Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7adahPMEecBp-TpbXD3k9edIJq8.cer
File:                     7adahPMEecBp-TpbXD3k9edIJq8.cer (raw, json)
Hash identifier:          5hPJ5Tb6/3vjk4srI/g2a7SiuddwDKbkfCqoQadrmQk=
Subject key identifier:   ED:A7:5A:84:F3:04:79:C0:69:F9:3A:5B:5C:3D:E4:F5:E7:48:26:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       793113BB95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/91b7e4-bafb-48a6-9832-23608055ada4/1/7adahPMEecBp-TpbXD3k9edIJq8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/91b7e4-bafb-48a6-9832-23608055ada4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:48:17 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 34631

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520514419605 (0x793113bb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=eda75a84f30479c069f93a5b5c3de4f5e74826af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:90:dd:f6:99:4c:ce:c5:61:e2:02:92:50:
                    9d:76:56:62:cf:83:a1:3a:d2:72:5d:90:88:e9:d8:
                    88:2c:17:47:ec:f3:ec:09:9f:98:cb:c0:68:35:1b:
                    98:72:bc:97:f6:57:f9:5b:6e:ab:f5:17:63:65:02:
                    10:66:9e:14:e2:d8:61:47:53:67:d5:95:e0:f7:1f:
                    19:04:3f:a5:9f:b8:46:ea:9a:08:01:0c:13:3b:66:
                    31:c6:2b:70:70:a4:1f:49:31:dd:c4:96:c8:54:b4:
                    b6:5d:ea:e9:6f:42:14:ae:06:2e:0c:81:f2:a0:fd:
                    0d:85:44:2c:73:9c:92:3e:58:36:72:75:5f:98:d9:
                    85:7d:94:14:49:74:7d:88:60:85:f8:d3:05:69:13:
                    e9:76:44:3a:6f:a2:ab:3c:8c:10:0b:6e:a0:af:1c:
                    4a:21:a5:21:a1:b9:77:87:c2:39:8c:b6:7e:5f:c5:
                    f5:e3:b6:01:cb:6d:a8:1c:3d:33:b1:ea:30:23:64:
                    62:55:c9:2b:51:cb:07:ef:59:6a:3b:3f:49:0e:76:
                    21:a4:9f:c4:51:08:71:23:0c:46:59:40:be:23:40:
                    fb:c7:9c:0a:81:d5:a2:37:16:dd:a2:7c:7a:ba:85:
                    44:f2:d3:9f:ed:7e:48:e5:a3:81:ee:3b:bd:8e:77:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A7:5A:84:F3:04:79:C0:69:F9:3A:5B:5C:3D:E4:F5:E7:48:26:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/91b7e4-bafb-48a6-9832-23608055ada4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/91b7e4-bafb-48a6-9832-23608055ada4/1/7adahPMEecBp-TpbXD3k9edIJq8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34631

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:90:a5:1a:a3:1f:59:7c:51:05:01:03:be:8b:b4:fd:c7:
         c3:68:56:c1:8a:c8:bb:ea:81:37:b9:3b:03:46:53:53:37:eb:
         5d:98:05:ac:a7:b8:5b:f9:8a:21:a2:08:2d:50:88:ca:27:32:
         02:f2:c3:ca:29:79:a6:09:2c:32:5c:d5:1c:9c:ae:07:68:c5:
         0b:7a:98:ed:bf:44:94:69:83:70:24:5d:5a:2e:5f:f2:46:63:
         c4:ce:5d:c1:01:e1:aa:c0:fc:55:71:6e:b9:7e:af:b2:91:52:
         fe:f6:20:ab:f3:09:af:f7:bb:ac:b1:62:da:9e:83:4f:5d:bc:
         7d:97:8c:e0:0f:eb:d8:a1:48:ce:96:90:94:77:7f:3f:2c:3f:
         25:4e:f0:04:9f:50:d4:18:8c:63:2b:ec:97:78:84:fc:d1:65:
         88:e1:3d:6b:f7:ad:74:52:ba:16:fa:29:3f:cb:fb:69:39:74:
         00:a1:a3:07:e4:f3:71:30:c4:74:38:fb:ae:f7:b2:f3:9f:17:
         fc:bc:81:8a:b2:da:05:37:5e:8e:98:b2:ec:2a:e1:ee:ef:3c:
         c7:81:fe:4a:57:8a:fd:82:77:01:40:c6:0f:19:16:ab:56:67:
         6b:16:0b:57:e1:20:a9:26:51:f6:43:93:48:0e:b5:8b:0a:9d:
         01:64:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----