Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7wlTb7QIqpYYtgFEPkH5Ia8ywY0.cer
File:                     7wlTb7QIqpYYtgFEPkH5Ia8ywY0.cer (raw, json)
Hash identifier:          hlpHzD4h+0W2921tsBRf/zRj7F7f0fYOohOgNtIYZzg=
Subject key identifier:   EF:09:53:6F:B4:08:AA:96:18:B6:01:44:3E:41:F9:21:AF:32:C1:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       758960608B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/2d3406-f402-4687-9a42-9427fdc35c93/1/7wlTb7QIqpYYtgFEPkH5Ia8ywY0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/2d3406-f402-4687-9a42-9427fdc35c93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:07:25 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.80.220.0/22
                          IP: 2a0e:4780::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504815968395 (0x758960608b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:07:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ef09536fb408aa9618b601443e41f921af32c18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:7b:dd:a5:ba:b4:ae:40:6c:a4:da:63:fb:
                    7d:dc:c1:ae:44:0c:c8:9f:15:3d:82:e8:b2:8e:57:
                    aa:ba:ea:ab:90:fa:94:54:44:df:8b:80:ef:77:e1:
                    e3:a7:c3:6e:8b:9a:3f:02:77:c8:82:4e:82:ea:8f:
                    d9:bb:ad:8a:cb:c7:b6:81:c7:b4:ab:a0:9f:e0:0a:
                    ee:41:0e:36:91:93:1c:0d:6a:bf:dc:35:56:6f:1f:
                    19:2c:2b:fa:51:0f:5c:88:66:e5:9a:c2:63:d2:26:
                    b6:eb:dc:f4:e2:8d:22:0e:47:ca:e3:6b:f4:7d:a6:
                    77:38:05:61:be:07:b1:e9:54:1e:d1:92:1c:09:75:
                    c0:62:56:2f:10:8d:4d:b4:7a:12:a1:4c:8b:e1:26:
                    e2:70:88:fd:a8:73:35:31:fa:35:98:31:3f:37:38:
                    95:2c:75:75:aa:eb:05:d6:ed:01:8f:2f:15:4e:c0:
                    b3:30:9c:88:2d:81:b0:df:01:32:6f:47:ab:cc:b8:
                    e0:5a:f8:6b:e8:e6:94:41:78:ab:1d:5d:3f:3e:09:
                    da:5e:e7:16:9a:00:55:d8:19:4d:30:ef:7a:5b:b5:
                    c4:81:dc:d1:50:9d:a3:8e:5f:f9:4d:20:6b:6f:14:
                    79:4c:44:91:f7:3f:e9:5c:f5:bc:d4:f8:2a:29:00:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:53:6F:B4:08:AA:96:18:B6:01:44:3E:41:F9:21:AF:32:C1:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/2d3406-f402-4687-9a42-9427fdc35c93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/2d3406-f402-4687-9a42-9427fdc35c93/1/7wlTb7QIqpYYtgFEPkH5Ia8ywY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.220.0/22
                IPv6:
                  2a0e:4780::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:47:13:20:f7:d4:1c:02:cd:30:a8:72:a5:b4:3b:4b:b7:58:
         21:c8:d1:df:c6:f4:41:bd:e6:ed:0a:14:43:3f:b7:52:b6:58:
         1a:0c:b9:17:4f:7b:a5:3f:f2:45:2d:cb:8c:d1:90:8c:31:32:
         3d:92:3e:7f:81:75:e6:f2:21:41:fe:4b:ec:3a:2a:49:4b:fe:
         71:7e:7c:c5:89:37:ed:5d:87:3e:fc:07:e0:be:cf:cf:f0:e4:
         af:1f:3f:1b:99:07:ef:8e:e8:e7:02:78:f4:57:56:fc:20:c6:
         a7:fa:58:3a:6c:04:b7:38:02:e4:51:04:6b:12:78:05:74:df:
         b0:67:63:09:63:e9:9e:73:48:e8:ff:7a:4d:98:76:84:6a:a8:
         5e:70:7a:09:90:27:91:e0:99:e2:10:29:f5:df:7a:46:73:69:
         9d:7a:a3:84:fe:18:33:65:aa:a2:83:08:77:e1:75:ed:cb:63:
         d1:7f:64:d2:bf:c0:45:88:78:47:87:7c:5d:94:6f:7f:8b:26:
         cb:b6:17:b6:2b:0a:e0:28:09:ea:77:31:c3:db:81:26:57:ee:
         ae:c6:88:1d:92:66:6a:d8:72:2b:8c:17:0a:d7:d8:92:8f:d0:
         4f:80:71:44:a1:5a:45:fe:c8:97:9c:59:05:d2:b1:1c:59:92:
         e8:40:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----