Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kiQ1uOdfhWXgEJF_gGhV3z8x-w.cer
File:                     9kiQ1uOdfhWXgEJF_gGhV3z8x-w.cer (raw, json)
Hash identifier:          q5JsVWzU4SrYrIt00u7kqBSeVvSqpBewu1WkYc5jnqE=
Subject key identifier:   F6:48:90:D6:E3:9D:7E:15:97:80:42:45:FE:01:A1:57:7C:FC:C7:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6F0FCEBCD7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/4b2f05-2536-4cdd-a7b2-fc87abd4d501/1/9kiQ1uOdfhWXgEJF_gGhV3z8x-w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/4b2f05-2536-4cdd-a7b2-fc87abd4d501/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Sep 2020 13:15:23 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 212690
                          IP: 193.3.44.0/24
                          IP: 2a10:5d40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477006576855 (0x6f0fcebcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  9 13:15:23 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f64890d6e39d7e1597804245fe01a1577cfcc7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:10:75:9b:06:08:13:aa:70:cd:41:8c:8b:
                    2a:fb:ae:8a:0d:4d:9f:67:06:cb:eb:d1:ef:05:1e:
                    d7:0d:85:b0:ef:56:d6:d4:aa:87:f8:da:c3:2b:d7:
                    c2:a2:22:33:06:66:7d:a1:cb:59:d4:45:33:df:b0:
                    cd:38:b0:61:6b:ed:76:fe:c2:b7:99:3d:56:5f:fb:
                    a1:57:74:55:22:b8:41:3c:d7:08:12:c2:06:45:78:
                    f8:22:72:07:f3:3e:6a:53:41:bf:bf:8b:29:b6:40:
                    d6:8e:15:9d:1e:b1:4a:76:d1:fe:b2:15:3b:c0:b8:
                    76:74:6e:97:a9:1f:e0:b8:cd:55:50:ce:cb:35:6e:
                    98:07:fd:f2:c8:9a:c7:42:7d:07:b1:3b:4e:23:7d:
                    45:bb:a1:41:6e:be:b1:f1:93:fa:82:e0:a4:9d:fe:
                    ab:95:3a:52:12:3d:3d:a8:ec:30:b2:6d:6e:2d:1d:
                    12:1e:c0:10:e2:15:6c:b7:3d:52:bb:e0:e1:78:fe:
                    73:af:6a:e9:a4:38:85:64:3d:61:82:47:b5:05:3c:
                    cd:27:8c:3a:c7:0f:a6:43:62:7b:53:f0:9d:9d:7f:
                    50:9b:b2:af:29:f7:c4:e7:26:8c:2a:d1:a5:fc:fc:
                    69:3b:28:08:3a:7c:36:9f:1b:25:0a:5a:dd:75:7d:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:90:D6:E3:9D:7E:15:97:80:42:45:FE:01:A1:57:7C:FC:C7:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4b2f05-2536-4cdd-a7b2-fc87abd4d501/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4b2f05-2536-4cdd-a7b2-fc87abd4d501/1/9kiQ1uOdfhWXgEJF_gGhV3z8x-w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.44.0/24
                IPv6:
                  2a10:5d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212690

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:88:9f:5f:f9:f4:ce:26:02:f6:3c:97:5e:de:de:41:be:
         9f:3b:61:2c:d3:10:87:4a:af:4a:5b:b1:b5:d3:61:54:9a:d4:
         89:fa:69:ca:61:37:a9:1b:71:c6:3c:76:a6:e3:0b:e8:2d:f3:
         17:63:21:2c:66:33:96:78:e6:0e:5b:88:aa:48:a4:54:e4:b8:
         3d:6c:e9:eb:6d:4b:69:7d:47:d5:a4:ad:cd:6b:a5:0e:3e:a7:
         f0:21:94:35:86:07:55:39:da:88:6b:85:fa:41:82:93:98:95:
         0f:94:ce:f5:22:2a:6a:f7:cc:dd:8c:6c:d4:61:6b:3e:10:d4:
         1e:dd:5e:60:9b:50:c6:11:0c:57:74:84:6f:0a:53:c1:79:ce:
         12:de:52:52:1a:45:69:0d:81:54:fe:4b:74:0c:ef:3b:d2:d3:
         dc:ee:89:f0:1c:ff:25:06:ce:cc:ce:e7:c2:c6:fd:1b:63:44:
         8a:9a:99:ca:ca:51:88:9e:81:63:b5:c3:47:39:14:2c:c9:2e:
         e7:19:f8:b4:bf:d1:4d:ea:05:2c:c9:05:e5:51:45:67:88:04:
         f0:20:53:35:6d:f5:b6:d0:11:7e:b5:2c:eb:46:93:3f:a8:c3:
         e7:49:3c:ca:b4:7a:fb:15:47:e6:be:29:92:c7:fe:7a:58:57:
         85:b3:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----