Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QHCzrt-WLzKftnw1512SNP1CwE.cer
File:                     5QHCzrt-WLzKftnw1512SNP1CwE.cer (raw, json)
Hash identifier:          Nao2m/EPoXpgRB93SLzNAefew+Y6V7EPT1XybTrWjb0=
Subject key identifier:   E5:01:C2:CE:BB:7E:58:BC:CA:7E:D9:F0:D7:9D:76:48:D3:F5:0B:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       73B1417A4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/507ef0-71bf-4291-beda-ca0efdd013b7/1/5QHCzrt-WLzKftnw1512SNP1CwE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/507ef0-71bf-4291-beda-ca0efdd013b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 07 Dec 2020 14:14:19 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 200348

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496895097423 (0x73b1417a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  7 14:14:19 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e501c2cebb7e58bcca7ed9f0d79d7648d3f50b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:41:4f:c7:1b:26:6d:91:a7:3f:a7:77:7a:
                    7e:42:1f:ce:bb:21:00:f0:04:82:73:03:86:31:d9:
                    79:4f:1c:97:75:60:c8:d8:bd:5a:85:6e:87:43:26:
                    61:6d:52:54:84:38:53:ab:14:28:e9:8e:b9:97:7f:
                    c1:21:a9:52:af:ef:dc:14:a1:43:61:c3:a9:b1:1f:
                    d3:08:2a:a8:38:bb:c9:6d:b3:e6:34:68:84:78:79:
                    35:d1:a7:3a:60:8a:f6:cb:a5:32:9b:23:f8:fc:b0:
                    77:d6:25:ce:4e:83:7b:00:78:a5:ef:3e:7e:f7:9f:
                    cd:a1:b8:94:6d:11:89:99:58:1e:16:41:3c:74:1a:
                    9b:32:45:6e:3d:db:29:ce:ee:16:bd:7c:92:c3:f8:
                    0d:13:2d:93:db:a1:f5:7c:1f:7e:2d:e2:59:b7:ee:
                    cd:67:5c:4d:e7:01:1c:c5:51:32:aa:a6:35:5c:56:
                    98:fb:ba:4f:f0:70:d9:fe:70:8f:56:d7:e9:90:0f:
                    7d:21:30:d5:a0:e9:a4:4f:b5:f9:3a:6d:fb:40:ac:
                    99:fb:eb:44:12:ee:57:9a:84:14:72:23:98:0b:57:
                    ef:14:75:62:51:fe:9e:a6:f7:bb:76:16:34:96:2b:
                    9b:4f:2f:dd:cc:f9:bc:aa:55:af:2f:39:10:70:43:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:01:C2:CE:BB:7E:58:BC:CA:7E:D9:F0:D7:9D:76:48:D3:F5:0B:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/507ef0-71bf-4291-beda-ca0efdd013b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/507ef0-71bf-4291-beda-ca0efdd013b7/1/5QHCzrt-WLzKftnw1512SNP1CwE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200348

    Signature Algorithm: sha256WithRSAEncryption
         22:be:17:8e:d7:55:af:20:1a:53:65:2f:ae:5d:32:e6:db:da:
         b0:4d:5f:f9:22:d7:36:9d:eb:27:cd:b3:76:9c:0f:e8:fb:14:
         88:54:b7:6d:0f:ed:b3:b3:09:d9:64:0d:56:64:c5:43:27:79:
         00:bc:e7:d0:f0:3f:93:9e:c1:93:0d:de:64:7e:ff:4c:2a:c1:
         8a:52:d9:80:d1:c6:54:d7:8f:f5:44:1e:da:62:98:ca:bb:2c:
         d6:e3:35:6d:8e:82:bb:fd:26:76:c9:01:0e:be:65:6e:55:1b:
         ea:96:f6:e0:9e:d4:48:78:1c:34:2d:39:b0:72:ae:a3:14:b1:
         65:15:80:46:94:ad:45:59:8d:f9:5d:c6:dc:c3:31:41:ad:d7:
         57:aa:fc:6e:39:2d:27:bb:89:96:ac:f6:c1:ef:bb:da:cc:ec:
         22:d0:58:f1:94:25:2a:9a:b2:64:b7:32:e3:06:b1:ef:f7:9b:
         a6:0d:91:f8:dc:56:97:e4:bb:fc:26:bc:b1:53:4a:8f:0f:fe:
         ed:9c:39:cf:49:a4:73:72:66:f4:10:d9:22:7d:24:d7:e7:be:
         0d:fd:86:b3:91:34:f8:af:b9:85:16:d6:5a:73:f1:c6:34:1a:
         da:16:65:e5:b1:9b:bc:f1:4d:ea:19:d7:5b:48:e7:a2:c0:13:
         bc:e7:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----