Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fHVZvMujN38O6MNFJtObvYbOnM.cer
File:                     7fHVZvMujN38O6MNFJtObvYbOnM.cer (raw, json)
Hash identifier:          uaJtzHh939ryNrHnKulSBT//Q9F9Yo0Lx6s9VtFOaYw=
Subject key identifier:   ED:F1:D5:66:F3:2E:8C:DD:FC:3B:A3:0D:14:9B:4E:6E:F6:1B:3A:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8365BEF83F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/2d5183-4f3a-4502-9d9d-a2d75adcff84/1/7fHVZvMujN38O6MNFJtObvYbOnM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/2d5183-4f3a-4502-9d9d-a2d75adcff84/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:09:40 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 85.209.112.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564347729983 (0x8365bef83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:09:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=edf1d566f32e8cddfc3ba30d149b4e6ef61b3a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:cb:6a:25:68:32:a9:e8:de:8a:4e:79:e7:
                    0e:d6:61:57:03:1f:fa:ef:a0:54:0a:ab:15:d3:21:
                    a6:47:47:0c:10:57:b0:5e:c8:45:45:d2:78:43:27:
                    0c:67:11:78:b2:64:72:4d:be:45:40:8a:7a:cf:1c:
                    f2:11:a9:0d:3d:b6:d4:fe:b9:f6:ce:2e:f8:9b:7c:
                    73:cd:33:33:79:20:0b:5b:72:e9:3d:30:38:d7:d3:
                    dc:da:7e:a2:74:7d:5f:ee:55:fb:17:58:5c:65:60:
                    81:ca:da:19:6c:ad:a7:44:af:46:c5:15:99:ee:b7:
                    dc:bb:f8:aa:e1:fb:93:97:86:ac:dd:a9:74:ca:f3:
                    f3:71:a6:91:0f:48:91:cd:5d:fc:57:3a:f5:1a:d9:
                    2c:0f:cb:d7:70:68:5a:a4:5d:54:e2:de:c9:84:55:
                    2b:80:7e:0f:d6:7b:01:f7:56:45:14:91:cb:a1:ca:
                    38:83:b2:db:25:13:4e:ff:06:82:bf:43:17:7b:e9:
                    4a:95:e1:e9:f6:e4:4c:ce:5f:de:60:92:c0:07:6c:
                    0b:16:0f:93:c5:5d:d6:39:26:45:88:65:3d:c7:8b:
                    58:21:e7:a9:a5:ed:b2:93:9c:28:23:ab:4e:dc:ab:
                    21:e4:d7:fb:d0:9f:b8:dc:69:62:a3:ad:79:bb:fd:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:D5:66:F3:2E:8C:DD:FC:3B:A3:0D:14:9B:4E:6E:F6:1B:3A:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2d5183-4f3a-4502-9d9d-a2d75adcff84/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2d5183-4f3a-4502-9d9d-a2d75adcff84/1/7fHVZvMujN38O6MNFJtObvYbOnM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:a3:d3:25:a3:de:a1:04:76:f9:4b:cc:4f:8c:7f:8c:85:
         f1:66:91:eb:33:67:80:6a:8f:48:c2:86:48:fe:26:b5:d8:3e:
         0e:d5:21:99:da:d9:dd:2c:1b:bc:a4:78:c5:78:1b:c4:46:b1:
         9d:d5:56:e0:35:21:8b:70:70:55:3f:9f:a0:b4:40:40:33:c1:
         0b:13:3f:c9:7d:b0:d6:93:6e:d4:08:1d:9a:ff:16:fc:01:96:
         cb:eb:a1:f2:b1:be:e1:88:2f:f7:37:26:e2:11:40:39:f0:d1:
         bd:bd:a6:a8:e9:75:70:f8:bc:3f:ef:28:3c:f7:51:01:4c:44:
         21:7d:88:ed:7d:68:82:d1:86:b2:a3:fc:49:6b:e6:03:28:58:
         02:08:87:32:71:30:5d:3a:93:32:50:08:e4:c5:4b:fb:26:29:
         b3:b6:03:de:a4:26:4f:ab:78:d8:b5:27:d3:ed:a9:8f:e5:c5:
         dd:ec:02:b0:9b:63:fa:98:16:dd:9e:c6:7c:b7:ac:f8:5d:36:
         d3:15:9b:d6:1e:9d:bc:ae:7c:1e:2b:cd:b9:85:42:fe:56:76:
         62:5f:42:76:22:5e:74:2e:54:dc:fe:91:95:76:e5:af:b1:25:
         1d:b0:fc:5a:d1:dc:8f:7a:17:19:20:4f:a8:d3:55:a2:49:cd:
         10:e8:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----