Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7h6tvH-J0KzUlP8xzkokMsPouUQ.cer
File:                     7h6tvH-J0KzUlP8xzkokMsPouUQ.cer (raw, json)
Hash identifier:          2aGX75awBXbKx89cfuDj2m/DN0n3ASz6XkCNhHFuTfc=
Subject key identifier:   EE:1E:AD:BC:7F:89:D0:AC:D4:94:FF:31:CE:4A:24:32:C3:E8:B9:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       85C21C622F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/a1545c-962e-44d3-990d-1e421fbcc9f1/1/7h6tvH-J0KzUlP8xzkokMsPouUQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/a1545c-962e-44d3-990d-1e421fbcc9f1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 26 Jan 2021 12:07:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 194.113.222.0/23
                          IP: 194.113.226.0/23
                          IP: 2a04:f3c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574487290415 (0x85c21c622f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 12:07:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ee1eadbc7f89d0acd494ff31ce4a2432c3e8b944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:40:d0:a4:80:ed:9f:97:46:ed:4a:1f:cc:
                    f0:93:2e:22:bf:24:b9:29:65:58:a8:e5:32:65:e1:
                    d1:5b:e4:51:8b:16:35:e0:b0:c0:78:4c:af:05:6e:
                    a3:bd:a1:32:dc:0f:83:82:5f:c0:2e:f8:5d:21:d2:
                    a0:2c:13:f5:f2:c1:e7:6b:35:c4:75:0b:0a:00:f4:
                    cb:3d:e7:a4:b2:97:8d:b6:66:4c:7a:97:38:31:16:
                    49:96:75:b4:84:d8:de:83:c6:bf:df:e5:2d:01:a5:
                    ed:8d:2c:14:8c:3c:be:62:41:9c:37:d8:70:18:7f:
                    e1:db:e2:0d:d9:ad:4c:68:cd:1e:d4:87:1d:eb:a4:
                    20:77:bb:5a:86:44:a8:b5:61:c2:b8:a4:1a:0b:91:
                    0a:51:4f:c9:47:62:e0:d1:84:95:dc:5d:af:59:a0:
                    12:05:32:f5:89:77:a5:4e:ac:27:6f:64:4e:e6:d8:
                    8b:0b:e4:37:92:b2:08:dc:93:18:30:9c:36:5d:ef:
                    05:01:45:0a:37:07:76:bc:85:0c:58:24:04:6b:24:
                    f2:f9:e7:84:14:57:7d:ff:0d:44:17:8f:ea:ae:f3:
                    cc:9e:2f:10:c9:ee:ad:0a:76:34:4a:35:0b:fa:7e:
                    77:c7:1f:4d:73:92:e0:06:29:86:4b:6d:ef:f9:42:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:AD:BC:7F:89:D0:AC:D4:94:FF:31:CE:4A:24:32:C3:E8:B9:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1545c-962e-44d3-990d-1e421fbcc9f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1545c-962e-44d3-990d-1e421fbcc9f1/1/7h6tvH-J0KzUlP8xzkokMsPouUQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.222.0/23
                  194.113.226.0/23
                IPv6:
                  2a04:f3c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:d8:43:d2:3b:ac:2f:f1:97:a8:b7:c3:64:eb:26:c4:a1:
         03:5d:53:65:ee:05:f7:ac:98:1b:f9:81:e6:a4:28:c9:2a:b7:
         1c:32:98:6f:a9:5c:36:04:94:32:97:59:ca:2b:ea:51:db:74:
         56:6c:ce:67:b5:26:7b:e7:75:79:1d:01:7e:14:30:d7:c7:22:
         00:1e:ef:67:07:fb:e3:72:10:2c:bb:81:02:8b:21:fa:e3:0b:
         aa:d2:6e:30:23:2a:a4:32:d1:04:ac:4b:03:b5:db:65:13:ac:
         0d:e6:f2:d8:49:1c:2b:a4:ab:62:b5:09:98:30:b3:81:dc:46:
         0a:d2:2d:08:62:a2:27:d8:06:56:38:65:18:d4:0b:e2:9a:81:
         70:54:65:80:03:6e:a6:65:05:9e:01:14:5a:fb:22:0b:9e:de:
         a7:70:67:07:f7:e3:69:f6:cc:09:d3:16:fb:8e:a8:0e:5c:c7:
         a1:60:d8:c3:2a:d7:5a:7a:28:02:07:25:8f:a1:b7:04:73:93:
         34:cf:36:9d:e5:77:1c:31:23:52:4e:78:cf:9c:14:1d:0d:1f:
         c2:c8:06:84:68:32:f1:74:74:bf:b0:7c:a2:f9:ec:1e:92:d1:
         40:d1:a8:90:e1:e6:9d:26:81:8e:44:91:70:3a:39:05:e3:00:
         e5:ad:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----