Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9IhfQ75YmrI9rhxiPMKvOY3woSo.cer
File:                     9IhfQ75YmrI9rhxiPMKvOY3woSo.cer (raw, json)
Hash identifier:          LCPrZ8pEh5BLHF9N53ibMZcrKBmP2owW3emyyoEWSOA=
Subject key identifier:   F4:88:5F:43:BE:58:9A:B2:3D:AE:1C:62:3C:C2:AF:39:8D:F0:A1:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5E023DF186
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/7fd195-6e1c-435b-80a0-e6f34c7a8cb6/1/9IhfQ75YmrI9rhxiPMKvOY3woSo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/7fd195-6e1c-435b-80a0-e6f34c7a8cb6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:07:10 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.251.152.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403764539782 (0x5e023df186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:07:10 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f4885f43be589ab23dae1c623cc2af398df0a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:78:1a:ee:8d:21:0c:f0:d6:23:50:32:d3:
                    94:cc:62:c2:f6:34:f1:90:33:e1:14:a6:dd:27:05:
                    dc:25:73:9d:2c:96:82:ba:0c:7e:5b:0a:58:60:3d:
                    b7:98:97:b5:b6:c1:a2:3d:4c:d7:65:7f:74:02:ff:
                    0a:92:d8:2e:a9:cc:f0:1b:2a:d4:c5:27:0b:39:75:
                    59:3a:98:36:4a:ef:a2:d5:b5:6b:d7:6b:58:2b:c9:
                    71:b3:70:48:b6:d9:1e:de:02:23:10:94:74:ee:c6:
                    13:5f:9d:31:48:66:af:2b:bb:98:b4:84:d3:66:6a:
                    3e:bd:5d:7e:6c:89:dc:58:a0:30:5c:12:5d:a4:72:
                    6d:02:d3:ea:c3:e2:2a:cb:ca:fd:16:80:cd:2c:c0:
                    06:42:33:01:b8:3c:3a:cb:ac:59:22:a6:47:a5:22:
                    8e:5f:c7:5b:64:68:b9:92:8f:eb:0a:ab:82:31:98:
                    d8:93:4e:19:a7:c8:06:9d:e1:19:f0:db:67:79:2a:
                    19:e4:c1:d3:1e:be:60:6f:2b:f7:de:16:11:bb:e6:
                    f3:cf:99:dd:85:95:f4:79:4d:b5:88:92:01:be:da:
                    84:42:03:bd:66:42:ea:fc:72:2e:4a:e5:90:6d:2e:
                    63:84:1b:9a:d2:a4:ab:8b:b9:b2:b5:7a:ac:a3:7b:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:5F:43:BE:58:9A:B2:3D:AE:1C:62:3C:C2:AF:39:8D:F0:A1:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7fd195-6e1c-435b-80a0-e6f34c7a8cb6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7fd195-6e1c-435b-80a0-e6f34c7a8cb6/1/9IhfQ75YmrI9rhxiPMKvOY3woSo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:f8:f4:0a:94:c7:c7:6e:ca:76:37:76:30:84:d5:a5:c2:
         6f:9e:e2:0f:7f:75:ef:66:0e:ec:05:95:d7:56:84:1a:a4:0c:
         24:41:33:07:14:35:0f:42:8b:a2:34:6d:89:4f:e8:82:e4:4e:
         76:89:0a:b6:6c:ea:3c:32:2b:0a:da:20:b6:7b:e0:a0:45:77:
         b5:09:fb:6c:b4:21:5a:af:1b:8c:d4:f4:32:67:ef:ea:d0:a9:
         cc:26:a7:49:9e:df:fc:45:de:61:2c:e5:5e:d1:d9:5e:06:0a:
         0c:1b:6e:74:47:c8:fe:1d:d1:f2:70:71:ca:e8:91:9f:05:fd:
         87:e7:8a:db:c7:52:2a:bf:61:f3:78:a3:6f:45:7f:3f:21:9b:
         ec:21:5e:21:18:c6:e6:91:8f:9b:50:9a:6d:49:3d:23:fc:13:
         f0:0b:ee:42:28:94:b5:fd:85:5e:c2:aa:5f:7b:77:de:18:cf:
         2a:0b:fa:a4:2b:29:55:cf:2f:a8:09:e9:bc:a9:a9:b9:9c:f1:
         c7:86:58:0c:76:50:b5:f9:fd:2f:54:ae:89:bb:4d:fa:c5:95:
         84:82:3d:bd:f8:d6:31:8a:da:9f:bf:76:6d:71:0c:33:87:fb:
         10:ed:91:83:e1:12:1f:12:77:8f:38:70:51:da:0d:e0:9a:15:
         c3:fc:33:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----