Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74FqrsHMW1nlnTfNjLR9F1-Ai5A.cer
File:                     74FqrsHMW1nlnTfNjLR9F1-Ai5A.cer (raw, json)
Hash identifier:          WeWXC5fXEiN3oEUw4qiiDoCO8qBImINuhM0qr0aWhNM=
Subject key identifier:   EF:81:6A:AE:C1:CC:5B:59:E5:9D:37:CD:8C:B4:7D:17:5F:80:8B:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7ACFFFC10D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/2c163d-2abc-4057-bf86-e8d3c28dc939/1/74FqrsHMW1nlnTfNjLR9F1-Ai5A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/2c163d-2abc-4057-bf86-e8d3c28dc939/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:23:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.92.120.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527475654925 (0x7acfffc10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:23:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ef816aaec1cc5b59e59d37cd8cb47d175f808b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:7d:87:ab:80:0c:08:34:e2:2e:6e:ba:ff:
                    ea:1b:1d:7a:4d:5a:63:82:af:59:30:7a:4b:e4:6f:
                    5c:50:ce:97:d7:12:fc:f6:0e:6c:7a:8b:f0:5b:a7:
                    97:1f:7c:8d:bd:98:00:42:22:44:fc:da:e8:fc:ca:
                    be:06:db:08:62:b9:e3:72:e1:b2:0b:7e:06:7d:ba:
                    92:39:ea:37:19:c0:aa:c3:63:86:c2:31:fa:ed:1e:
                    0d:ea:ee:69:1b:20:f7:e8:5d:81:44:c7:e7:97:4d:
                    51:97:83:3b:ff:40:71:17:87:53:44:f8:40:d8:46:
                    7c:ce:75:be:20:d5:c6:f5:60:6d:96:c0:1b:c9:1e:
                    ee:a7:f3:05:d6:96:56:ae:56:a0:e1:64:41:e0:41:
                    39:e7:e6:ba:db:c1:9a:08:3d:ec:13:20:bb:41:bd:
                    10:ee:c5:05:24:ea:5a:2e:bc:3c:a5:bc:f5:14:eb:
                    d3:58:1f:8b:4b:c8:86:64:88:97:90:7d:86:48:f3:
                    f3:d2:36:64:78:b1:bf:e2:ae:6d:69:f3:b6:d0:8b:
                    04:c1:c3:4f:77:f1:bb:4f:25:19:e2:f5:c2:27:e0:
                    5c:52:c6:1d:47:a3:c5:ce:53:54:ca:2a:0c:b3:19:
                    3e:e2:a4:df:b0:69:02:fc:99:73:0f:ea:9d:1c:b2:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:6A:AE:C1:CC:5B:59:E5:9D:37:CD:8C:B4:7D:17:5F:80:8B:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2c163d-2abc-4057-bf86-e8d3c28dc939/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2c163d-2abc-4057-bf86-e8d3c28dc939/1/74FqrsHMW1nlnTfNjLR9F1-Ai5A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:2d:0d:8f:e2:be:3b:e7:29:12:b9:27:9c:0b:a0:02:53:
         73:af:84:7c:41:76:d3:e7:50:cc:64:e1:15:fa:91:6f:a7:46:
         4f:bc:17:6f:69:1c:e7:a7:0a:4e:01:ec:4a:7e:14:7f:da:ff:
         55:de:21:89:cf:c3:2f:53:d1:12:be:7f:ed:39:f0:87:97:95:
         37:58:32:03:89:3b:9f:46:39:36:b3:f9:b6:3f:42:1b:4e:8c:
         0d:99:35:ad:23:6d:9e:2c:13:89:83:4a:ab:00:4b:c3:63:43:
         67:7f:0b:28:3e:fd:6e:fe:c6:90:54:ca:74:dd:ee:94:0e:8a:
         ab:7b:6b:f6:02:fc:f0:4c:53:fc:35:dc:f9:44:cd:bc:0f:4b:
         86:c3:c0:0e:1f:3f:7f:65:9f:9c:13:ee:ba:59:95:0d:a4:f1:
         eb:73:f9:84:eb:2f:c5:8e:51:05:a1:33:b8:32:ed:e3:99:93:
         87:fe:41:2f:a2:fd:9a:b9:89:6b:c6:d2:cd:00:70:c8:ea:8f:
         ac:e4:92:46:36:e2:84:0b:91:88:76:65:d1:c8:60:06:22:ac:
         e3:fe:3b:7d:f1:ca:0d:f5:7a:03:5f:ff:21:32:f0:a2:f9:47:
         af:97:96:20:7b:fb:dd:5b:6b:00:9a:7a:4a:c1:f7:f0:98:42:
         d9:5f:3a:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----