Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6bCBboybnlh-7mMMo4xd4cSh_KY.cer
File:                     6bCBboybnlh-7mMMo4xd4cSh_KY.cer (raw, json)
Hash identifier:          hjIHexlhO4WCFvT0d/bZwE3VlCL8yNpuh1qyseSOUwE=
Subject key identifier:   E9:B0:81:6E:8C:9B:9E:58:7E:EE:63:0C:A3:8C:5D:E1:C4:A1:FC:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7EAF27B4CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/6281dc-9b15-4f5d-b7ac-3aa660398ca6/1/6bCBboybnlh-7mMMo4xd4cSh_KY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/6281dc-9b15-4f5d-b7ac-3aa660398ca6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:57:54 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 15513
                          AS: 31544
                          IP: 193.164.244.0/23
                          IP: 2001:67c:c8::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544104494283 (0x7eaf27b4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:57:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e9b0816e8c9b9e587eee630ca38c5de1c4a1fca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:5c:e0:e3:f5:cc:ce:82:17:a5:dd:07:4b:
                    13:ad:20:5e:f8:1c:2c:1c:ea:e3:ee:9c:ec:82:b7:
                    ff:e6:75:9a:71:da:55:71:d8:a2:3d:74:b2:fb:06:
                    6f:d3:6c:f9:8a:6d:2e:ff:50:59:fd:76:bb:3c:a5:
                    15:ba:05:ff:15:fc:3f:90:a0:a9:d2:ca:bb:d1:ec:
                    a5:4f:f7:00:30:59:9e:aa:b6:d3:8c:56:0e:c6:19:
                    64:37:e3:7d:0b:e1:fd:36:d3:2b:d3:13:78:96:21:
                    a5:79:5b:63:4c:3c:25:84:60:28:8f:d9:fc:fa:04:
                    2b:54:78:05:ce:c4:b9:8c:34:6b:48:32:56:08:63:
                    3f:e1:2a:68:a4:86:89:f5:a8:a9:6b:53:b8:f0:0c:
                    de:11:60:b0:73:ce:63:22:f0:c0:16:8b:96:0b:a0:
                    b2:49:bb:d0:3e:92:18:5c:6d:ba:4f:ea:fe:4e:65:
                    01:03:ff:31:15:74:3c:39:db:a7:88:f8:2a:ed:25:
                    15:01:0d:ae:ea:8c:78:ab:34:3a:60:5b:84:5d:e5:
                    f6:cf:13:cb:97:60:ca:05:21:08:c8:da:fa:1c:c9:
                    a4:80:c9:e9:e7:91:ae:b3:75:da:9c:e5:e5:4c:10:
                    de:f2:a7:cc:b0:6c:73:08:a8:60:11:b7:6c:fc:1b:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:81:6E:8C:9B:9E:58:7E:EE:63:0C:A3:8C:5D:E1:C4:A1:FC:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6281dc-9b15-4f5d-b7ac-3aa660398ca6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6281dc-9b15-4f5d-b7ac-3aa660398ca6/1/6bCBboybnlh-7mMMo4xd4cSh_KY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.244.0/23
                IPv6:
                  2001:67c:c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15513
                  31544

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:60:62:39:51:5f:7b:fe:00:39:5d:8a:9f:d7:ba:e9:cf:
         fa:4a:7a:d1:a0:f6:9f:bd:6e:79:29:0d:90:02:59:79:12:56:
         47:f6:a1:f5:47:de:bb:49:f2:9d:f0:7f:05:45:f0:1a:b2:16:
         57:dc:9c:c4:05:89:f7:ca:4f:b7:69:8e:8e:54:d9:02:18:9f:
         78:b9:d8:f6:cb:44:66:2b:2f:45:d7:4d:cd:91:63:56:bb:64:
         c0:65:83:02:a0:80:33:0c:3e:12:eb:5e:1c:72:65:9f:15:d3:
         91:d6:80:21:42:40:a3:b9:27:13:6d:79:bd:f4:ab:f5:34:e1:
         cc:21:a3:52:4b:eb:17:7a:5b:44:01:90:34:0c:83:c8:86:62:
         e9:e7:1d:63:43:fd:a1:02:f8:50:87:84:a7:77:49:37:7f:9e:
         3c:cf:2a:cb:1c:77:b9:3a:77:89:f3:ca:a4:0e:76:1d:d8:d7:
         8d:5e:7a:da:52:ff:e0:2b:ac:a7:e1:43:87:ef:b9:1d:27:74:
         57:10:03:d5:10:92:48:16:2c:43:f6:d0:6f:8f:4d:99:f0:8b:
         16:33:82:ad:3e:26:a8:5b:35:83:8b:6e:54:20:f6:7e:56:e5:
         ec:24:34:1b:ed:39:63:b0:1b:1b:4a:ee:ec:f1:45:78:df:d3:
         b3:e4:4e:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----