Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7DA70dZudL0rbyRRbv_Mu6hmEsA.cer
File:                     7DA70dZudL0rbyRRbv_Mu6hmEsA.cer (raw, json)
Hash identifier:          I/Ri8XDoHRso7qs18FEbUwBWoRiMCHf6NZr0RrvS+ck=
Subject key identifier:   EC:30:3B:D1:D6:6E:74:BD:2B:6F:24:51:6E:FF:CC:BB:A8:66:12:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7F7AB4F53B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/7DA70dZudL0rbyRRbv_Mu6hmEsA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:20:04 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 213115

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547519526203 (0x7f7ab4f53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:20:04 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ec303bd1d66e74bd2b6f24516effccbba86612c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:4e:19:85:23:32:11:41:84:eb:a4:e2:55:
                    5a:ec:c9:39:83:8a:c6:06:cd:4a:d5:c3:4c:85:01:
                    7c:b0:a1:c9:ca:ff:34:6d:92:8b:5d:44:c0:f2:d0:
                    6e:fb:9e:b5:03:bf:b1:42:7f:cb:c8:69:d7:7d:d1:
                    28:65:a4:61:61:f9:f7:55:a1:d1:44:c5:1b:7e:51:
                    b4:87:0b:db:23:14:14:f3:ea:9d:9e:d0:2e:30:36:
                    34:fd:41:46:9a:e7:24:52:3b:f5:6c:bc:f4:79:68:
                    7d:ca:91:d5:5f:46:57:ec:de:19:b0:3d:01:01:c8:
                    e1:0d:89:0a:4a:2f:a0:2c:59:a7:d0:86:17:97:a9:
                    bf:62:cf:af:82:b3:6e:e7:89:b7:de:6b:bf:94:39:
                    67:2a:6a:59:cd:4d:01:9a:22:f3:df:5b:16:e0:f6:
                    1d:a9:38:f0:f7:a0:c4:e6:d3:8a:de:fa:d3:58:6f:
                    b1:02:24:2d:0a:21:e6:80:ea:04:84:71:ec:9b:e1:
                    d9:c6:b0:32:cc:0b:89:aa:41:0f:38:bf:d2:9d:c0:
                    73:6e:5a:a8:05:54:42:dd:38:e5:c5:a1:11:6c:ff:
                    39:72:e5:1e:e4:e2:e2:d7:b2:b9:2e:02:58:72:68:
                    67:43:20:66:7e:68:16:f4:8c:3d:c9:c8:a4:77:6a:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:3B:D1:D6:6E:74:BD:2B:6F:24:51:6E:FF:CC:BB:A8:66:12:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/7DA70dZudL0rbyRRbv_Mu6hmEsA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213115

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:38:50:60:43:ec:dd:80:d6:38:10:67:36:75:54:06:f3:
         be:6f:22:ca:ff:52:0e:a7:9f:9d:2a:89:fa:1a:d2:52:17:24:
         7e:b2:e4:f9:62:fd:85:d7:d2:a0:a0:e2:92:70:41:36:2b:d8:
         a2:d3:c5:c7:af:3c:56:24:3a:92:1d:51:01:b5:91:9d:7d:65:
         55:5c:be:a1:a5:d0:79:bb:69:49:8b:58:a8:fb:09:83:c5:b0:
         d2:6e:a9:12:79:db:e4:09:b3:31:41:38:23:33:35:8a:3c:f2:
         a7:73:1b:9b:93:e1:23:50:db:15:12:4a:2c:a1:ee:3d:74:61:
         44:4f:9a:7a:cd:96:71:29:7c:60:4e:b7:b5:70:75:53:e3:9e:
         87:f2:39:4a:8e:63:d6:5a:78:28:df:38:db:6c:8d:30:fb:aa:
         0a:7c:85:ff:8c:33:27:1e:38:48:6b:1e:ce:b9:1c:8b:20:ef:
         72:9f:02:19:e0:6e:84:8f:01:8e:98:fa:86:82:c4:d3:b6:bb:
         06:e6:bd:9d:e5:fe:03:e9:c2:e3:96:59:bd:59:0d:f6:89:49:
         53:b0:ea:b9:26:a0:49:cb:41:c9:55:b5:bc:6a:cd:15:04:ec:
         1c:b1:87:53:37:92:53:7c:c2:df:1e:3d:9b:3e:80:e6:70:67:
         ee:32:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----