Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8WyZdbKydX84TjMoGfJtanCOfmA.cer
File:                     8WyZdbKydX84TjMoGfJtanCOfmA.cer (raw, json)
Hash identifier:          qvc+YV2MMqrPXQv0/c7oXES23TV5GvG9T+lTHg3vAtI=
Subject key identifier:   F1:6C:99:75:B2:B2:75:7F:38:4E:33:28:19:F2:6D:6A:70:8E:7E:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       58559CE1B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/e24286-7459-4dc0-a749-2ff4d0065bf7/1/8WyZdbKydX84TjMoGfJtanCOfmA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/e24286-7459-4dc0-a749-2ff4d0065bf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 14:38:50 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 39093
                          IP: 88.81.96.0/19
                          IP: 185.46.252.0/22
                          IP: 2a02:3d8::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379393466801 (0x58559ce1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 14:38:50 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f16c9975b2b2757f384e332819f26d6a708e7e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:34:08:54:68:d3:63:28:b7:fd:43:ec:a8:
                    49:90:21:47:bd:0e:55:2f:3f:98:6a:67:a2:cb:ec:
                    83:7f:6a:63:0b:1f:65:3e:59:ca:d2:49:60:09:b2:
                    4a:75:dc:c1:05:70:76:14:6a:f6:46:2b:fc:51:d8:
                    11:45:e4:8a:9e:f9:15:35:9d:6f:e8:f8:3e:48:e2:
                    aa:a9:e9:0f:ea:5d:8a:25:2b:44:d2:65:8b:27:16:
                    b0:fa:4b:0c:3f:2b:80:bb:4a:bd:76:fd:f9:2d:76:
                    a7:90:0f:6c:80:ac:11:46:fc:1e:dd:08:d1:c4:12:
                    85:34:67:56:fe:b2:19:4b:09:b0:39:97:99:19:96:
                    33:6d:85:73:4f:f3:f8:b3:10:f4:bb:4c:32:b2:5c:
                    52:77:25:71:ed:5a:dd:7a:12:8a:ff:69:44:f0:b9:
                    56:2c:c7:fc:3e:54:69:aa:58:b1:a7:44:b5:c0:d7:
                    7d:3b:10:5e:1d:cd:15:ea:94:d6:0e:48:ca:51:fb:
                    0d:14:51:0d:6c:0d:a9:dc:da:d8:80:0a:1e:ba:cb:
                    20:e6:02:8e:b9:f8:d2:e1:1d:f3:d9:1e:a8:c0:04:
                    74:ef:ba:cc:c7:ee:51:12:75:62:33:1d:34:58:53:
                    98:d5:a3:cc:52:82:06:b5:70:ae:0a:1b:19:7d:e4:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6C:99:75:B2:B2:75:7F:38:4E:33:28:19:F2:6D:6A:70:8E:7E:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e24286-7459-4dc0-a749-2ff4d0065bf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e24286-7459-4dc0-a749-2ff4d0065bf7/1/8WyZdbKydX84TjMoGfJtanCOfmA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.81.96.0/19
                  185.46.252.0/22
                IPv6:
                  2a02:3d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39093

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:27:5d:c5:c0:ad:c7:25:c7:ee:0b:84:20:d8:1c:c2:3a:
         a5:df:5c:6d:59:7d:ff:af:8f:9f:59:a6:0c:eb:3c:05:53:68:
         2f:fb:f9:47:fc:bc:c2:4e:2d:47:1b:83:8a:07:31:e8:fc:33:
         22:a2:21:07:2c:d9:c5:cb:96:d9:88:37:af:3a:bc:83:62:3f:
         32:00:9c:e9:d4:20:d3:c6:a5:bb:01:e4:3c:18:37:60:8b:d2:
         20:0a:a0:9a:03:e6:65:d1:8d:81:a5:53:f5:93:55:d1:a5:63:
         9b:69:f4:5f:ca:35:e4:27:9f:f5:27:cf:0d:89:f6:57:10:fd:
         0f:77:95:cf:67:ca:9c:b5:2f:31:7b:c2:67:ce:83:99:04:44:
         fa:0d:8a:7f:99:ae:a9:e2:26:41:02:bf:24:38:7d:03:e3:a0:
         b6:70:ca:f4:f8:6a:b3:8b:95:d4:c7:a9:d5:c7:a7:82:9c:74:
         c6:72:c5:af:c9:79:d9:a8:b8:b8:5f:cb:cc:3e:a8:ac:8e:2d:
         1a:66:c1:75:13:5c:6c:45:dc:e3:cd:fc:62:5b:8b:75:5b:97:
         f2:6a:7d:d8:3f:76:ce:a8:3a:c0:b9:59:f5:ab:04:be:7c:2d:
         a5:3a:a9:36:e3:43:6f:45:81:cb:08:a8:05:8a:7f:d0:57:49:
         90:33:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----