Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7LbDJYHBcOCYRHCBossQj3HeqYs.cer
File:                     7LbDJYHBcOCYRHCBossQj3HeqYs.cer (raw, json)
Hash identifier:          2RvGvDsXZfLurjfY5vAZLKAD7eSbwXAepD8eD3I4dWo=
Subject key identifier:   EC:B6:C3:25:81:C1:70:E0:98:44:70:81:A2:CB:10:8F:71:DE:A9:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       80DA7973E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/df0211-dd8a-4d3f-9aee-93aefdd44f29/1/7LbDJYHBcOCYRHCBossQj3HeqYs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/df0211-dd8a-4d3f-9aee-93aefdd44f29/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:06:37 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.143.232.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553421206502 (0x80da7973e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:06:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ecb6c32581c170e098447081a2cb108f71dea98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:5b:d3:7b:d9:34:12:14:ff:cb:23:02:d3:
                    38:cd:47:67:46:08:60:73:f8:b2:ee:b4:8d:29:a5:
                    9a:c5:23:0e:5c:9c:f6:ca:90:ac:dd:c8:a2:5a:8a:
                    4c:19:64:b2:c9:c9:75:78:67:60:28:d1:8f:61:a9:
                    b6:56:73:0a:cb:09:04:f9:a4:82:41:0e:52:a4:d4:
                    0f:51:db:28:de:bc:85:da:5d:b6:8a:b7:40:ad:fb:
                    e7:d6:a7:19:68:fc:43:aa:9d:a6:5a:31:47:fe:bb:
                    c2:e6:5f:52:27:17:b7:94:ac:86:ad:59:a9:a4:c3:
                    2b:63:42:18:43:01:4a:75:88:ea:41:06:a0:95:67:
                    73:e6:42:3e:cc:c2:33:d0:98:93:58:e9:6b:95:b6:
                    35:07:f2:f8:a8:6d:41:89:59:be:ec:91:fc:69:d9:
                    8b:6a:a8:24:ed:a4:9a:1b:f5:8e:15:57:1e:5c:58:
                    83:2a:48:20:ee:5b:30:c3:5d:e8:5f:0f:e4:5c:54:
                    65:2c:77:61:8c:ec:74:2a:0e:97:59:2f:69:ac:ad:
                    82:a4:e1:56:3a:33:c8:36:4b:11:6d:f9:e7:a3:79:
                    53:a5:a9:10:2f:2e:53:2d:df:02:f8:d6:b5:13:13:
                    bf:66:15:64:66:7e:03:dc:2c:1b:05:c0:22:00:8c:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:C3:25:81:C1:70:E0:98:44:70:81:A2:CB:10:8F:71:DE:A9:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df0211-dd8a-4d3f-9aee-93aefdd44f29/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df0211-dd8a-4d3f-9aee-93aefdd44f29/1/7LbDJYHBcOCYRHCBossQj3HeqYs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:96:36:90:a6:69:01:c1:93:ea:82:1a:2f:1a:46:0f:89:
         7f:83:fd:20:09:e1:42:c1:ad:38:78:7a:cb:d4:38:cd:5a:2f:
         bb:38:b6:80:6d:70:f0:fe:6e:4a:cf:b0:29:da:53:9a:99:dc:
         64:2d:07:9f:4f:f1:8a:b7:d5:b9:1f:91:59:68:4d:da:85:14:
         41:f9:01:d7:41:61:1a:15:94:70:41:2e:b8:96:73:c1:9d:22:
         e3:a5:93:86:10:87:b0:b3:a6:28:5d:d2:35:3c:37:5f:33:94:
         b4:cc:11:de:b7:43:d8:b3:bd:4f:bf:57:18:c5:69:ef:32:f4:
         9b:0c:50:28:c2:34:de:ef:1e:41:90:f0:e0:19:2d:d1:e0:5f:
         fe:2a:24:9e:b0:ea:ce:7c:45:dd:99:2c:19:96:4e:f9:3a:1d:
         4e:fe:05:92:4a:f4:1f:fd:ef:df:5b:82:48:c5:2e:d3:d4:5c:
         51:84:c1:28:49:7f:79:b7:7f:43:51:4a:4b:66:b0:1b:e2:04:
         3b:29:d6:ea:bf:24:9f:79:e3:12:28:5a:04:97:55:f7:e0:8b:
         85:6f:6b:75:ae:aa:72:fd:e3:f2:6b:3b:f6:df:a6:4e:bf:97:
         b6:89:b6:89:32:6c:0b:7a:f0:90:42:8f:ed:85:99:10:7d:a6:
         9e:b4:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----