Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9p8cMELAtVDX1yYUEfnHMDmRsp8.cer
File:                     9p8cMELAtVDX1yYUEfnHMDmRsp8.cer (raw, json)
Hash identifier:          L4fkhU+j2rHijEK4X1AMvTYi513PGKJ69o3OlraHaLg=
Subject key identifier:   F6:9F:1C:30:42:C0:B5:50:D7:D7:26:14:11:F9:C7:30:39:91:B2:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7BCBEEE949
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/e50c72-2493-41fd-89f5-21723237374a/1/9p8cMELAtVDX1yYUEfnHMDmRsp8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/e50c72-2493-41fd-89f5-21723237374a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:46:20 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.86.148.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531702409545 (0x7bcbeee949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:46:20 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f69f1c3042c0b550d7d7261411f9c7303991b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:d5:fe:95:48:fd:97:dd:18:38:34:49:ac:
                    94:1c:f4:46:02:de:96:5f:57:38:8e:eb:59:3b:d0:
                    1f:53:b4:cf:68:51:ca:89:19:f0:93:50:88:12:32:
                    7d:14:87:c5:c5:65:a8:55:2f:c1:f7:07:e0:15:98:
                    80:d8:87:e5:7f:35:9c:4f:ad:fd:34:9f:25:e0:05:
                    41:56:41:8f:68:88:21:30:06:32:c8:7c:24:10:13:
                    25:e7:10:cb:14:31:bc:c4:89:9e:dc:38:55:98:f3:
                    30:c4:cf:4b:7e:8c:f8:61:b0:0f:e2:57:9b:a8:e7:
                    89:77:7f:12:88:d8:eb:41:67:26:13:89:ff:d9:df:
                    02:8f:67:1b:39:0f:d5:f3:ab:9e:1d:9e:fe:5d:7b:
                    c2:1f:50:a1:f1:5d:92:d1:e9:fb:78:0d:29:98:0e:
                    18:c8:29:56:e8:8c:b6:e5:a5:6f:ec:a3:d0:db:b9:
                    b4:be:43:68:fb:b2:58:f9:07:1a:55:6b:3f:cc:42:
                    3b:59:49:56:f3:a7:55:9f:24:0d:15:fc:61:be:0c:
                    1c:d4:e3:b1:7e:37:72:97:fc:35:df:88:4f:1c:82:
                    5c:f0:d6:38:f3:e0:d4:87:b8:da:e0:0c:fc:6e:04:
                    01:d2:04:11:fe:a0:9a:34:44:cd:e6:4c:a1:75:2c:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9F:1C:30:42:C0:B5:50:D7:D7:26:14:11:F9:C7:30:39:91:B2:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e50c72-2493-41fd-89f5-21723237374a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e50c72-2493-41fd-89f5-21723237374a/1/9p8cMELAtVDX1yYUEfnHMDmRsp8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:e3:4e:dc:78:5b:4e:99:a2:04:58:ab:ab:d0:8d:02:9d:
         1a:1f:5f:a8:ba:d1:a1:74:ea:5f:0d:2b:f0:77:6e:10:26:6d:
         d2:04:e3:3a:d0:d5:06:9e:32:8e:3b:c6:05:01:2e:d0:19:31:
         e7:9b:a2:94:b7:71:e1:c5:ab:23:57:f4:db:4c:e6:07:6d:f8:
         d2:c1:b3:0c:09:92:48:01:1c:83:80:f2:5a:9a:c3:47:c8:0e:
         a5:c6:41:07:21:5e:36:33:6c:11:3a:5c:14:94:97:34:32:3e:
         f9:c7:b2:a0:7c:fb:a3:fe:07:17:26:06:7e:14:36:7c:5a:a6:
         ab:0d:5e:49:c9:8a:27:bf:1b:ad:47:16:69:5d:77:ca:74:57:
         a6:29:7e:b5:97:b5:19:60:31:d4:95:a1:2b:1c:90:0c:35:03:
         22:5b:51:c8:01:45:09:4a:33:95:b2:70:51:e9:ba:95:79:e4:
         68:86:3f:4a:15:3e:26:e5:51:1d:5e:2d:ef:2c:bc:93:73:4d:
         b1:14:6d:51:12:41:2c:e1:d3:77:c7:49:2c:3a:99:a7:48:67:
         e5:6c:3d:b6:83:86:e7:4f:07:e2:c9:94:9f:89:10:a7:fe:7f:
         4a:53:5f:92:18:2d:e9:b4:74:f5:1a:87:ec:fa:5d:5e:2d:76:
         67:3b:13:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----