Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8LrY13WygBjZam9AEjzhbKs_abg.cer
File:                     8LrY13WygBjZam9AEjzhbKs_abg.cer (raw, json)
Hash identifier:          gnf4QVrbsP5ucqSsBugrIRS6Z9Rp8DkgYpYL/JWzKEI=
Subject key identifier:   F0:BA:D8:D7:75:B2:80:18:D9:6A:6F:40:12:3C:E1:6C:AB:3F:69:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7C578DE6C9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/41c22e-cc7f-4596-8f64-c37b5e5483d1/1/8LrY13WygBjZam9AEjzhbKs_abg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/41c22e-cc7f-4596-8f64-c37b5e5483d1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:59:37 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 194.145.136.0/22
                          IP: 2a10:4b40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534044862153 (0x7c578de6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:59:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f0bad8d775b28018d96a6f40123ce16cab3f69b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:99:a9:2e:33:77:17:35:34:be:39:dd:c2:
                    6e:dc:aa:36:a3:f5:6b:dd:15:e3:97:3d:5b:35:18:
                    0c:8d:2c:28:06:e1:d0:e8:c3:d1:cd:eb:63:ba:35:
                    db:23:c4:c4:71:88:ce:66:ee:ff:bb:0f:e6:c3:31:
                    fd:40:0d:bf:0e:f6:01:52:99:f4:6a:5b:c5:1d:e6:
                    a6:85:77:c9:fd:15:a2:19:82:eb:b9:cc:bf:b7:3c:
                    5c:97:7e:6b:b6:a5:84:f5:10:31:88:6d:1a:8c:c7:
                    f3:25:50:55:6c:1c:dd:ec:5a:08:17:a4:de:d0:59:
                    ad:17:2b:3d:a8:4f:14:15:ff:dc:7e:a5:f7:3f:55:
                    8f:87:04:d4:95:5a:4b:ea:c0:c3:a0:a1:22:fc:82:
                    1c:ee:aa:52:83:23:fc:65:c9:6c:f8:58:4d:58:1b:
                    de:7f:a4:62:a0:d4:54:74:e4:44:c0:02:9c:c0:55:
                    87:04:6a:6a:a7:8a:ff:f9:48:17:4a:f0:5a:ce:45:
                    30:e4:94:0a:4f:b2:08:50:6a:e1:9d:24:61:57:74:
                    a9:31:21:61:95:08:a6:ca:49:da:54:20:d0:0a:63:
                    b0:b2:a8:f5:c0:90:75:80:f3:c7:ba:5b:05:b0:a6:
                    ea:4f:eb:8b:1b:6b:e3:a8:3a:cf:3c:b6:c5:68:b8:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:D8:D7:75:B2:80:18:D9:6A:6F:40:12:3C:E1:6C:AB:3F:69:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/41c22e-cc7f-4596-8f64-c37b5e5483d1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/41c22e-cc7f-4596-8f64-c37b5e5483d1/1/8LrY13WygBjZam9AEjzhbKs_abg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.136.0/22
                IPv6:
                  2a10:4b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:a0:cf:9a:1f:4e:dc:d6:9a:a2:55:fd:9b:05:8f:5c:a7:
         b3:a0:60:c8:3d:03:9d:7e:9b:66:1e:06:02:35:4f:33:59:cb:
         de:95:1c:aa:6f:43:67:ea:2f:35:02:ed:11:8c:f1:47:c8:a2:
         e0:45:ad:10:4c:d6:27:a2:f0:4f:74:40:3c:6d:cd:d8:57:50:
         ae:d1:1e:ee:63:48:d9:ab:f2:98:6b:7a:d1:25:6d:48:9e:ef:
         40:bc:f5:74:c0:f9:d0:30:15:92:4a:b5:f5:0a:13:22:25:a5:
         25:b3:25:b8:f9:56:dd:f2:40:91:9b:37:e1:75:94:91:55:32:
         94:05:08:df:0e:88:d6:7c:79:25:45:12:40:b6:10:50:28:70:
         b1:68:6c:fb:3b:75:28:d4:f0:27:f9:77:cb:24:bd:74:63:c4:
         e7:73:9b:98:2f:8b:24:dc:5e:f8:69:75:d5:6f:4f:c5:f6:3c:
         ad:b5:6b:ac:31:02:75:5c:08:63:4c:e8:65:0b:36:cc:ce:35:
         f5:f0:5b:b7:ef:fe:2c:e6:f5:b6:38:df:d2:29:d4:a9:6f:64:
         e1:d0:c9:e6:0e:06:30:f0:f6:39:d3:9f:ec:0b:63:2a:09:be:
         e9:c9:de:78:e1:2c:e5:43:61:d8:41:70:47:09:66:83:87:3c:
         a0:e4:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----