Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Pe-7w76bW_4k3sGETtkROPbmY0.cer
File:                     9Pe-7w76bW_4k3sGETtkROPbmY0.cer (raw, json)
Hash identifier:          zOEyPLMUeC2QPZnqweU6dPFERqpdR7c0HL5yEJHqtHg=
Subject key identifier:   F4:F7:BE:EF:0E:FA:6D:6F:F8:93:7B:06:11:3B:64:44:E3:DB:99:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       829C360402
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/94bedb-6b8f-4226-998b-6331061968b3/1/9Pe-7w76bW_4k3sGETtkROPbmY0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/94bedb-6b8f-4226-998b-6331061968b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:40:06 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 176.118.188.0/22
                          IP: 2a0d:cd40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560966534146 (0x829c360402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:40:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f4f7beef0efa6d6ff8937b06113b6444e3db998d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:cc:da:d4:a0:b4:00:e3:47:e7:2c:70:f7:
                    13:66:0f:dc:10:1a:3f:c4:d0:2a:54:69:45:86:54:
                    4c:3f:43:99:70:16:af:62:ae:ed:1e:9c:7d:2c:b0:
                    08:12:f2:f2:7e:9a:a8:c1:86:e5:96:96:2d:3c:92:
                    b5:28:f0:54:d1:42:f7:f4:4c:61:22:10:34:e7:2f:
                    02:c8:ae:f9:6c:52:1a:ed:5f:86:f0:83:b8:13:82:
                    22:82:a1:42:5c:9d:f9:2d:e2:57:39:8f:b9:d0:93:
                    8b:3b:79:b3:6f:14:fc:17:01:84:70:c3:3d:8b:ee:
                    c9:b4:3a:93:49:17:5e:75:33:be:60:e5:9d:f4:60:
                    54:62:24:cd:31:d6:73:24:9d:5a:5b:40:6e:34:76:
                    3d:c7:e8:7a:5d:f6:ac:03:52:a8:5b:5f:60:7b:61:
                    2e:8a:f3:f5:1e:34:50:31:1c:a7:ec:93:86:e1:c8:
                    51:53:af:17:0e:bb:ce:ff:6d:16:bf:fa:1c:71:44:
                    7a:93:d3:e8:26:9d:bf:e3:99:7c:ef:58:fa:5d:05:
                    94:5d:7c:01:5f:53:a2:92:bb:4b:3a:39:aa:14:c2:
                    85:2c:b3:77:69:98:cf:2b:ef:aa:c2:de:71:56:e0:
                    81:8a:d8:66:50:bd:df:87:20:65:a1:11:ea:a0:1e:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F7:BE:EF:0E:FA:6D:6F:F8:93:7B:06:11:3B:64:44:E3:DB:99:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/94bedb-6b8f-4226-998b-6331061968b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/94bedb-6b8f-4226-998b-6331061968b3/1/9Pe-7w76bW_4k3sGETtkROPbmY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.188.0/22
                IPv6:
                  2a0d:cd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:85:37:40:9e:0e:ef:50:3e:5e:7c:33:e9:74:d1:cb:fe:
         78:71:f8:e7:87:0f:e8:d5:e8:49:9e:7f:e0:86:7b:b8:a0:44:
         74:34:d8:b6:d8:0e:94:88:61:a6:49:40:f2:34:25:a8:ed:25:
         ed:12:aa:96:72:e0:3f:33:cb:78:14:2c:71:55:bd:30:f7:6f:
         15:3c:03:03:a5:9f:a7:c9:6a:f6:66:9e:5f:e7:7b:71:87:b1:
         de:0c:84:cf:24:27:3e:38:1a:af:81:27:57:5c:5f:af:8a:01:
         72:d8:e3:48:7b:9f:bd:1b:f3:d1:be:93:14:43:69:b9:6a:e4:
         ad:54:22:09:01:b2:6b:fa:a5:b7:f1:cd:97:8a:c5:78:fb:bd:
         a2:d9:a0:a3:c4:f6:93:d9:d9:e2:04:5c:6d:e9:35:dd:97:b2:
         c8:ab:00:da:d5:88:6d:a1:f1:fe:ee:0f:ea:65:a7:60:cc:45:
         ee:7f:6d:77:34:5f:7b:7d:2b:ff:3c:cb:f5:8c:28:c7:a3:e9:
         0a:5c:8f:b1:ab:40:7f:21:a5:b2:86:af:50:3d:a5:06:c3:5c:
         6d:98:34:03:03:7c:21:ae:69:70:12:c1:c0:14:22:14:56:da:
         ff:34:2c:1c:89:c2:c5:53:89:80:f4:11:87:aa:63:5b:92:df:
         e9:05:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----