Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xX57aDEBdOBB6fqhzVsoDGUEvM.cer
File:                     9xX57aDEBdOBB6fqhzVsoDGUEvM.cer (raw, json)
Hash identifier:          LigImo0W6Q4KzLYGS9LfRlF6iJ80tEQIYBLKEWeypTA=
Subject key identifier:   F7:15:F9:ED:A0:C4:05:D3:81:07:A7:EA:87:35:6C:A0:31:94:12:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7779E11170
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/9xX57aDEBdOBB6fqhzVsoDGUEvM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:51:19 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 86.62.24.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513145901424 (0x7779e11170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:51:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f715f9eda0c405d38107a7ea87356ca0319412f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:86:92:1e:da:93:a9:52:64:c0:b3:84:b4:
                    b9:29:44:ae:99:7b:c4:aa:dc:20:cb:62:18:bc:98:
                    c9:69:1b:50:d0:3a:1f:15:17:83:8e:d8:fc:0f:64:
                    89:c4:a4:40:63:ac:be:f7:ba:30:83:43:e7:b8:3a:
                    0a:f2:20:ac:f5:2d:ff:08:af:f5:62:b1:1a:1d:5c:
                    04:3e:86:4c:20:8e:16:96:ce:10:10:4e:c7:0e:76:
                    71:c5:4f:34:21:c4:ac:03:5d:7a:77:6e:cf:38:f8:
                    ff:7a:aa:a5:c0:4b:69:3d:c6:49:78:31:8e:99:3a:
                    a0:21:f7:f7:94:5c:4c:a2:02:07:19:15:29:13:c2:
                    e7:a7:e6:d9:a5:0f:4c:06:03:a1:92:ef:44:b1:18:
                    91:f3:1e:98:81:c9:50:d3:e9:ca:bd:75:bb:a7:64:
                    7a:a0:25:bd:4f:ce:1c:da:db:0d:f2:e4:7f:71:2f:
                    eb:eb:9a:c0:09:c3:d9:69:f2:60:5c:00:7e:05:fa:
                    1c:d5:42:a7:e3:56:dc:54:74:10:b4:c0:dc:92:03:
                    b2:d7:98:08:09:f1:c1:fe:4f:20:2d:ea:82:27:de:
                    76:ed:5e:0e:c6:dd:56:24:66:2a:83:cc:d3:54:2c:
                    16:63:da:2c:d1:86:a5:82:bb:12:97:ca:f0:59:4c:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:15:F9:ED:A0:C4:05:D3:81:07:A7:EA:87:35:6C:A0:31:94:12:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/46012c-0851-4beb-ae8c-752c0de6c0f2/1/9xX57aDEBdOBB6fqhzVsoDGUEvM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.62.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:16:2c:99:49:1d:18:2a:cf:15:e6:88:03:62:da:5a:37:
         7d:9a:16:0d:a1:8f:a2:b0:73:70:35:71:76:2c:d7:d6:d9:6d:
         f9:95:f9:a5:08:3a:a5:e4:bd:99:27:02:a2:3f:80:25:81:02:
         90:98:a0:63:09:3c:55:c5:0d:30:fe:bc:17:ac:2e:55:5c:39:
         fa:8b:ae:29:e8:38:a3:97:b0:9c:bf:20:ff:df:b7:68:a2:1d:
         a9:46:1c:9e:68:44:74:f4:49:7f:e9:8f:af:77:7b:4c:61:c7:
         33:05:f8:b1:a6:a1:a2:6d:0d:0a:1e:e4:e2:49:ae:34:d9:c2:
         0c:2e:a4:d4:dc:41:25:ce:eb:25:7a:18:09:e1:26:0c:a7:02:
         79:1a:e0:ac:63:50:23:80:0f:de:ef:02:47:8a:95:0c:06:d0:
         54:19:6a:4e:9c:d6:6f:bd:40:25:95:45:82:30:66:49:dc:e9:
         bd:fe:2e:15:e1:6d:c0:2b:43:4f:6a:05:bd:5c:df:6e:0e:d7:
         7c:0c:0a:d0:30:cf:f0:51:13:c6:75:9e:9f:56:ec:19:c4:c7:
         69:5e:b0:cc:02:ee:b9:10:e7:93:1b:77:ca:da:c0:e3:15:c6:
         f1:7c:9e:1d:02:4e:a9:34:63:2e:1f:51:10:e8:6c:48:28:1e:
         7a:dd:a7:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----