Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5pFapwl4i3AspBQc3LWfZYxLPf0.cer
File:                     5pFapwl4i3AspBQc3LWfZYxLPf0.cer (raw, json)
Hash identifier:          y6l6IRGRKSk/OuMnuV76BJCaQL5DbB7+y1Nk3GMklvI=
Subject key identifier:   E6:91:5A:A7:09:78:8B:70:2C:A4:14:1C:DC:B5:9F:65:8C:4B:3D:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       70FAD654D2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/4c877c-7e73-4c90-9161-64a145f6af03/1/5pFapwl4i3AspBQc3LWfZYxLPf0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/4c877c-7e73-4c90-9161-64a145f6af03/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 22 Oct 2020 14:17:32 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 2.59.156.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485244687570 (0x70fad654d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 22 14:17:32 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e6915aa709788b702ca4141cdcb59f658c4b3dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:3d:eb:c7:3a:58:5b:90:bd:27:d0:4e:38:
                    de:60:df:3d:e3:f5:f9:c7:40:f6:6c:8e:4c:99:43:
                    86:c9:61:2d:26:66:4b:e0:91:06:54:21:c9:9e:5a:
                    aa:70:9c:f8:0b:9b:a2:3d:6d:f6:14:8f:33:70:8c:
                    46:8c:ec:df:97:d9:5e:61:23:18:29:35:aa:31:cf:
                    54:92:fb:1c:b8:ff:cc:87:d9:f4:73:ba:b0:43:ab:
                    5a:49:da:d6:b2:69:26:ab:34:a6:b2:bd:bd:a3:5b:
                    be:55:9d:22:1b:09:cb:09:0a:f4:07:ca:98:76:99:
                    89:fb:02:cd:6a:4e:64:55:97:83:5a:04:85:11:d0:
                    a2:42:34:c3:64:01:4f:d4:73:19:0e:63:08:fb:a7:
                    67:fb:5b:b3:5c:f3:16:69:57:3c:3e:96:09:31:0c:
                    b0:a0:e0:ce:e4:e4:8e:17:60:3b:22:d2:a8:df:5c:
                    85:69:ea:e0:86:90:15:ca:4a:2d:01:2c:fd:a4:89:
                    ec:19:9e:cf:65:88:f8:44:ec:92:2b:e4:07:5a:f7:
                    5a:a3:a5:e9:05:2f:8d:8b:70:01:06:ec:0c:38:1c:
                    d0:b1:23:64:66:fc:77:cb:00:26:e5:56:e1:fb:ff:
                    5f:c0:ad:e8:b5:8f:71:c0:73:84:7a:32:f2:a6:77:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:5A:A7:09:78:8B:70:2C:A4:14:1C:DC:B5:9F:65:8C:4B:3D:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4c877c-7e73-4c90-9161-64a145f6af03/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4c877c-7e73-4c90-9161-64a145f6af03/1/5pFapwl4i3AspBQc3LWfZYxLPf0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:70:f1:ca:12:40:88:b3:c0:f3:46:d0:3c:e0:bb:60:75:
         62:53:62:3a:24:1b:05:9d:62:c8:a8:50:5b:18:d7:35:38:75:
         fe:36:a0:e8:2f:a1:16:49:06:d8:99:51:47:3f:e9:77:04:e3:
         62:5c:fc:95:b7:e6:fb:22:95:bf:76:79:90:38:2c:0c:aa:45:
         48:9a:df:18:d1:a9:72:14:42:64:68:80:53:d5:77:76:0d:b4:
         2c:c4:25:d9:01:c6:08:16:5f:86:27:00:de:86:22:9e:93:0f:
         da:48:96:b7:6c:fd:71:1f:8b:72:f9:4c:8e:71:9d:b3:58:33:
         c9:e3:6a:93:48:50:ae:b8:1a:83:89:bc:1c:e1:95:1f:74:31:
         34:40:b5:17:88:be:c7:f0:55:c6:ca:d1:97:d2:63:34:e5:b1:
         e0:1b:7a:87:eb:29:85:5d:ea:dd:27:9d:5a:ec:93:63:9c:bb:
         92:fc:cc:69:74:ac:d2:e7:72:6c:29:a8:eb:3c:2e:15:2c:bd:
         44:36:5e:d4:0c:99:46:52:8d:ce:7d:ea:75:5a:b4:0c:1d:28:
         91:5c:c3:97:63:92:aa:7d:30:33:e0:8b:1c:65:82:62:10:9f:
         fe:a1:75:02:fd:68:6e:d2:c7:49:56:76:db:06:6e:02:99:6c:
         37:b4:13:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----