Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6HIjLNT1d17E3JoCtGzINuLJKOk.cer
File:                     6HIjLNT1d17E3JoCtGzINuLJKOk.cer (raw, json)
Hash identifier:          ZKv8udfUNW4MiSjFm7tufGFyOpt68TXqCrLBHLPD7cE=
Subject key identifier:   E8:72:23:2C:D4:F5:77:5E:C4:DC:9A:02:B4:6C:C8:36:E2:C9:28:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7F950CFEF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/9a2813-e1f1-4534-8c8c-1b6b527578c6/1/6HIjLNT1d17E3JoCtGzINuLJKOk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/9a2813-e1f1-4534-8c8c-1b6b527578c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:22:52 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 85.208.108.0/22
                          IP: 2a09:9dc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547961503479 (0x7f950cfef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:22:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e872232cd4f5775ec4dc9a02b46cc836e2c928e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:f4:9c:20:86:fb:4c:cc:5e:9d:9b:bb:02:
                    96:f8:e3:9c:30:e5:35:d0:4e:5d:88:f6:c1:e2:ea:
                    bc:87:24:24:57:3d:f0:8b:21:07:28:8d:74:ac:11:
                    24:83:36:0a:44:e4:f5:32:dd:23:77:00:76:10:77:
                    bd:72:ea:85:7e:b1:05:9b:ea:59:1b:51:52:8c:75:
                    47:ea:38:65:88:81:60:ad:63:8b:4a:72:e0:97:33:
                    41:bd:93:79:46:c3:1d:4f:56:ad:e6:7f:46:dc:2a:
                    7e:68:df:7f:78:fd:d1:87:cc:84:ed:c5:af:a3:61:
                    da:67:4f:a4:67:43:25:90:a2:60:86:2f:d6:ab:da:
                    f1:2c:dd:1a:4e:53:db:24:d0:49:a1:7f:52:3c:df:
                    99:6c:a8:15:9d:69:38:90:15:47:c9:d3:97:d3:ce:
                    9b:25:f1:00:61:de:c7:57:20:96:37:9f:4e:ff:5e:
                    ab:2f:91:77:76:82:d0:56:11:3f:e7:1f:9e:cc:fd:
                    9b:55:83:b4:9d:11:d3:a9:f3:28:cc:c4:68:7c:cf:
                    b6:66:e8:64:e0:1d:c6:64:2e:96:ce:fa:57:1a:f5:
                    83:ec:60:0f:4e:9f:1a:0f:c6:71:3a:c7:e7:f6:0b:
                    e6:bc:fa:69:d1:63:fb:18:06:a4:79:13:b3:82:df:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:23:2C:D4:F5:77:5E:C4:DC:9A:02:B4:6C:C8:36:E2:C9:28:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9a2813-e1f1-4534-8c8c-1b6b527578c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9a2813-e1f1-4534-8c8c-1b6b527578c6/1/6HIjLNT1d17E3JoCtGzINuLJKOk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.108.0/22
                IPv6:
                  2a09:9dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:d2:a8:e6:c9:ea:3b:c2:df:3e:2a:71:f7:82:01:af:8e:
         42:c5:e6:9a:75:4d:86:1d:ea:08:06:4e:26:54:f7:d4:c3:8f:
         38:ba:b4:88:84:e2:1c:2a:d5:6e:ac:47:d5:35:10:8d:b4:3f:
         be:72:90:61:4a:ff:f8:a9:81:eb:15:68:75:2b:bb:0b:e3:1a:
         f9:36:34:6f:88:a4:7c:83:43:17:ef:30:88:fc:f4:86:ed:b9:
         52:df:e2:9d:ff:f4:0a:8a:7c:44:0f:04:b1:75:80:19:6c:bb:
         18:25:c9:ab:72:15:24:a9:7a:32:3d:a7:9d:bc:4c:54:19:22:
         0f:6d:a0:41:95:a0:58:90:8f:bd:35:70:d3:b0:09:fe:8a:99:
         14:8a:a1:2b:cf:de:5f:e3:db:a7:93:5f:a8:41:84:98:34:33:
         1f:91:e9:67:8e:a6:61:17:18:8d:7e:0f:66:79:84:fa:35:3b:
         01:9c:2a:31:fc:9e:86:da:c9:9c:b2:32:fa:1f:12:5e:98:3b:
         65:3e:65:25:f1:38:b2:f2:e5:57:74:32:35:fd:3d:29:54:c3:
         f2:20:9e:bf:fd:02:98:22:77:b4:41:f6:27:46:3b:1a:7f:25:
         4d:b0:f7:33:3d:9a:b2:a5:df:01:74:25:86:71:38:ea:6f:fa:
         71:2c:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----