd:4d:52:
                    c0:9f:93:6b:3a:e2:5e:20:9f:33:7a:67:de:6d:96:
                    4d:39:06:3b:14:49:51:2e:11:4b:5e:7d:15:33:fd:
                    09:4f:f8:7a:f7:8a:c0:27:81:9d:17:3e:a6:70:36:
                    9c:8a:8f:29:e1:4c:18:ae:a9:ad:8d:b9:ac:a5:38:
                    2d:97:e9:8d:e6:f9:ec:97:e0:01:ca:20:11:59:23:
                    cd:c3:8b:1c:a2:ac:6f:88:d7:cc:f1:49:36:97:46:
                    ce:71:b1:14:f0:c1:d4:64:dd:6f:45:d5:76:9b:1e:
                    c0:3f:d3:9d:54:13:6a:70:f5:c0:93:0c:d9:14:08:
                    5e:2f:07:73:33:f9:0d:4b:ca:0c:81:70:cb:c3:72:
                    0a:3d:f5:7a:23:61:5d:c5:64:86:57:2d:b5:e0:82:
                    91:f1:37:d2:41:f7:8e:86:93:12:8c:ed:7f:6d:ab:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:18:55:3C:F7:60:CF:8A:20:CC:85:B3:9A:12:46:1C:47:20:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d0c278-06d8-49b1-a07b-0b253eff57c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d0c278-06d8-49b1-a07b-0b253eff57c5/1/5HgYVTz3YM-KIMyFs5oSRhxHIM4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.0.0/19
                IPv6:
                  2a01:9100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15583

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:74:f9:e5:e9:6b:b8:cc:3b:39:01:c2:47:4d:5c:ff:e0:
         7f:3b:7c:3f:7e:95:c7:68:96:f7:09:78:ff:73:67:d4:7b:b4:
         1a:a8:d4:45:25:34:12:95:5a:6f:d8:e9:8d:e8:77:74:cf:c5:
         f9:c9:42:88:50:5a:44:c3:b3:55:46:e9:2b:da:e9:c6:3f:70:
         f4:5e:b1:2a:8d:5d:76:22:d4:fc:7e:04:94:b0:fe:22:e8:4d:
         df:e3:68:00:93:70:89:61:47:01:b6:df:89:f9:48:96:e7:c3:
         cd:dd:f1:a6:eb:27:30:99:45:24:d1:96:94:82:50:77:22:40:
         2d:a4:92:56:eb:96:1b:7b:5a:5e:fe:76:45:8c:0c:e9:ba:aa:
         bd:02:9e:49:8e:08:93:fa:db:58:57:7f:3e:e5:3e:29:39:93:
         0b:ce:ff:5e:f8:e0:c8:01:1a:e8:33:b0:ab:d1:2b:5a:f5:fd:
         ec:96:fb:d4:d8:2c:d3:d2:ea:a3:33:dd:94:1b:bd:0f:02:dc:
         42:25:12:4b:0a:e4:f4:58:01:61:cc:92:1a:9e:1f:51:f6:eb:
         29:62:61:c8:70:08:60:6c:39:0c:55:31:10:b0:a4:29:fb:1b:
         75:b1:79:c6:b1:5d:90:ec:3a:c9:cd:71:16:ff:3a:59:bc:1b:
         a6:a1:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----