Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5wIH6eFRRRQeurhLCVgIOiEw7B0.cer
File:                     5wIH6eFRRRQeurhLCVgIOiEw7B0.cer (raw, json)
Hash identifier:          /8MRgxEKg8xtUO3JO2gbXJ17uZ6okD3nh2v4o0atH74=
Subject key identifier:   E7:02:07:E9:E1:51:45:14:1E:BA:B8:4B:09:58:08:3A:21:30:EC:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5D6C0C87F8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/b4c63d-fff3-4b5c-b082-0e1d125671a4/1/5wIH6eFRRRQeurhLCVgIOiEw7B0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/b4c63d-fff3-4b5c-b082-0e1d125671a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:04:20 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 77.78.145.0 -- 77.78.147.255
                          IP: 77.78.150.0/24
                          IP: 109.121.134.0/23
                          IP: 2a01:b6a0::/32
                          IP: 2a02:80e0::/30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401244719096 (0x5d6c0c87f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:04:20 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e70207e9e15145141ebab84b0958083a2130ec1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:80:f1:b8:45:51:47:89:6a:20:db:7b:11:
                    8b:5c:2f:26:b1:0c:de:3e:c4:c1:de:9e:ab:53:dd:
                    4b:a8:7d:51:83:3c:9c:6f:97:07:df:f1:21:75:f2:
                    62:ca:24:c6:81:c9:65:da:8d:c9:88:09:15:58:29:
                    4b:39:b4:84:bb:08:67:0f:28:6f:70:14:47:cb:aa:
                    a8:61:53:0b:63:88:e3:6f:f1:57:48:f6:21:c9:b1:
                    be:85:a5:c7:0c:50:80:58:b0:f8:aa:6d:10:8a:98:
                    e9:67:1a:17:13:e0:7b:d7:0b:ff:d6:7a:12:bf:4b:
                    bb:de:01:ac:7e:4e:f9:73:9e:1e:78:a4:b8:a4:63:
                    da:54:ad:55:8f:d3:e0:bb:be:37:ea:58:c4:8f:8a:
                    2f:4a:61:10:1a:e7:0e:a0:0c:e8:af:70:b3:bb:65:
                    ac:33:0c:6c:b9:16:45:eb:a1:c4:1e:07:1f:77:cd:
                    86:50:94:75:3d:1c:b2:e3:27:22:97:31:a4:c2:6e:
                    6e:49:12:03:d6:49:f6:08:5d:f0:17:38:8d:df:8b:
                    ba:f2:92:03:7e:c4:c9:ef:fd:da:80:bf:03:41:fc:
                    34:f5:f1:9f:3b:4d:d9:2e:06:f3:88:ad:e4:6c:cc:
                    7c:18:70:2e:99:a5:ba:29:d7:0f:f5:6b:bb:3d:77:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:07:E9:E1:51:45:14:1E:BA:B8:4B:09:58:08:3A:21:30:EC:1D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b4c63d-fff3-4b5c-b082-0e1d125671a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b4c63d-fff3-4b5c-b082-0e1d125671a4/1/5wIH6eFRRRQeurhLCVgIOiEw7B0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.145.0-77.78.147.255
                  77.78.150.0/24
                  109.121.134.0/23
                IPv6:
                  2a01:b6a0::/32
                  2a02:80e0::/30

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:d2:75:4d:a9:bf:11:c1:1e:97:67:7a:e8:15:91:91:14:
         94:c0:c9:a1:2e:b3:42:9e:03:44:56:9f:16:63:57:b4:62:26:
         f9:cb:68:8b:9d:5f:1a:a0:95:9c:3b:39:f8:0f:9f:83:5c:1d:
         4b:0d:7b:45:6e:e2:82:ff:11:98:66:7f:e8:dc:87:4c:39:8d:
         46:9e:95:92:87:8e:fb:06:49:55:6e:71:96:22:bf:29:e0:e9:
         f4:40:ef:ed:dd:d3:3b:23:0d:a5:0b:5e:9d:32:7c:bb:02:db:
         ed:a1:b6:af:7e:bc:b4:89:79:80:72:d0:e0:51:3f:96:02:c5:
         c9:a2:b8:39:77:15:dc:59:7c:e4:d8:ed:2d:b5:20:22:2f:71:
         c1:d1:db:72:f5:30:32:a2:d8:d6:2d:a9:92:0b:a7:ca:18:00:
         2b:bd:be:70:dd:38:98:18:b7:54:04:4e:5a:92:b3:be:9f:c0:
         64:66:40:2c:55:55:da:e7:23:5f:eb:0a:92:66:f1:db:a9:07:
         27:e6:10:61:a1:f0:b4:1c:0a:5b:c3:bd:cf:59:5f:d4:8f:f4:
         ca:65:8d:6e:cf:1c:d2:ae:69:c5:82:3b:8a:44:ab:66:36:1f:
         de:e0:e0:bf:a6:64:86:0d:1b:8b:13:e8:71:57:56:8c:af:66:
         b4:84:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----