Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QMmLVw56pbWUBNSoA0nZT9Qk_k.cer
File:                     6QMmLVw56pbWUBNSoA0nZT9Qk_k.cer (raw, json)
Hash identifier:          qUGDS7LYlccXHCvwVnqKezFQiW8UdVh/er53QV3c7Ts=
Subject key identifier:   E9:03:26:2D:5C:39:EA:96:D6:50:13:52:A0:0D:27:65:3F:50:93:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       765483F7A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/84143f-addc-43c7-9870-6873202faab9/1/6QMmLVw56pbWUBNSoA0nZT9Qk_k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/84143f-addc-43c7-9870-6873202faab9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:25:00 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.135.148.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508224075683 (0x765483f7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:25:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e903262d5c39ea96d6501352a00d27653f5093f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:03:de:c7:26:ff:85:33:41:9c:06:19:ec:
                    19:2e:4f:10:76:94:3b:7d:94:6c:4b:2f:f0:98:14:
                    1c:f3:49:55:75:b7:e5:df:59:8c:22:a2:1a:fd:7c:
                    65:7b:f1:2a:6d:b8:8b:e8:30:c9:6f:1c:19:93:6d:
                    e6:27:f8:e4:84:f7:8c:56:b6:c4:4f:0e:ce:13:8f:
                    f4:9b:b6:0c:ce:b8:e8:d1:c4:80:88:4a:73:42:70:
                    3e:3c:99:3b:87:56:7b:62:39:f8:0e:ce:95:a3:7d:
                    8e:30:f3:62:9f:55:2d:25:83:60:e6:4f:b3:1f:5c:
                    a0:41:64:ce:9a:e7:c1:1c:61:c6:5f:52:34:b4:d8:
                    c0:c4:ad:4d:a4:24:0f:da:8c:c3:4e:ff:e6:da:55:
                    d5:f9:59:29:da:b0:71:50:e9:69:f8:40:7d:0e:90:
                    f5:d8:a2:fe:f7:94:00:da:06:c1:23:e9:69:36:1b:
                    23:a6:5c:8e:11:f1:cc:b7:c1:02:32:a6:9b:55:3f:
                    4d:50:bc:ba:28:6a:01:29:ae:24:2a:a8:7e:63:6d:
                    39:5a:60:4d:a3:66:c8:4d:a4:8b:06:99:d2:7f:d4:
                    63:ac:f1:b3:06:8c:db:c9:58:52:b2:ed:bb:9a:fb:
                    fa:b1:63:c2:60:2f:81:c8:73:c7:12:5b:67:d5:e9:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:26:2D:5C:39:EA:96:D6:50:13:52:A0:0D:27:65:3F:50:93:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/84143f-addc-43c7-9870-6873202faab9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/84143f-addc-43c7-9870-6873202faab9/1/6QMmLVw56pbWUBNSoA0nZT9Qk_k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:70:5e:70:21:b7:a6:ba:9a:80:18:0d:44:70:36:6f:7e:a7:
         fc:c1:19:b8:7d:4d:50:d6:c9:e8:3a:3e:bd:dd:71:f2:cf:62:
         1e:82:76:38:46:b8:ef:7f:81:8e:e0:b4:92:81:73:ff:2c:41:
         d0:02:17:5a:8f:28:f7:8a:13:6d:b6:2a:f8:dd:e4:1e:6e:ad:
         a5:8d:d4:14:1f:92:87:40:39:db:11:0a:e3:52:99:f3:f6:fb:
         f3:ad:a6:61:3a:51:d0:6c:e3:4c:53:bc:5c:b7:29:99:f4:f5:
         ae:9b:68:22:7a:4f:44:6a:0a:ee:df:da:80:9f:b5:10:12:77:
         70:4a:21:7b:cc:a1:df:cc:a3:01:cc:b0:de:1f:e8:15:29:16:
         a5:8f:9c:2c:9b:71:93:a4:49:58:b9:db:65:ae:e5:59:dd:e9:
         96:2e:f6:cd:d8:de:99:05:9c:eb:43:9b:05:50:6d:55:17:ad:
         04:e9:9d:6a:ad:41:3d:a7:d3:83:24:e4:94:30:10:94:0c:57:
         2f:88:65:66:cc:82:3d:ce:07:b5:4e:bd:e9:07:bf:5a:0c:9d:
         ee:9d:32:d2:d7:aa:ac:c0:e6:1e:ec:ed:2f:67:b0:a8:fe:e7:
         1b:1a:76:89:22:b0:c5:fe:3c:26:e6:fa:c1:d8:f9:41:d1:f4:
         c1:24:d4:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----