Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tq76byjyTeqvI7OonDHsFO1owY.cer
File:                     7tq76byjyTeqvI7OonDHsFO1owY.cer (raw, json)
Hash identifier:          n7V2mkCB8hbvfmNHYxhA0g0Qs85MyWFtFprOLvN7/hY=
Subject key identifier:   EE:DA:BB:E9:BC:A3:C9:37:AA:BC:8E:CE:A2:70:C7:B0:53:B5:A3:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       63EC180878
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/1f22fa-085c-4e57-8099-0200cb22cc0e/1/7tq76byjyTeqvI7OonDHsFO1owY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/1f22fa-085c-4e57-8099-0200cb22cc0e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:36:47 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 50263

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429162760312 (0x63ec180878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:36:47 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=eedabbe9bca3c937aabc8ecea270c7b053b5a306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:a6:5c:ed:dd:a5:45:17:22:35:4c:00:28:
                    5b:77:d4:82:35:f5:08:aa:8d:a2:3d:ad:d3:52:0e:
                    56:91:11:8c:98:70:ab:66:26:ec:ea:2f:89:1b:ec:
                    bc:3a:64:56:43:8f:5f:70:14:c1:86:4b:0b:f6:7f:
                    ad:9d:bd:86:84:6a:df:6a:5e:9f:cf:8e:ab:b0:c6:
                    cf:af:58:c4:59:c8:33:b4:b8:4f:5b:0c:86:6b:c2:
                    fb:ff:c6:aa:4e:41:e6:3a:c5:88:2b:b8:39:bb:18:
                    f7:a7:5a:40:b1:16:e3:57:db:b4:b6:29:6a:6e:0d:
                    b1:ba:20:78:1a:2c:e4:55:f0:b5:98:bb:95:47:57:
                    af:f0:74:4e:cc:20:6b:2b:c2:14:e6:ad:1b:0a:62:
                    47:20:28:00:b4:de:87:f1:9e:6a:3b:d1:fd:00:f8:
                    b1:e9:74:42:98:c1:bb:81:b2:b3:68:5e:ac:15:5f:
                    3c:b6:d1:d8:d2:74:4c:3f:29:65:67:fa:be:f3:14:
                    13:63:19:fa:11:e4:a8:7d:f3:66:63:3c:c8:55:9b:
                    1b:f1:13:4a:1c:4d:b8:cf:b4:a2:37:36:1c:56:e0:
                    95:1b:3d:86:12:01:8f:2e:df:6b:f9:0b:c3:95:0b:
                    fc:31:73:ee:32:11:c8:2d:a6:d6:b4:f5:b1:cd:4a:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:BB:E9:BC:A3:C9:37:AA:BC:8E:CE:A2:70:C7:B0:53:B5:A3:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1f22fa-085c-4e57-8099-0200cb22cc0e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1f22fa-085c-4e57-8099-0200cb22cc0e/1/7tq76byjyTeqvI7OonDHsFO1owY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50263

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:f6:9d:b7:33:9a:64:ef:d5:fd:fe:e1:34:b1:8c:7f:ea:
         6c:e0:fa:ef:fa:02:4e:0f:1b:af:6e:b8:8f:d1:d0:9f:c4:e7:
         b0:9c:63:65:f6:90:fe:0a:1d:93:6c:90:f2:aa:61:75:fa:7a:
         a0:63:56:25:04:69:4b:e7:e9:1a:df:a6:52:16:28:07:6b:0f:
         ea:35:44:ac:50:14:70:fa:86:f0:6d:14:33:2a:42:5c:a9:53:
         71:a1:9a:09:0b:40:21:ca:78:7f:e6:a3:6b:6b:19:11:d1:14:
         be:c4:5a:76:a9:5f:cc:ea:40:a9:d2:fa:36:87:77:50:5e:b5:
         a5:fd:d9:c7:36:ff:e2:d8:f3:96:af:9a:fb:76:bf:41:a5:ee:
         77:a2:81:68:16:d1:83:d5:77:35:4f:22:64:d0:38:81:5e:ba:
         e5:b2:59:02:ea:a9:cd:bd:dd:22:14:90:91:8d:fd:0d:e1:aa:
         f2:98:5a:a2:58:03:a0:83:7a:05:6e:18:8a:ae:ff:48:6e:ba:
         94:45:fc:ef:13:48:3b:b7:14:56:b9:9f:6b:0c:0b:01:67:a3:
         5c:a6:3f:26:0b:4e:6a:d6:ce:ce:1d:2e:be:14:b5:35:34:4d:
         7c:31:35:59:a5:32:b7:e9:98:55:61:7d:96:ae:ae:03:77:11:
         f6:38:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----