Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8r_-QgW46qatBb-Fh7rchgWKY-A.cer
File:                     8r_-QgW46qatBb-Fh7rchgWKY-A.cer (raw, json)
Hash identifier:          KWYzWGcs3HG1hvZnorIydI23FYFxAyBcfvQ5FBxYz6A=
Subject key identifier:   F2:BF:FE:42:05:B8:EA:A6:AD:05:BF:85:87:BA:DC:86:05:8A:63:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75A6699D3C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/5af962-3f98-4bb9-b7c8-669b24e56415/1/8r_-QgW46qatBb-Fh7rchgWKY-A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/5af962-3f98-4bb9-b7c8-669b24e56415/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:09:40 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.86.64.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505303113020 (0x75a6699d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:09:40 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f2bffe4205b8eaa6ad05bf8587badc86058a63e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:9d:77:81:ae:e2:69:af:4f:1e:c4:ad:8c:
                    6c:1d:9b:48:6c:a1:76:d7:24:d0:73:c0:b5:ea:1b:
                    df:0b:1a:d8:89:70:e5:c4:c8:f0:87:05:16:95:ab:
                    68:1e:37:df:0e:94:9a:bb:6a:3f:e7:e4:c1:f8:ab:
                    d0:da:0c:ea:68:1c:6b:a3:0f:17:fd:e0:97:18:32:
                    f3:33:b5:09:72:6f:9f:8c:cd:1c:82:cd:92:80:f5:
                    08:de:72:32:f5:75:85:da:dc:82:77:1a:e3:eb:ad:
                    27:ce:ff:bb:3b:af:24:54:ed:03:4f:e7:97:46:a3:
                    88:2b:98:b3:95:62:0d:93:f9:b6:3f:7e:ca:33:85:
                    c2:bf:53:f3:cf:ec:76:ac:d3:f7:83:2b:a1:36:2d:
                    81:5d:58:aa:bf:de:bb:e2:f0:bd:92:96:81:7f:f3:
                    81:d0:2e:86:e4:54:8c:c7:d9:90:29:7e:c4:85:dc:
                    8d:05:89:05:c9:17:28:ea:e8:16:a3:00:2e:3c:36:
                    9d:eb:fc:32:86:bf:65:55:c0:54:14:86:2c:31:f8:
                    2c:cc:7a:42:25:b4:59:92:0b:c0:5f:9b:ee:0e:5f:
                    9a:f2:34:70:59:a1:2d:3a:be:79:5e:aa:31:af:4a:
                    f1:2a:ee:47:b4:d5:05:4c:a2:c4:71:ed:ee:55:85:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:FE:42:05:B8:EA:A6:AD:05:BF:85:87:BA:DC:86:05:8A:63:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5af962-3f98-4bb9-b7c8-669b24e56415/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5af962-3f98-4bb9-b7c8-669b24e56415/1/8r_-QgW46qatBb-Fh7rchgWKY-A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:e8:8a:c6:d3:56:96:8c:b4:dd:d4:44:62:2a:25:b8:14:
         01:c5:a8:39:9a:56:05:67:12:47:27:15:64:27:18:a7:a1:5f:
         20:4b:9b:89:70:79:46:5f:5d:41:c5:fe:b7:95:c1:5f:a2:af:
         35:44:3e:17:d4:c2:10:cf:af:e6:21:d6:50:c2:19:00:02:57:
         fc:79:cb:0c:4b:cf:07:7a:71:a7:0d:52:b3:f5:ee:12:e6:c0:
         ed:92:20:5b:4b:31:47:ba:07:4c:0a:e9:4b:5e:98:0a:1b:15:
         f4:a2:cd:92:63:f3:25:34:0a:25:6c:90:0b:c0:24:53:bb:bd:
         aa:dd:36:22:9b:7d:ef:63:05:f8:e2:ce:5f:67:d8:20:4f:b6:
         89:0b:94:c4:14:9e:7b:e9:36:1c:49:b8:f9:99:64:2b:f5:38:
         df:26:68:22:6d:4e:56:21:9a:e7:0e:8a:d6:9b:a4:5c:50:55:
         7a:b5:83:2f:54:19:11:53:1d:60:80:ab:1c:1b:05:b4:9d:7b:
         08:65:50:29:91:db:17:b8:50:85:b2:64:bb:8b:4d:b6:31:17:
         34:8b:7b:89:68:b5:97:42:60:58:e2:77:83:fe:c7:4e:0a:e9:
         9f:f5:45:53:74:b0:1a:ed:83:22:8e:ed:fa:fe:7e:49:81:12:
         d5:cc:dc:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----