Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99Vi8hbjcMOBE_Q-ARsP4pNfAdc.cer
File:                     99Vi8hbjcMOBE_Q-ARsP4pNfAdc.cer (raw, json)
Hash identifier:          6TF1svJe/i2XDpiuvIowbO+AJwz33LjFmj3z4p6rxZA=
Subject key identifier:   F7:D5:62:F2:16:E3:70:C3:81:13:F4:3E:01:1B:0F:E2:93:5F:01:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8392AB9DC3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/1b5323-0480-4229-8c0a-37d9a3871131/1/99Vi8hbjcMOBE_Q-ARsP4pNfAdc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/1b5323-0480-4229-8c0a-37d9a3871131/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:16:20 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 44539
                          IP: 212.66.32.0/19
                          IP: 2a04:2c80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565101436355 (0x8392ab9dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:16:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f7d562f216e370c38113f43e011b0fe2935f01d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:6c:d2:0e:50:05:56:04:ea:40:fb:bf:6a:
                    c0:17:97:a1:17:4b:fb:40:87:b1:37:65:e2:28:71:
                    b7:c1:7c:f2:e3:5d:64:87:b6:60:88:ce:ab:0f:4c:
                    d8:c5:c1:c3:17:38:19:46:35:23:54:87:16:3a:92:
                    c1:0c:da:3f:4d:8d:d1:ae:e0:7c:bf:f2:e6:74:83:
                    7f:a8:7f:ee:82:78:4b:66:b1:e9:f8:8c:01:40:6b:
                    cb:93:b6:d8:30:a9:6e:22:c1:7e:ae:0b:76:a2:59:
                    5a:cb:63:46:de:bc:1d:0b:c0:71:57:8a:cc:c5:29:
                    5f:0a:2f:cd:5c:63:ba:f5:55:60:a7:c8:2e:af:3b:
                    a0:31:0f:dd:a5:06:29:1e:36:0e:f0:c5:50:af:ef:
                    54:42:98:58:57:da:82:e8:31:36:21:73:ec:ab:b8:
                    34:08:c9:8d:cb:a6:17:d5:0d:8d:db:84:35:43:04:
                    9b:77:f2:48:35:05:f8:7f:78:a9:2e:58:d6:e5:b2:
                    4c:5c:a5:26:1e:b6:02:a1:eb:f6:8d:3d:11:9d:cc:
                    31:a0:33:d2:7c:1e:62:bb:7a:4a:78:ef:07:79:b4:
                    1f:a0:28:a1:e2:19:0e:ee:40:60:86:a8:50:b3:8f:
                    3b:5c:80:a5:10:0f:c8:c1:a8:49:35:6c:25:48:73:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D5:62:F2:16:E3:70:C3:81:13:F4:3E:01:1B:0F:E2:93:5F:01:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b5323-0480-4229-8c0a-37d9a3871131/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b5323-0480-4229-8c0a-37d9a3871131/1/99Vi8hbjcMOBE_Q-ARsP4pNfAdc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.66.32.0/19
                IPv6:
                  2a04:2c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44539

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:91:f8:ca:14:59:21:af:02:31:2d:df:80:9b:34:00:5d:
         1b:51:c8:bd:5d:6f:4e:d9:34:70:5a:e5:c9:64:ba:2b:0d:42:
         a5:75:93:4a:19:cd:c5:c6:87:a2:08:95:80:3e:2a:1d:0f:aa:
         cf:cc:4d:d5:7a:22:25:2a:00:b5:af:62:ca:c7:ad:cf:4d:ef:
         2a:ac:a2:7e:54:ed:13:89:1a:e0:d0:f9:e9:25:55:76:71:cb:
         da:5c:6f:7c:22:b4:be:9d:f1:3b:8c:a4:75:2e:50:99:b7:02:
         f3:55:b1:28:56:b9:f1:f8:72:5f:d4:ca:eb:c9:78:ce:b5:c2:
         bf:a7:3c:97:f0:ba:22:c3:94:f8:f2:25:1b:9e:ce:6c:a7:c6:
         36:e4:d2:13:30:e3:16:15:51:55:25:dc:5e:6a:86:89:94:28:
         75:a5:91:dd:eb:91:7f:9f:d6:78:a2:c3:2d:c6:c6:58:54:a6:
         f4:f3:ab:87:3c:ef:5b:50:b2:6d:97:fe:34:1c:83:09:91:22:
         d6:25:eb:d1:ed:e0:5a:20:32:ed:10:a6:db:22:d8:80:15:9f:
         19:00:07:3e:1e:30:c7:9b:66:e0:28:53:24:94:14:78:d8:3a:
         55:f1:35:0a:e8:2c:29:b8:a2:05:eb:be:4f:e1:17:b3:e7:0a:
         4a:70:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----