Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FvZqSahl30RBByT6ZpwGSywCXU.cer
File:                     8FvZqSahl30RBByT6ZpwGSywCXU.cer (raw, json)
Hash identifier:          rEU9fJ/gClWMp5xEFf98N0sVPtXf5ofCe0htsk6hY1M=
Subject key identifier:   F0:5B:D9:A9:26:A1:97:7D:11:04:1C:93:E9:9A:70:19:2C:B0:09:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       813140B790
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/8FvZqSahl30RBByT6ZpwGSywCXU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:17:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 59926
                          IP: 185.183.220.0/22
                          IP: 193.31.68.0/22
                          IP: 2a0b:1f80::/29
                          IP: 2a0d:5fc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554877106064 (0x813140b790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:17:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f05bd9a926a1977d11041c93e99a70192cb00975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:c8:95:49:4d:7d:b8:c3:52:05:68:08:af:
                    9b:07:1a:4d:54:a4:db:57:93:ce:3d:58:53:28:92:
                    eb:dc:b1:14:3f:e9:f6:bc:7f:fe:db:0c:62:8c:2d:
                    cd:fe:47:03:93:80:72:ec:73:c9:4e:03:0b:87:52:
                    f6:e0:25:17:cd:d0:bc:12:bc:2a:95:e7:ae:e2:ff:
                    d1:cc:e6:e2:c3:e8:97:4b:cc:eb:d3:67:a8:3f:ed:
                    6d:61:2b:b0:5b:48:e0:da:4e:4b:07:e0:06:4b:3a:
                    65:45:86:46:dc:2e:48:38:cb:1b:1d:e5:6a:b6:63:
                    b5:6a:a8:22:a2:f0:5f:2b:b7:de:b9:39:f4:32:ba:
                    59:c7:6c:2f:e7:9c:14:5c:b4:2e:32:91:bd:14:af:
                    8f:82:29:08:dd:64:6a:b9:0f:4f:1b:c9:18:46:de:
                    72:3e:aa:84:85:d0:09:7d:9b:09:24:f6:54:ed:37:
                    86:16:61:9b:39:9e:28:7e:f4:ae:98:fa:b8:da:a8:
                    57:c1:e7:9b:c7:d5:af:f5:cc:5a:1e:6d:08:8b:1c:
                    45:79:9e:36:3a:5f:9c:86:ac:d0:5b:89:91:c7:7d:
                    3a:99:10:1e:69:7e:33:b1:5d:40:df:62:89:08:3e:
                    71:4b:be:19:48:44:ca:bb:a1:f3:96:78:95:fa:53:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:D9:A9:26:A1:97:7D:11:04:1C:93:E9:9A:70:19:2C:B0:09:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/8FvZqSahl30RBByT6ZpwGSywCXU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.220.0/22
                  193.31.68.0/22
                IPv6:
                  2a0b:1f80::/29
                  2a0d:5fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59926

    Signature Algorithm: sha256WithRSAEncryption
         94:50:05:a2:37:ff:bb:db:64:ad:11:ab:ef:95:19:89:87:31:
         41:89:5c:d0:0c:5b:7b:b7:6d:30:58:14:88:00:f5:c1:8a:bf:
         47:0b:86:64:e6:a7:3d:06:a4:2b:6d:20:8a:05:49:24:3f:71:
         76:0c:82:55:94:1c:25:d6:33:50:0a:98:0c:6f:7c:84:e9:d6:
         2c:93:68:76:13:99:c1:1a:62:f4:43:6f:02:c9:cd:dd:a3:27:
         31:cf:2e:7a:b1:31:59:f9:5a:4c:aa:b5:00:55:6e:26:d7:bc:
         cf:69:df:b4:fc:c8:73:ae:bc:09:85:f1:f0:53:68:3c:17:a0:
         d8:1e:43:96:84:01:22:9d:2a:89:20:7f:5c:24:8b:ca:e7:e1:
         ea:9f:19:ba:90:e1:20:23:39:29:ac:39:0d:3e:cd:f7:90:c2:
         71:9d:f2:38:37:92:a2:dc:5e:cf:e7:d3:cd:da:c5:e8:d6:30:
         fb:96:19:f9:20:d2:cd:bd:33:12:b6:e3:9d:39:24:4c:93:71:
         a5:99:ad:7a:60:74:cc:77:32:22:53:fb:ae:30:9b:4d:b3:0b:
         44:ec:2f:33:f7:aa:78:ab:e2:10:c8:bc:c3:aa:91:fb:c1:ad:
         7a:f8:b6:71:37:90:d6:13:ee:83:95:7a:9f:9d:a1:19:17:e1:
         19:65:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----