Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7mfFnuL-XfdX5-As8xkbKTTxfLk.cer
File:                     7mfFnuL-XfdX5-As8xkbKTTxfLk.cer (raw, json)
Hash identifier:          2A8jkSWnRm3Mu4fq0bjdpC4oXnrjPMyrf6/r5d2IEBQ=
Subject key identifier:   EE:67:C5:9E:E2:FE:5D:F7:57:E7:E0:2C:F3:19:1B:29:34:F1:7C:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5E9D236053
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/427b76-4b15-469b-a2a0-f49cbef3e756/1/7mfFnuL-XfdX5-As8xkbKTTxfLk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/427b76-4b15-469b-a2a0-f49cbef3e756/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:10:07 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 60188
                          IP: 193.42.24.0/22
                          IP: 2a06:5040::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406363267155 (0x5e9d236053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:10:07 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=ee67c59ee2fe5df757e7e02cf3191b2934f17cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:b5:87:22:c0:bc:20:2f:63:56:88:7c:b7:
                    03:33:e4:a0:99:90:08:7c:29:b4:b6:26:15:31:3f:
                    b2:19:8f:93:a2:dd:e2:d9:90:79:6c:96:5c:45:2c:
                    9b:c7:61:26:28:88:88:10:76:e1:96:9f:e2:38:5c:
                    d2:c8:09:25:bf:2e:f3:75:9a:58:92:4e:22:7e:b6:
                    d2:45:eb:05:ac:16:bf:28:7f:7a:a4:d8:16:3a:cf:
                    60:f2:94:99:2a:b9:87:8d:fb:ac:dc:46:eb:7f:14:
                    04:03:85:b7:c2:ae:f7:45:3d:2e:c9:fc:7e:ba:c2:
                    4a:0e:07:04:be:f1:be:40:5b:76:0d:db:e8:aa:98:
                    7f:7f:b0:92:3a:cd:27:ab:d4:10:97:88:bf:f6:98:
                    6a:e1:0f:b8:d4:24:04:eb:ce:92:98:8c:7a:f1:0e:
                    f8:25:c1:20:e7:19:cf:c2:67:9c:b2:fb:28:29:e7:
                    f9:1d:03:d8:f6:86:85:94:5a:9b:e1:0c:3e:a0:e8:
                    ff:22:2e:96:d1:0b:8a:3a:44:9b:b3:de:5f:a2:ff:
                    51:2e:bf:10:c1:ba:f9:00:2f:75:f2:97:84:a4:ff:
                    67:a7:40:c7:27:73:d2:07:fe:2e:2f:c7:d0:8e:1a:
                    26:45:fc:59:be:c3:2e:9b:56:b7:c8:54:ff:bd:a3:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:C5:9E:E2:FE:5D:F7:57:E7:E0:2C:F3:19:1B:29:34:F1:7C:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/427b76-4b15-469b-a2a0-f49cbef3e756/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/427b76-4b15-469b-a2a0-f49cbef3e756/1/7mfFnuL-XfdX5-As8xkbKTTxfLk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.24.0/22
                IPv6:
                  2a06:5040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60188

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:1a:bf:7c:c5:b9:6d:5b:ec:f2:23:41:9f:5a:7e:d9:ee:
         b6:cc:e3:bf:ba:47:86:08:99:59:eb:2f:b6:79:fc:aa:e6:21:
         6e:89:9a:05:83:d3:2d:2d:7c:67:50:1b:70:17:9e:16:54:28:
         48:d8:ba:3b:be:6f:56:76:a7:62:1e:03:88:69:0d:66:d4:86:
         c7:9a:95:1c:0b:2f:82:53:cf:8d:43:52:14:35:06:4b:3b:07:
         cf:31:4f:d3:8b:7e:59:58:c8:75:9a:a6:4f:7c:2d:0e:0f:2a:
         0b:5e:ef:f8:41:60:03:bb:ea:f2:53:16:9e:b4:60:f1:3f:a0:
         04:e5:85:42:73:85:d2:56:09:92:ce:b2:f3:47:58:2c:c8:f4:
         f2:46:3d:bb:d5:fb:f3:2e:7a:57:d8:a0:9e:02:17:f2:32:a2:
         eb:03:26:68:4b:95:a0:04:37:d5:62:f9:b2:e8:8f:72:63:c5:
         85:3d:16:40:7b:49:d9:2c:68:4c:1f:b6:c1:e6:e1:2b:30:6d:
         bf:51:b6:7a:32:e7:5a:31:f2:21:7a:59:c7:d1:76:6a:d5:bb:
         fc:19:75:89:c6:83:0f:8e:ad:66:f1:46:1f:0f:54:1e:05:fd:
         d9:e5:62:81:c3:78:be:90:48:99:11:e0:44:ce:19:59:f6:5b:
         96:3f:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----