Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9-UN3RJ-c0dznZkvdMoDgjyoXLc.cer
File:                     9-UN3RJ-c0dznZkvdMoDgjyoXLc.cer (raw, json)
Hash identifier:          ghduHktMSQzM7FTEY0fV0oQHAFrFL3w4C4fGe386NXo=
Subject key identifier:   F7:E5:0D:DD:12:7E:73:47:73:9D:99:2F:74:CA:03:82:3C:A8:5C:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7C5A3CD62F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/dfdee0-6728-498f-a89e-18c0fdff5a42/1/9-UN3RJ-c0dznZkvdMoDgjyoXLc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/dfdee0-6728-498f-a89e-18c0fdff5a42/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:00:14 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.12.232.0/22
                          IP: 2a0e:c500::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534089881135 (0x7c5a3cd62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:00:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f7e50ddd127e7347739d992f74ca03823ca85cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:fb:e0:99:be:dc:0c:e0:f8:d4:39:11:ac:
                    04:f6:d8:04:04:15:13:a1:9d:8c:9c:a9:a5:cf:05:
                    b7:51:a4:65:0e:51:de:c9:e3:68:0f:e8:d3:02:a2:
                    23:55:b0:a8:36:c9:f9:26:a4:31:3a:c7:64:a2:34:
                    b3:c0:55:d6:af:09:60:f5:bf:a1:06:a2:3d:1d:41:
                    f2:64:61:b4:97:8c:12:b2:16:5a:b5:65:93:49:fb:
                    ad:bd:e7:03:88:f8:53:bb:fc:f5:98:98:6c:6f:4e:
                    2e:a0:15:cb:18:a2:69:08:5e:8d:20:52:d0:a8:fd:
                    5b:92:76:dc:c1:70:0b:04:a6:42:6d:c3:c2:89:67:
                    3e:97:cf:ee:6b:f7:99:5d:11:df:10:1c:de:cc:85:
                    7b:04:9c:e3:8a:a9:ac:6a:1f:5e:e9:96:a0:87:c3:
                    e0:ae:50:26:c9:94:85:cb:ae:58:d8:bc:72:3a:d2:
                    5b:77:80:84:93:45:99:68:bf:07:2a:47:bc:8c:3c:
                    f7:07:34:a8:ba:8f:69:3f:20:eb:bf:bf:ff:09:f3:
                    c5:ed:e6:8b:91:de:99:22:db:15:6d:df:02:63:08:
                    3e:ac:12:69:2b:e6:66:c0:ee:cd:8f:c9:2d:ab:69:
                    58:d4:13:66:02:06:13:bc:9a:55:b3:aa:45:13:d4:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E5:0D:DD:12:7E:73:47:73:9D:99:2F:74:CA:03:82:3C:A8:5C:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dfdee0-6728-498f-a89e-18c0fdff5a42/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dfdee0-6728-498f-a89e-18c0fdff5a42/1/9-UN3RJ-c0dznZkvdMoDgjyoXLc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.232.0/22
                IPv6:
                  2a0e:c500::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:e1:6f:08:16:b5:81:9d:ce:2b:37:06:ed:c2:d3:6b:f4:
         bf:70:5b:c1:46:9c:6e:2b:52:40:e0:d8:e4:d6:99:2c:e0:6c:
         13:94:f2:7a:b9:eb:a7:60:fc:1a:c2:86:03:a1:b4:f2:80:2c:
         fc:36:5e:40:a6:2f:70:d9:4b:29:62:3b:57:f0:59:cd:67:4d:
         f3:fd:83:ab:ad:66:59:51:44:79:c8:79:01:31:f5:56:f9:7b:
         a2:b7:15:6a:ff:09:48:a8:51:e2:ce:85:8a:fc:e6:23:4c:52:
         4e:72:43:c0:b0:9d:ec:e4:57:cf:3a:43:b7:b2:d4:18:52:df:
         9e:ef:60:54:f0:24:f1:fd:01:fa:c7:9e:f7:31:fb:32:b8:ea:
         b8:20:42:be:01:6f:fd:b5:46:1a:ff:5f:c4:41:bc:c5:9e:ad:
         0f:0f:62:58:24:a1:3c:86:bb:66:aa:0d:14:2a:f0:d1:de:c7:
         ac:48:44:d7:5d:7b:8a:d7:5e:63:1c:a1:c0:4b:1c:e5:f6:24:
         04:3b:ba:d9:55:67:4c:e7:f3:f5:42:78:f4:66:f3:22:4f:0d:
         0c:be:7c:26:35:a6:98:35:1e:68:d6:d7:b2:5a:83:14:c3:e8:
         7a:27:dc:7f:b4:ad:5a:49:d9:4a:51:29:cf:8e:a1:64:92:8c:
         29:b2:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----