Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8W75xYdIkLe_tBzDkYm7bM3x7cQ.cer
File:                     8W75xYdIkLe_tBzDkYm7bM3x7cQ.cer (raw, json)
Hash identifier:          EXc0b15aUEEgwMKnQaZ+0n4jvGvw9rTJ1J9yPSXmIPc=
Subject key identifier:   F1:6E:F9:C5:87:48:90:B7:BF:B4:1C:C3:91:89:BB:6C:CD:F1:ED:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6B81D6D2B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/a5b7f3-ab1f-40fc-861d-6f7d792a8dbe/1/8W75xYdIkLe_tBzDkYm7bM3x7cQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/a5b7f3-ab1f-40fc-861d-6f7d792a8dbe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 09 Jun 2020 09:38:13 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 139.28.12.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461739840182 (0x6b81d6d2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  9 09:38:13 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f16ef9c5874890b7bfb41cc39189bb6ccdf1edc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:86:28:d4:20:ed:1e:9c:73:e8:ed:99:74:
                    df:18:38:3f:71:b4:d2:a0:1e:2c:48:36:09:75:1b:
                    f2:cb:5d:39:1b:94:11:93:c4:00:98:56:79:48:a5:
                    1d:8c:b7:ab:f5:b8:17:d1:39:ca:8d:d7:c0:70:39:
                    f7:a8:95:b1:63:05:df:55:10:9c:da:00:24:df:7b:
                    ea:df:51:bb:f6:29:57:bd:83:20:36:9f:c3:3c:ea:
                    e6:f2:ef:b5:85:40:89:7f:dc:6e:35:3b:14:ea:48:
                    c8:66:b1:40:e1:e4:b1:e0:55:4e:e3:7f:0b:da:51:
                    f6:af:a6:df:9f:59:74:4f:fe:91:af:c7:79:ad:8f:
                    4a:e5:ca:2a:46:5a:06:45:75:6d:2a:ae:bc:8e:23:
                    da:c1:47:14:58:61:0a:3d:e3:54:ec:fe:64:60:12:
                    27:e7:5c:2e:a5:2e:04:f4:b9:2a:94:4d:cf:60:15:
                    c8:15:0d:d3:66:a4:d7:b8:25:32:0e:4e:92:01:d6:
                    58:18:4b:9d:77:a3:f7:c6:8f:a3:27:9a:ab:a5:12:
                    be:79:f5:83:0b:60:ef:54:53:e1:84:50:28:f0:b8:
                    d2:e5:6a:9c:08:da:b0:fe:ca:b2:e3:49:f2:ad:35:
                    11:4a:0e:3a:6e:af:a9:fa:3a:22:31:ea:e2:de:e0:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:F9:C5:87:48:90:B7:BF:B4:1C:C3:91:89:BB:6C:CD:F1:ED:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a5b7f3-ab1f-40fc-861d-6f7d792a8dbe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a5b7f3-ab1f-40fc-861d-6f7d792a8dbe/1/8W75xYdIkLe_tBzDkYm7bM3x7cQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:90:63:98:5a:33:6f:bd:95:14:c3:d8:32:a6:70:1a:8d:bb:
         f7:6d:82:64:70:5f:d4:7b:dc:1e:6d:76:33:99:8c:5e:af:f1:
         3d:ae:93:20:c7:f1:a2:78:f9:c8:44:cc:e3:55:fe:26:ad:38:
         19:3a:9b:ef:72:52:1b:b0:e5:31:09:15:ed:43:f1:26:19:da:
         56:66:d5:75:d3:60:1f:88:2a:86:de:c8:e5:91:7d:ea:50:c0:
         be:ff:e2:da:87:33:82:d0:91:e8:a6:66:13:e8:c6:f4:df:60:
         dc:c0:bf:49:2f:fa:c4:ca:41:c1:1d:aa:91:1f:a3:b7:09:6b:
         10:8e:33:25:47:ae:61:9e:5a:67:b5:31:ec:cb:9a:53:4b:b6:
         3b:a0:cb:92:a1:cd:49:b7:48:ba:b7:a6:ec:c6:f9:db:30:a8:
         28:26:ea:4b:1c:29:ab:c5:4d:f9:a1:06:dc:36:12:65:68:39:
         e8:94:a8:a4:2b:da:c3:a8:45:a3:89:ae:c2:74:50:84:6c:fb:
         f6:7a:1c:19:47:05:26:3b:42:d9:66:22:36:2b:49:6e:6e:0c:
         a4:2e:b4:2a:75:9a:75:5f:cb:b6:f8:9d:96:50:bc:c1:38:fb:
         88:ab:10:33:d9:f9:d6:0c:8e:83:74:9b:f7:53:4e:c8:76:8f:
         2d:ef:ca:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----