Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7uXUc0oJ5rgVn__yFQnafM2UpDw.cer
File:                     7uXUc0oJ5rgVn__yFQnafM2UpDw.cer (raw, json)
Hash identifier:          rXwLenlk7ZG2WcsdShk8Ln/glQaLd5YIhT49VXv09U8=
Subject key identifier:   EE:E5:D4:73:4A:09:E6:B8:15:9F:FF:F2:15:09:DA:7C:CD:94:A4:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       61F775972E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/babe8d-96b6-4944-9dd8-26a5eeb0b6bc/1/7uXUc0oJ5rgVn__yFQnafM2UpDw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/babe8d-96b6-4944-9dd8-26a5eeb0b6bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:26:54 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 50007
                          IP: 193.168.208.0/22
                          IP: 2a09:6a80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420763506478 (0x61f775972e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:26:54 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=eee5d4734a09e6b8159ffff21509da7ccd94a43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:ca:6b:21:f7:9b:46:72:fb:b5:ca:86:71:
                    da:7d:b9:bf:fb:61:01:1a:c5:16:b1:c5:2a:49:bc:
                    c5:65:57:d5:56:b4:c8:d8:6a:ab:e0:e2:29:56:a0:
                    8f:26:f0:9b:92:0e:2b:2e:da:a6:3e:a2:b0:35:56:
                    54:ab:a7:fb:ab:e4:3b:05:95:40:e6:6a:dd:d2:a6:
                    f5:18:7f:97:87:0b:fa:a6:01:1f:f7:56:74:a7:8c:
                    72:d3:f7:b8:5c:9d:b6:8f:10:09:8b:d3:e3:96:b1:
                    5f:66:6f:e8:10:77:94:02:67:7a:18:3d:11:35:19:
                    a3:4a:3a:90:0c:bf:40:1c:bd:8e:86:01:e6:e2:00:
                    c6:36:df:94:31:bf:c8:91:33:d9:e4:b9:cc:d3:7d:
                    6c:c9:b7:46:ab:11:91:68:a7:e1:0b:f9:5b:9c:12:
                    d6:93:60:52:84:b4:ac:8d:80:b4:e4:8e:3d:7c:49:
                    c7:20:fd:b3:9a:4b:39:e2:00:c5:a7:d1:d0:80:89:
                    fa:62:f9:c9:32:55:31:af:6b:ad:dd:e2:81:6d:2c:
                    8a:5f:2b:19:e9:f6:ee:5e:e0:6e:a8:59:f2:ca:c0:
                    50:09:9e:06:09:d6:c3:99:f9:cb:2a:71:5b:64:1c:
                    28:b2:a2:ea:3a:2f:1c:db:2b:be:76:f8:d0:dc:9c:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E5:D4:73:4A:09:E6:B8:15:9F:FF:F2:15:09:DA:7C:CD:94:A4:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/babe8d-96b6-4944-9dd8-26a5eeb0b6bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/babe8d-96b6-4944-9dd8-26a5eeb0b6bc/1/7uXUc0oJ5rgVn__yFQnafM2UpDw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.168.208.0/22
                IPv6:
                  2a09:6a80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50007

    Signature Algorithm: sha256WithRSAEncryption
         88:70:1b:93:61:42:e9:d7:0c:14:32:d0:ae:0a:41:8c:20:56:
         1c:33:1e:b6:f3:15:5c:99:0a:aa:62:4e:ac:2a:41:3c:02:6f:
         a7:95:94:fd:dd:f4:21:17:04:b0:26:f6:9c:7a:c8:93:a0:ff:
         fa:3b:d2:0e:17:44:65:6f:9b:ef:39:76:35:7f:ee:6c:ee:c8:
         dd:2c:38:9b:79:5d:cf:9d:38:e3:9d:f6:a2:f1:e2:3a:02:25:
         ec:09:80:e3:38:32:82:45:17:1b:ef:ad:15:b5:79:87:43:88:
         c0:b4:53:34:eb:1a:cb:de:1a:37:3b:57:92:29:eb:2d:e2:ac:
         5d:47:a8:81:8b:24:ac:11:aa:49:ff:6d:95:8b:bf:28:66:c4:
         ac:5e:42:fd:51:18:81:81:55:1d:bb:25:d5:d6:88:2f:9a:15:
         7c:1c:67:49:54:c3:d2:f7:89:e9:a9:94:4c:7b:a9:e5:16:9d:
         f9:2d:9e:ba:1c:00:79:8a:38:69:42:e3:9d:52:d9:0d:cb:4b:
         24:3b:33:a9:17:31:79:5b:95:4b:10:51:2f:b2:94:a0:a6:9e:
         e5:b9:a6:7e:a8:02:bb:4d:b8:27:26:47:81:15:10:60:d4:c8:
         e8:cd:21:04:80:f2:20:24:c9:8b:a8:8b:ac:4b:8d:32:99:4e:
         8e:99:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----