Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8v1Ykt0_DculTOIpyeTZldS69Cw.cer
File:                     8v1Ykt0_DculTOIpyeTZldS69Cw.cer (raw, json)
Hash identifier:          peOz/m3sD6lD8B4hxCV9EU2qNItJLV5NZZQn+tKW3xU=
Subject key identifier:   F2:FD:58:92:DD:3F:0D:CB:A5:4C:E2:29:C9:E4:D9:95:D4:BA:F4:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       829D296438
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/ee24f0-3e22-4106-9a83-2797b1098d30/1/8v1Ykt0_DculTOIpyeTZldS69Cw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/ee24f0-3e22-4106-9a83-2797b1098d30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:40:18 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 39062
                          IP: 195.66.158.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560982484024 (0x829d296438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:40:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f2fd5892dd3f0dcba54ce229c9e4d995d4baf42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:09:83:f6:67:19:66:97:3d:39:35:b3:44:
                    72:1b:48:85:26:aa:9b:1f:d1:9e:02:09:fa:c8:7c:
                    65:e7:1e:da:ac:14:4b:f2:8a:37:e0:2b:7b:b5:ab:
                    db:5f:af:5a:4d:a6:3c:d7:34:0e:b0:2e:94:8f:ad:
                    99:0a:02:97:85:65:55:9b:af:a9:b2:89:25:9d:9e:
                    8b:0c:09:a4:be:3e:26:e1:fd:e5:dd:71:0d:bd:f0:
                    9e:30:9a:1a:5d:6a:86:f6:34:47:6c:05:ac:55:90:
                    73:09:97:6a:25:c0:9c:f0:c0:67:95:fe:9e:66:10:
                    92:e1:ab:d5:9c:47:fc:ae:54:49:fb:f8:43:d4:9d:
                    e1:9c:93:f0:38:61:56:0c:a7:d7:ca:42:d8:d0:35:
                    d6:3d:95:18:b6:65:7f:07:6e:f7:24:c6:a6:b4:9a:
                    8b:3d:fb:83:a4:55:1b:f3:54:63:f1:77:c2:a0:0f:
                    46:ad:41:00:45:9e:21:c6:46:69:ac:5c:6c:af:57:
                    45:07:84:0f:80:ed:4c:c1:03:db:d1:8c:4f:29:9f:
                    de:f7:ca:be:49:dd:bd:08:1f:c7:c6:5a:93:21:f1:
                    03:f6:5d:50:42:eb:dc:40:51:85:b1:fc:03:fe:e0:
                    41:e7:28:c7:ba:ba:0a:fd:8a:77:ce:33:63:49:87:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:58:92:DD:3F:0D:CB:A5:4C:E2:29:C9:E4:D9:95:D4:BA:F4:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee24f0-3e22-4106-9a83-2797b1098d30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee24f0-3e22-4106-9a83-2797b1098d30/1/8v1Ykt0_DculTOIpyeTZldS69Cw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.158.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39062

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:bc:53:ba:fc:d0:c7:b2:3d:e4:1f:45:c9:0d:8c:ea:fa:
         a5:45:7d:10:67:0d:dd:c0:e0:77:3a:d0:61:09:e8:9e:5d:1f:
         4e:16:18:52:ea:de:c8:39:4d:d7:72:18:10:1a:78:de:e1:c4:
         20:24:de:19:31:bb:a4:56:59:49:01:e4:34:27:56:22:2d:67:
         96:82:21:72:22:f7:74:2e:99:49:c7:6a:41:03:2c:bc:cc:93:
         84:4f:ae:21:f3:77:47:be:3e:62:e4:2d:d8:bb:a1:67:cb:cc:
         a0:14:ed:8c:af:f7:a8:2f:2b:31:35:18:ac:09:22:30:df:82:
         63:a1:20:1b:eb:64:a9:53:f1:90:bb:fa:13:24:b3:b1:4a:e4:
         3b:18:5f:d2:ba:4e:54:33:4c:c3:c2:4e:e4:3f:38:6f:4a:53:
         81:2b:c7:4a:d3:c8:36:c6:f6:7a:c2:5d:f1:e7:c5:27:c6:eb:
         d5:69:c7:77:ec:f3:71:69:cf:9c:ad:2c:d7:0b:ab:d6:8f:1e:
         91:77:53:d4:13:80:08:c8:b2:87:06:37:c6:02:e8:08:d8:88:
         8e:7f:0b:5f:a0:53:db:27:05:3e:99:97:79:0d:7a:62:91:6b:
         42:5c:93:ca:4c:d3:98:ac:ef:e7:df:7d:1a:f9:35:1b:50:3e:
         28:82:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----