old_timestamp=$(date -u -d '-7 days' -Isec)
/opt/puppetlabs/bin/puppet-query "nodes[certname]{catalog_timestamp < \"$old_timestamp\"}" | jq -r '.[].certname'