Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9NwGcFLD4unCgUrosNPA08CalVM.cer
File:                     9NwGcFLD4unCgUrosNPA08CalVM.cer (raw, json)
Hash identifier:          T6SqDrOA5dncfkJT4uplNM0dN5SiO7jf574hsjeuqxs=
Subject key identifier:   F4:DC:06:70:52:C3:E2:E9:C2:81:4A:E8:B0:D3:C0:D3:C0:9A:95:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       819A11160D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/b1374e-3eed-4ffb-94f1-cb762f5f6903/1/9NwGcFLD4unCgUrosNPA08CalVM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/b1374e-3eed-4ffb-94f1-cb762f5f6903/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:35:16 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 59411
                          IP: 2001:678:968::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556635592205 (0x819a11160d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:35:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f4dc067052c3e2e9c2814ae8b0d3c0d3c09a9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:17:81:14:51:21:d8:9e:18:a8:cc:ff:80:
                    91:8e:18:05:07:85:27:dc:76:4e:c8:f3:de:82:73:
                    6d:5b:98:c2:6f:4d:da:86:83:21:0c:f7:68:ed:2b:
                    bd:1d:f3:a1:dd:67:62:7e:74:a6:3d:8b:e2:44:43:
                    4a:83:59:5e:4e:1c:52:8c:fa:af:4a:43:49:d6:4f:
                    90:50:9b:b8:77:d1:5f:34:d5:59:ac:1a:e0:e7:39:
                    56:44:b9:e1:5b:72:c0:22:b4:75:49:d5:9a:98:0d:
                    fe:2d:32:0b:8b:e9:86:84:dc:ba:8a:eb:f3:ce:0e:
                    28:a8:b0:6f:ce:af:4e:71:d8:27:42:82:b1:bb:53:
                    a3:a2:40:2c:8c:47:cc:ef:23:b8:82:3a:93:65:50:
                    cd:e4:92:d3:24:d1:5a:43:07:d2:6a:c9:1f:e6:ce:
                    e4:64:02:f4:66:2b:65:61:49:c4:02:94:40:06:6b:
                    2e:9a:2c:ce:3b:d8:ef:8f:5e:0e:08:aa:d0:83:35:
                    80:b9:7f:a5:da:da:15:36:61:1c:3d:9e:17:12:3c:
                    de:47:bb:a4:74:ec:b3:30:25:e5:47:76:ff:00:24:
                    36:9f:3f:c7:a2:4b:f5:9f:17:fa:90:2b:83:0e:f2:
                    b4:bf:3b:9a:35:30:29:47:7c:fa:cc:86:9c:c4:57:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:06:70:52:C3:E2:E9:C2:81:4A:E8:B0:D3:C0:D3:C0:9A:95:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b1374e-3eed-4ffb-94f1-cb762f5f6903/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b1374e-3eed-4ffb-94f1-cb762f5f6903/1/9NwGcFLD4unCgUrosNPA08CalVM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:968::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59411

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:68:b3:37:f0:44:74:4a:b0:07:1a:74:6d:4d:f3:46:38:
         09:f9:00:36:8a:ca:b3:14:f8:5d:0e:c9:e4:c1:cf:6d:5f:ba:
         c0:13:5e:56:55:ec:18:98:c7:88:b9:93:48:de:88:f8:c1:15:
         4f:ed:fd:0f:5e:3f:27:48:29:4b:7b:03:3b:e4:cd:1c:62:6d:
         e1:8e:01:58:61:ca:35:9c:4b:09:72:81:e0:98:84:bb:0f:e8:
         d5:c5:98:08:fb:73:56:9b:a8:92:b6:82:d0:48:82:72:82:de:
         54:a4:ef:39:25:a9:33:17:f8:6e:c2:5e:20:f0:77:e1:da:c3:
         f6:98:9f:1b:b8:6e:18:bb:85:b8:f0:8f:40:96:d1:f1:92:f6:
         6a:81:62:99:81:fc:9e:1e:9c:fb:e7:8a:b4:4a:9f:77:d2:32:
         81:aa:97:69:0c:a3:ba:64:7a:aa:40:96:0a:f6:b4:b2:25:6f:
         42:39:98:af:97:5d:58:99:72:c8:4d:3c:25:1b:2f:94:71:13:
         5a:8f:01:e3:8f:1d:a8:0a:e1:da:6a:96:2f:ce:9b:40:b8:dc:
         bb:fa:45:68:52:77:68:5d:bb:b6:a9:6d:95:31:fa:d2:e5:55:
         e3:6e:60:b5:94:29:c8:40:1a:75:34:c9:49:7a:fc:6b:04:9a:
         43:53:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----