Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6G8WRgdjX65sV1ZqGfDJSS8GS4g.cer
File:                     6G8WRgdjX65sV1ZqGfDJSS8GS4g.cer (raw, json)
Hash identifier:          EYdMhPjRbla4QXBn8OszcWSzsZjFM32pgoKNFvgS4ig=
Subject key identifier:   E8:6F:16:46:07:63:5F:AE:6C:57:56:6A:19:F0:C9:49:2F:06:4B:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7E16B960CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/bb8294-f1e0-448a-bc9c-521b4b1234d8/1/6G8WRgdjX65sV1ZqGfDJSS8GS4g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/bb8294-f1e0-448a-bc9c-521b4b1234d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:43:19 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 199435
                          IP: 5.34.128.0/19
                          IP: 185.93.80.0/22
                          IP: 2a05:f300::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541547126991 (0x7e16b960cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:43:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e86f164607635fae6c57566a19f0c9492f064b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:d5:c5:79:35:b4:6b:f6:6e:8c:af:b3:55:
                    70:75:8f:1f:d9:19:c3:2f:c9:f9:97:4d:fd:ab:ce:
                    37:74:b9:b1:52:d6:d0:50:67:29:62:23:4f:bd:0e:
                    1f:5f:06:f9:41:90:b8:96:13:5a:68:44:11:c8:f3:
                    8e:12:41:63:56:57:69:ff:02:15:08:eb:89:81:f6:
                    f8:8b:0d:f7:0d:8d:5b:e9:19:a2:9c:84:6a:4a:2b:
                    3f:f5:e2:49:f2:f6:d1:9f:bf:4c:a6:38:45:de:3f:
                    94:01:64:83:31:3c:b5:1d:c0:d6:45:52:90:22:05:
                    3c:ea:8e:60:15:1e:bf:9b:9d:a0:05:b1:e0:b0:1f:
                    49:32:20:3b:64:d7:52:08:17:43:8b:26:c2:86:a4:
                    e5:12:b1:2a:93:69:fe:d5:11:40:3a:00:f8:b9:ad:
                    4d:8e:fa:4f:1c:08:e0:d4:9b:23:6d:f6:b7:33:88:
                    c0:04:bd:fc:6c:94:4d:99:29:41:21:65:0a:d6:55:
                    f0:e3:56:45:2c:80:75:7b:dc:6d:50:ea:4a:36:1f:
                    28:6f:b4:d4:7e:05:c0:ab:01:d3:2a:fe:dd:d1:4d:
                    ce:2e:5e:f4:f6:1d:e6:25:e6:cc:98:57:58:9c:f5:
                    80:70:dc:f1:d3:17:f2:3d:4e:f7:b6:2f:d5:9e:62:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:16:46:07:63:5F:AE:6C:57:56:6A:19:F0:C9:49:2F:06:4B:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb8294-f1e0-448a-bc9c-521b4b1234d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb8294-f1e0-448a-bc9c-521b4b1234d8/1/6G8WRgdjX65sV1ZqGfDJSS8GS4g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.34.128.0/19
                  185.93.80.0/22
                IPv6:
                  2a05:f300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199435

    Signature Algorithm: sha256WithRSAEncryption
         01:12:7f:66:59:07:c0:26:0f:c5:35:6f:ed:8d:01:9d:06:ad:
         30:ca:7f:d9:de:02:5b:13:e8:cf:bb:58:d8:d8:b3:45:f2:ed:
         15:7b:41:f8:3c:5a:b1:6c:ca:84:c4:66:cb:56:06:fd:61:ee:
         6b:ea:75:69:c1:bc:0a:91:86:86:fe:7c:f5:f3:4b:4e:52:54:
         bd:eb:a0:aa:00:b8:6a:d7:34:44:73:2e:cd:cd:5e:65:fa:06:
         f9:50:27:7d:a4:81:54:a6:19:d1:51:00:5f:5d:3b:c0:54:81:
         f2:ea:b1:ea:2c:08:03:99:a4:0e:9b:31:2e:94:91:97:2a:f8:
         f8:45:28:f0:68:7a:0b:34:ae:4a:f7:19:f0:2e:d8:87:8b:ea:
         8a:53:46:07:8b:20:30:18:5e:6c:fc:ae:1d:f5:2c:e0:4c:3b:
         74:84:34:fa:03:90:bf:88:1e:66:80:b0:a5:44:f8:2f:3c:e9:
         bc:1e:62:7a:44:b0:5c:2a:ce:85:38:10:ac:3a:67:97:d1:14:
         cf:b3:c5:a9:f6:3d:bc:5f:a9:4d:14:94:80:91:7e:64:08:2a:
         2e:7c:66:59:c1:13:e6:69:31:92:46:2c:0a:dd:8b:5d:7a:c7:
         d6:cb:35:80:1e:c5:0b:a6:c5:de:f5:52:c5:44:4e:82:a8:13:
         0a:f2:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----