Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7i5xHqMl9LaR5X_hR4CCIno11Lw.cer
File:                     7i5xHqMl9LaR5X_hR4CCIno11Lw.cer (raw, json)
Hash identifier:          5BbEtflPzYQzRISWPzrkyLiFqX1cvquzXl5fEnZSd/A=
Subject key identifier:   EE:2E:71:1E:A3:25:F4:B6:91:E5:7F:E1:47:80:82:22:7A:35:D4:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       841986489C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/083a45-aaca-4ff7-a9a4-cc71f8e29191/1/7i5xHqMl9LaR5X_hR4CCIno11Lw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/083a45-aaca-4ff7-a9a4-cc71f8e29191/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:38:02 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 193.0.146.0/23
                          IP: 193.0.164.0/23
                          IP: 2a0f:9780::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567363913884 (0x841986489c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:38:02 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ee2e711ea325f4b691e57fe1478082227a35d4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:ce:eb:06:21:a3:f4:7f:08:51:af:5e:7c:
                    75:f2:56:3d:b7:7a:14:c2:bb:32:81:62:22:cb:4a:
                    53:0a:72:36:26:8c:63:6a:16:fa:f3:09:22:93:ca:
                    6d:39:a4:62:d7:8c:1f:11:c4:4b:91:71:0c:bb:d3:
                    cd:81:c5:c1:f6:41:1f:0c:b4:be:f4:b5:72:b2:4c:
                    a3:96:58:20:8b:9d:e4:8a:9c:c9:d9:95:93:58:6b:
                    e2:d0:62:7f:69:5a:4e:b1:73:54:77:37:78:26:be:
                    5b:66:7c:3b:f2:ec:be:e1:b2:35:1c:f5:2e:4f:3d:
                    bd:4b:56:c7:d3:d2:fe:0f:cb:50:81:aa:7c:8a:32:
                    73:59:1c:54:d2:62:af:96:2e:ff:e4:0e:c4:8b:f4:
                    ed:fc:80:a8:de:6e:fe:42:40:3e:f7:7a:25:32:24:
                    65:d1:ec:71:f5:73:a6:fd:78:c4:d8:cb:39:7e:a5:
                    e8:75:99:d6:d4:89:6a:6a:83:2c:08:dd:de:29:18:
                    ec:f9:0e:d9:3d:2a:45:da:11:1b:06:58:8c:67:47:
                    83:98:13:56:7d:df:3a:22:0d:04:8c:bc:a2:d6:27:
                    64:10:39:b5:30:33:76:d5:f1:0a:dd:d2:4e:e8:d4:
                    a8:91:d7:ae:22:fe:f2:b1:6f:32:07:d9:3f:a2:b1:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:71:1E:A3:25:F4:B6:91:E5:7F:E1:47:80:82:22:7A:35:D4:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/083a45-aaca-4ff7-a9a4-cc71f8e29191/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/083a45-aaca-4ff7-a9a4-cc71f8e29191/1/7i5xHqMl9LaR5X_hR4CCIno11Lw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.146.0/23
                  193.0.164.0/23
                IPv6:
                  2a0f:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:49:e1:d6:52:19:44:5d:f0:94:92:a1:31:99:b4:b4:79:58:
         b6:aa:d1:13:22:03:5c:ed:94:73:93:64:e0:0d:b1:77:4a:ac:
         63:e4:68:4a:ef:7e:17:24:bf:e7:23:c2:42:23:5c:96:9c:61:
         97:87:46:2e:1e:65:29:9d:8f:82:47:e9:17:11:1a:78:63:39:
         87:38:b0:8d:0c:14:59:e7:11:cb:1f:36:07:5a:1e:ea:57:6f:
         ca:9a:41:d8:81:36:14:a4:ac:20:77:8c:5a:12:7c:24:ea:8b:
         2e:c8:28:4c:56:66:f3:f6:56:9e:43:c9:b1:4d:a7:ff:95:1c:
         a1:9d:28:cb:ab:e8:0d:e9:bf:d8:b1:f8:cb:e5:bb:92:01:75:
         a7:ab:f8:40:fe:02:9e:e5:f1:0f:8e:f3:b6:92:d8:5f:1c:57:
         d0:56:7e:cc:85:72:62:28:2e:13:d9:22:49:7a:b3:bc:8b:a7:
         10:d3:cc:87:0a:99:02:3a:23:51:46:80:49:32:b4:34:bb:65:
         08:fc:90:75:a8:78:93:1f:86:6c:ff:a0:a8:79:84:55:bb:91:
         7a:86:d0:8a:ba:3f:0c:ac:d9:a5:f2:07:5c:37:d3:f3:3f:fa:
         0a:13:1d:eb:12:6b:4d:65:c4:b4:cc:04:f3:4b:60:04:b9:8a:
         85:c4:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----