Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a1FT_jGP_t1c7mQBnAeQ91nfXs.cer
File:                     5a1FT_jGP_t1c7mQBnAeQ91nfXs.cer (raw, json)
Hash identifier:          cSwVdOKiKjgS3m9Chjarp7rSLjze3pduWvcxTz+taac=
Subject key identifier:   E5:AD:45:4F:F8:C6:3F:FB:75:73:B9:90:06:70:1E:43:DD:67:7D:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       80166E659E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/3e48a8-6860-4172-873b-66e30760458d/1/5a1FT_jGP_t1c7mQBnAeQ91nfXs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/3e48a8-6860-4172-873b-66e30760458d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:40:58 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.159.180.0/22
                          IP: 2a0f:5c80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550132147614 (0x80166e659e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:40:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e5ad454ff8c63ffb7573b99006701e43dd677d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:5b:6e:58:99:be:c9:6b:c5:07:a4:16:c7:
                    74:ee:07:62:20:02:2c:63:8a:0e:ef:9c:9e:cd:f3:
                    60:77:a6:f8:3b:9d:d4:30:d9:16:2b:e9:24:14:f5:
                    00:20:d1:7e:f1:36:81:f2:5c:df:42:6f:17:3a:11:
                    78:33:b3:e6:aa:68:0c:80:2f:47:99:03:91:47:92:
                    aa:65:03:62:d0:54:1e:a2:a2:48:4b:a8:6a:1c:e8:
                    32:22:c2:e5:72:b5:96:eb:d2:2f:a9:f9:86:97:17:
                    f4:fa:ed:ed:0e:0f:0f:6d:66:c6:95:b3:66:1e:4e:
                    29:2b:f7:fb:b3:82:ea:c7:c4:1d:92:72:25:d5:1b:
                    2e:b0:ba:fc:74:a7:af:c5:37:b0:62:6d:66:36:5a:
                    20:f3:bf:b8:50:91:0f:dc:53:bd:47:87:0f:32:2e:
                    7d:9a:a8:4c:0f:72:4f:93:fc:d8:fb:00:79:0d:0a:
                    23:e4:d4:bb:cd:dc:12:fe:20:00:97:ef:44:60:f1:
                    ee:75:ad:e6:ab:c6:67:b4:22:ea:05:d2:1c:50:ad:
                    56:94:34:2a:6c:a3:fc:6f:94:0e:bc:1f:9e:fe:6b:
                    64:c9:d9:47:7a:9f:cf:8e:54:9b:78:eb:60:02:c8:
                    40:05:98:fb:d3:2e:4c:a8:ff:7e:4d:06:d0:de:79:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:45:4F:F8:C6:3F:FB:75:73:B9:90:06:70:1E:43:DD:67:7D:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3e48a8-6860-4172-873b-66e30760458d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3e48a8-6860-4172-873b-66e30760458d/1/5a1FT_jGP_t1c7mQBnAeQ91nfXs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.180.0/22
                IPv6:
                  2a0f:5c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:b1:3c:45:1b:4e:e0:5a:a0:90:96:2a:fd:b2:1f:07:37:d2:
         1c:d8:d6:4d:35:81:a3:a2:c2:52:94:d3:3b:90:04:79:74:3e:
         99:79:90:1f:2b:3c:8b:d7:68:63:69:4b:ce:c7:6c:c6:b8:6c:
         8b:b3:ea:19:c1:2a:a4:5a:88:76:b1:09:8a:21:a3:d4:16:cb:
         ca:98:78:73:66:15:6d:d7:9f:78:01:1f:75:85:53:ac:97:89:
         36:86:cf:bf:4d:4e:88:23:a7:b9:ae:cc:04:e4:1a:77:1e:f2:
         b6:71:6d:1c:28:38:5b:0e:1d:ec:71:ea:ac:40:09:a1:fa:73:
         2d:5c:24:a2:8a:83:ba:6e:ea:7d:db:e2:75:06:bc:6c:55:b4:
         1f:f6:26:32:72:9c:20:ac:fd:54:1e:1c:26:47:d7:ba:92:88:
         b4:a9:3a:aa:08:4d:da:4b:67:e1:8f:8c:0b:ba:aa:53:6b:ce:
         61:26:54:13:52:68:9f:20:eb:6f:8e:29:11:8b:06:fc:fc:74:
         b0:2c:94:9e:29:b3:d3:33:16:c0:74:7e:2c:54:29:f0:69:7d:
         4f:04:1d:fd:1d:61:0e:15:cb:9c:fe:e4:96:24:74:da:23:16:
         6c:e3:6c:de:8f:31:c9:fb:68:4d:a4:b1:a8:aa:16:b9:5b:09:
         f0:d8:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----