Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5pqmxLdx5GI0tz9ypQtoiX8xe38.cer
File:                     5pqmxLdx5GI0tz9ypQtoiX8xe38.cer (raw, json)
Hash identifier:          zfHDYAOb5qTjZqaHM0sjyWfzHSxbGaHeE15vkrMHKFM=
Subject key identifier:   E6:9A:A6:C4:B7:71:E4:62:34:B7:3F:72:A5:0B:68:89:7F:31:7B:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77063FA9DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/329e03-d718-4d6b-86a3-89338f12860a/1/5pqmxLdx5GI0tz9ypQtoiX8xe38.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/329e03-d718-4d6b-86a3-89338f12860a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:41:30 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.153.48.0/22
                          IP: 2a0f:6100::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511205943774 (0x77063fa9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:41:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e69aa6c4b771e46234b73f72a50b68897f317b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:dd:2a:13:e1:e3:72:99:52:0f:f8:77:fe:
                    35:41:79:de:c3:cf:bd:63:f1:0d:7f:af:64:8c:af:
                    cb:ac:c4:15:18:c5:4e:27:f1:29:94:25:93:dd:69:
                    52:e1:bb:61:d9:e9:48:48:5f:0e:e9:e4:4e:6e:f2:
                    b4:ef:1a:41:ba:93:0d:60:4a:74:d1:18:29:61:80:
                    9e:88:57:6f:2b:36:3c:ac:8f:58:c5:d2:4a:3e:dd:
                    1a:7c:35:f6:cb:5b:a2:ab:3e:19:53:c7:6f:56:22:
                    b2:75:59:d3:10:37:99:0b:1a:ae:2a:9f:2f:4e:ec:
                    8d:c7:83:ee:55:dc:f1:10:d4:04:a2:b8:51:30:dd:
                    9c:d5:01:e6:eb:3c:29:12:48:72:18:43:85:b2:46:
                    07:cf:34:d5:4b:78:a7:66:3f:76:b3:4c:94:7d:7e:
                    7c:80:70:1e:f3:0f:e4:ac:80:b7:1c:46:62:17:5e:
                    0c:56:15:4b:ea:86:b0:80:83:4f:b2:21:b4:6b:a7:
                    72:ac:8c:0b:09:30:af:56:92:c2:e4:a7:ba:ef:24:
                    c5:50:04:8f:95:2d:cc:eb:93:50:10:34:8f:5d:6c:
                    78:dc:9e:db:cd:dd:1e:6a:51:56:ef:6e:e5:a8:5a:
                    41:0b:fa:09:e5:6d:bc:d8:25:2f:a9:68:0d:5b:6f:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9A:A6:C4:B7:71:E4:62:34:B7:3F:72:A5:0B:68:89:7F:31:7B:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/329e03-d718-4d6b-86a3-89338f12860a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/329e03-d718-4d6b-86a3-89338f12860a/1/5pqmxLdx5GI0tz9ypQtoiX8xe38.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.48.0/22
                IPv6:
                  2a0f:6100::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:0b:2e:d4:35:1d:7d:ce:2b:a4:cb:0d:48:1f:da:c5:50:
         65:8d:0d:7f:db:50:56:3a:07:ec:cd:e5:71:81:14:3d:7f:21:
         9d:77:07:66:57:13:2c:a2:43:3a:2a:cd:5f:6c:09:f4:54:c1:
         e8:1d:f3:3a:8a:83:06:c9:67:ec:2f:45:a0:3f:76:57:3b:7b:
         82:1e:a3:40:d6:79:59:34:11:47:8f:61:b9:4b:00:7a:8d:be:
         5a:16:53:0d:fe:9d:c8:da:d8:61:df:05:7e:80:69:0f:82:8a:
         d5:2d:16:42:60:32:cc:c2:12:4f:ec:1e:fb:88:27:c1:b0:bd:
         60:66:d8:34:01:82:24:c8:91:03:84:3d:eb:1d:3a:95:f5:7d:
         42:bd:86:a0:28:bf:4a:12:88:2a:72:d4:97:86:b4:33:9e:d0:
         67:60:d5:c8:25:ec:3a:a7:68:8a:ca:8b:03:5a:ce:2f:74:50:
         f4:b0:a1:7b:84:f6:be:b0:90:bf:a9:70:b9:91:06:8c:a0:37:
         1c:dd:b0:5c:79:a4:fd:5d:ae:29:f3:27:9f:88:28:35:ad:c7:
         f6:ba:be:c6:b5:fc:1a:f5:3b:19:93:fd:e6:fc:c8:2d:64:88:
         61:93:00:f2:69:ee:49:a1:20:00:2f:5c:fc:bb:02:d1:d9:dc:
         33:c8:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----