Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7EDgI1RY4pnmSgMOQ5Vzj7CXn_s.cer
File:                     7EDgI1RY4pnmSgMOQ5Vzj7CXn_s.cer (raw, json)
Hash identifier:          Y1f0sBUsQCEGs8s4V6l/72ZokOlpJo24F25Bn+29KMY=
Subject key identifier:   EC:40:E0:23:54:58:E2:99:E6:4A:03:0E:43:95:73:8F:B0:97:9F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7F99DE570C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/411815-e63d-44f9-9762-9a49b06fafa4/1/7EDgI1RY4pnmSgMOQ5Vzj7CXn_s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/411815-e63d-44f9-9762-9a49b06fafa4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:23:22 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2.58.124.0/22
                          IP: 2a09:e5c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548042331916 (0x7f99de570c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:23:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ec40e0235458e299e64a030e4395738fb0979ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:ea:68:92:c5:77:66:91:3d:92:79:a0:eb:
                    50:7b:ab:b0:f0:30:6c:0b:ad:3c:6a:9d:d2:21:70:
                    e3:e5:aa:87:22:d1:12:dc:ed:48:7f:9f:21:3f:a3:
                    b7:25:6f:69:98:4d:94:26:24:c4:88:57:b2:aa:07:
                    bd:b9:cb:70:9c:75:c4:81:74:27:76:c4:0a:c1:a2:
                    02:cb:9c:4a:fd:72:57:b1:a2:27:a2:73:99:03:3d:
                    0a:b7:ad:ce:34:0c:41:3d:dd:a0:91:14:aa:d1:44:
                    96:b2:d8:4c:f9:82:c1:c4:27:08:37:38:4c:bc:96:
                    3f:ac:5c:f4:91:b2:a9:4b:33:de:17:a3:a9:e7:d2:
                    7e:18:dc:4e:54:fc:99:e7:59:86:73:31:09:0d:ad:
                    6a:a8:1a:3d:d2:3c:49:d5:3a:cd:20:90:f1:b9:ce:
                    c3:a2:7c:4b:ad:74:82:72:e6:99:ef:3c:fc:98:12:
                    0c:d9:c6:c0:8f:07:a3:97:9a:b2:ed:5a:e6:19:c9:
                    ae:94:36:86:ba:bf:54:4c:ea:e3:d0:a1:81:f2:dd:
                    49:e1:a9:49:48:4e:e0:0a:4b:b9:43:b8:e0:93:03:
                    c5:58:29:67:9b:81:40:ae:7b:bb:97:f8:eb:f5:23:
                    f6:08:98:70:2d:03:c7:fe:cb:5c:7f:7f:e5:04:62:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:E0:23:54:58:E2:99:E6:4A:03:0E:43:95:73:8F:B0:97:9F:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/411815-e63d-44f9-9762-9a49b06fafa4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/411815-e63d-44f9-9762-9a49b06fafa4/1/7EDgI1RY4pnmSgMOQ5Vzj7CXn_s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.124.0/22
                IPv6:
                  2a09:e5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:44:c2:04:61:35:c0:5c:e2:eb:b2:f5:72:30:1a:de:e8:cb:
         f2:bd:d7:42:22:71:da:96:6b:83:3f:97:93:23:7b:f3:2d:6d:
         bc:38:f8:51:f5:e4:37:8a:e1:94:c6:d5:30:13:73:f5:9c:a5:
         dc:80:ff:07:e9:1f:6d:fe:19:9b:70:9e:0a:9a:c2:45:39:26:
         f1:f1:96:73:e0:65:50:9b:3f:42:b2:c8:71:ee:4c:ce:cb:39:
         cc:83:7a:bc:ff:13:e2:ce:f8:e6:5d:ee:eb:29:3c:5c:fc:b1:
         a3:cf:7e:a4:7c:b0:24:d1:98:ff:25:b7:37:b0:7f:04:53:b7:
         9b:b8:94:c5:25:2f:29:1b:66:4e:f9:4d:94:fc:f8:61:98:72:
         b9:46:d6:28:b3:97:b8:08:3b:4f:39:c7:80:cb:fc:57:d3:68:
         16:41:7c:cc:94:39:a8:7c:76:e1:93:8a:1d:5c:13:d6:cb:3c:
         e3:da:85:8b:51:01:ad:d0:8b:70:ff:d0:6a:d6:3c:04:40:08:
         51:e5:52:60:1e:0b:36:95:1b:8e:1b:30:d4:66:d7:97:72:f4:
         aa:9d:1b:a2:d1:f4:21:ad:10:87:cc:20:10:53:bc:4b:c3:34:
         08:b7:38:3e:09:8b:11:3b:d6:db:ad:b1:81:0d:18:7a:c8:d3:
         44:19:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----