Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6YUYj5nAdJqI4e30vXsH3B1LaLU.cer
File:                     6YUYj5nAdJqI4e30vXsH3B1LaLU.cer (raw, json)
Hash identifier:          sEvKAxwhYVA/CyM2PibV3Ne44aEYpgdMVatFF74nQxA=
Subject key identifier:   E9:85:18:8F:99:C0:74:9A:88:E1:ED:F4:BD:7B:07:DC:1D:4B:68:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81C542C167
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/39acbf-26be-4b5c-9c64-bc71596c8243/1/6YUYj5nAdJqI4e30vXsH3B1LaLU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/39acbf-26be-4b5c-9c64-bc71596c8243/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:40:00 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 60548
                          IP: 45.157.232.0/22
                          IP: 185.254.96.0/22
                          IP: 2a0c:4ac0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557360267623 (0x81c542c167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:40:00 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e985188f99c0749a88e1edf4bd7b07dc1d4b68b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:7f:49:b8:cb:3a:53:ba:bb:f0:73:3b:3d:
                    b0:8e:33:a2:1c:ce:ab:23:b9:47:30:6e:db:05:47:
                    da:50:d4:80:87:33:35:93:44:e3:b4:f6:c2:a5:c1:
                    c6:0a:03:0c:54:55:2e:b7:c7:69:e7:11:4d:6e:f4:
                    52:19:93:3e:38:f3:60:c7:df:f4:6f:54:4f:62:a5:
                    85:fd:13:0d:3e:a0:73:df:9d:66:18:17:c8:6a:ac:
                    1a:34:0c:c3:41:13:5d:fe:ee:6c:1b:6b:fe:c8:33:
                    19:2f:23:89:72:8a:75:50:d9:0f:67:30:35:c1:c9:
                    ca:a6:9a:b4:68:fb:c7:ac:9b:70:f5:d1:44:a3:6b:
                    af:cc:95:28:79:9a:cf:8a:64:f4:72:6c:6a:ff:04:
                    35:d6:0f:6e:db:6c:54:72:03:91:06:ec:a2:5e:a7:
                    78:28:fe:4e:28:ff:d6:cb:38:6f:68:58:b6:f1:95:
                    7c:12:38:a2:f9:aa:bb:d2:45:54:66:53:2e:5a:79:
                    d7:63:80:42:c5:ed:86:a3:92:e2:e0:94:79:e3:c6:
                    dd:f7:25:5b:3f:7f:b1:cd:ca:6e:4b:b0:8c:ea:f1:
                    d9:a7:45:8f:49:67:a6:7e:1c:1e:ae:b3:6c:ec:bb:
                    dc:1b:63:7c:bb:83:6b:a3:39:a0:7d:73:dd:f6:d0:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:85:18:8F:99:C0:74:9A:88:E1:ED:F4:BD:7B:07:DC:1D:4B:68:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/39acbf-26be-4b5c-9c64-bc71596c8243/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/39acbf-26be-4b5c-9c64-bc71596c8243/1/6YUYj5nAdJqI4e30vXsH3B1LaLU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.232.0/22
                  185.254.96.0/22
                IPv6:
                  2a0c:4ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60548

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:85:1f:5c:5b:c8:66:e6:2d:aa:a5:12:fb:a6:c9:67:e6:
         80:9d:70:a0:b2:18:c3:fb:aa:c4:67:61:a5:5b:d4:0f:bb:0a:
         05:11:59:f4:9d:4b:c9:38:f5:1c:27:70:87:16:ba:e9:3b:a8:
         a8:6f:0b:52:de:f8:d6:ed:2c:7c:f6:a8:6e:a3:fb:85:22:f9:
         9e:2e:05:61:cc:ee:d6:7d:5e:1e:08:a0:23:92:39:ba:ae:e1:
         1a:50:0b:82:5f:15:35:70:dc:73:bf:fc:25:7e:5b:be:6d:2e:
         ac:31:c2:75:a4:ed:30:86:b1:96:01:ab:49:69:a4:52:db:8b:
         11:85:cd:0a:2c:ca:a0:ea:d7:3b:28:ec:cd:eb:6f:58:38:cc:
         ca:07:7e:25:97:a7:c6:d1:5a:be:9a:0d:06:95:8b:51:e3:3c:
         0a:31:5e:5c:36:c5:a2:15:1b:22:76:82:45:2e:8e:5f:06:9e:
         68:af:84:e0:fa:3b:59:1d:23:16:f2:f9:d3:f3:73:08:e5:a3:
         78:de:6d:8b:ed:fe:43:63:6f:32:bc:ba:a5:e0:b6:66:c2:5a:
         bc:c4:9b:46:b3:73:d0:a5:35:54:2c:a6:54:7c:eb:d2:f4:96:
         da:81:87:4d:a4:dd:11:01:98:68:84:3c:93:07:e7:16:74:c4:
         99:08:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----