Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77m41scD_mfBR_0C_5iAdmMFDZc.cer
File:                     77m41scD_mfBR_0C_5iAdmMFDZc.cer (raw, json)
Hash identifier:          Fybo64lIz7Ul2/0PxeXn8y+Xq4n+HHnRq+vwC3iHwJI=
Subject key identifier:   EF:B9:B8:D6:C7:03:FE:67:C1:47:FD:02:FF:98:80:76:63:05:0D:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       845A642105
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/77m41scD_mfBR_0C_5iAdmMFDZc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:45:36 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 185.71.124.0/22
                          IP: 2a03:3960::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568452194565 (0x845a642105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:45:36 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=efb9b8d6c703fe67c147fd02ff98807663050d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:e2:4f:73:18:3f:f4:fe:a6:81:93:b7:5d:
                    35:d1:40:6d:8f:a2:fd:a0:77:35:ef:7d:a3:e5:de:
                    ee:55:41:63:54:48:8e:d1:ee:87:ab:75:e9:2a:47:
                    e6:22:eb:48:e1:e3:c3:77:d3:ef:a1:55:10:37:8c:
                    aa:4c:01:20:8a:8f:f3:5c:bd:b1:9d:40:94:c0:82:
                    14:4b:58:4b:4a:37:95:c4:f9:47:3a:5c:df:bf:30:
                    a3:c4:d0:d9:e8:97:da:cd:b8:7e:0d:83:39:a6:83:
                    99:0c:1d:e9:fe:6e:d1:2a:44:0a:90:bf:11:35:68:
                    f8:b0:e2:ee:36:5b:79:88:9e:95:d4:61:7f:ba:dd:
                    55:1e:a8:09:b3:32:6c:90:43:24:fa:70:86:c6:ff:
                    87:a2:6b:9d:54:26:0d:c9:6d:3e:af:a3:74:38:35:
                    ef:72:c0:a1:be:0e:ad:c3:a0:4d:e3:aa:d9:55:27:
                    14:b1:5e:59:13:8c:a3:a2:2b:8f:8c:00:0c:91:54:
                    c9:14:b6:ca:f9:13:78:b6:05:35:f7:76:a5:04:52:
                    43:65:8c:93:4d:bf:45:0e:c1:d6:de:51:d5:3b:64:
                    61:0e:ec:cb:d8:ab:f9:a4:65:be:05:f7:31:90:54:
                    d2:65:c8:d6:80:2f:dd:cd:48:e6:93:72:73:75:1e:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:B8:D6:C7:03:FE:67:C1:47:FD:02:FF:98:80:76:63:05:0D:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/77m41scD_mfBR_0C_5iAdmMFDZc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.124.0/22
                IPv6:
                  2a03:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:11:cb:ac:d8:f0:d2:ff:b6:cd:dd:d6:7f:8b:b8:79:09:
         07:e8:a6:75:39:c0:87:46:2f:89:7b:58:aa:89:09:2f:4a:9d:
         b0:d0:19:92:9d:36:33:26:a2:5f:21:3f:e9:bc:af:15:28:de:
         bf:6c:34:48:22:80:5a:16:e2:a4:e4:11:71:48:2c:a6:fb:7e:
         f0:cb:30:7b:02:6e:f5:75:6d:25:55:b4:2c:bc:b4:df:1c:15:
         37:a2:25:41:e2:e4:27:c9:fa:65:ea:c0:52:0c:95:39:97:a3:
         75:35:42:ef:8e:6a:4e:84:98:61:0a:ea:3e:2d:63:45:c2:75:
         dd:f3:7c:68:d5:a2:3d:16:45:a3:b0:09:8a:57:a6:e9:74:c9:
         9f:42:11:82:b9:74:49:1a:da:8f:36:a3:fa:3b:7c:05:69:e5:
         e3:81:4d:6f:a6:4c:05:49:05:6e:b6:43:a3:a6:26:6b:7d:d6:
         a9:60:76:5b:b6:e5:f2:fb:94:e4:12:b0:8d:c1:6b:c1:27:b8:
         5e:cb:dc:a0:2f:88:b9:f2:c3:cf:d9:a0:b2:66:9c:9a:9e:33:
         b9:5e:9c:2c:12:84:83:37:29:3d:1b:2f:a3:f2:a9:6c:55:8d:
         f9:16:f4:92:1f:ae:00:54:f3:8e:7f:a2:69:8e:2c:1b:d0:d5:
         bd:fc:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----