Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4PTAnaOk80wb62gvVKa9qscblw.cer
File:                     D4PTAnaOk80wb62gvVKa9qscblw.cer (raw, json)
Hash identifier:          A0rUWopfHFKP+dO8pRTG5P734FIxtFdvtb5MbhS5D6M=
Subject key identifier:   0F:83:D3:02:76:8E:93:CD:30:6F:AD:A0:BD:52:9A:F6:AB:1C:6E:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7D324C8393
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/946b0c-22b8-4cda-bffe-4c079ccde77b/1/D4PTAnaOk80wb62gvVKa9qscblw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/946b0c-22b8-4cda-bffe-4c079ccde77b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:20:58 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.8.172.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537714787219 (0x7d324c8393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:20:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0f83d302768e93cd306fada0bd529af6ab1c6e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:fe:d9:01:85:3b:c1:42:a0:e7:17:52:e8:
                    d3:b2:6f:fa:fb:9b:2f:6e:64:24:df:3e:79:40:dd:
                    45:f9:b3:df:f1:17:47:d8:15:28:15:4e:9a:92:36:
                    24:c2:50:61:9a:62:e5:f3:26:f1:3b:76:3d:44:88:
                    59:1d:b2:41:21:26:86:cf:32:6e:ba:27:9a:2d:84:
                    fe:c1:a9:0d:64:42:c7:43:11:a4:b4:1d:b1:bd:8a:
                    c7:c7:6e:e9:46:77:44:e9:97:9c:8f:f2:cb:f9:2b:
                    6e:98:d8:ac:2e:3d:4b:58:cd:37:dd:13:59:e3:f5:
                    52:15:38:3d:c1:70:5d:6f:81:91:f7:80:fa:ee:55:
                    f7:18:58:45:67:bf:3c:86:96:94:79:76:ee:b2:e4:
                    4c:9c:d4:9c:67:ce:41:ad:50:ae:80:05:50:3b:ee:
                    69:20:a0:08:de:7b:45:26:04:0c:97:51:cf:82:5c:
                    de:b2:d7:57:8f:08:48:d9:79:68:c5:e9:e2:7d:3d:
                    b6:11:b4:24:ab:f3:36:0b:a5:5f:61:65:65:ba:02:
                    d2:83:76:43:0d:70:dd:34:4d:61:8e:f2:ee:32:2d:
                    5e:f4:66:e7:65:9e:50:e7:8b:82:1e:48:cc:18:2c:
                    a7:93:74:66:d0:fc:55:7f:29:eb:f3:2f:50:60:31:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:D3:02:76:8E:93:CD:30:6F:AD:A0:BD:52:9A:F6:AB:1C:6E:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/946b0c-22b8-4cda-bffe-4c079ccde77b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/946b0c-22b8-4cda-bffe-4c079ccde77b/1/D4PTAnaOk80wb62gvVKa9qscblw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:06:70:1e:e3:d7:20:82:36:5f:93:0e:c2:6d:22:71:e9:
         5c:7d:ae:d8:34:62:ce:7d:73:89:fa:c6:21:a1:79:b4:15:92:
         23:d1:7b:bd:12:c8:b7:69:47:ca:e0:c9:ea:0d:e2:29:a8:a2:
         5c:4c:e8:ef:17:3c:4d:18:0d:8c:60:33:ae:24:ce:09:57:cd:
         e0:7f:14:67:f8:4f:f3:f5:cd:05:87:67:2e:31:a6:09:78:bf:
         02:48:48:2a:0c:fa:0b:5f:29:93:8e:f3:73:92:2e:87:88:9c:
         b2:97:4a:7a:9f:f8:a8:f7:41:00:90:98:3e:3e:d1:78:43:c7:
         1c:16:f1:1a:f2:27:10:9d:97:57:62:fe:72:d2:18:66:6f:92:
         49:84:ae:b6:7f:b4:df:9f:a2:95:9e:b5:6e:74:bb:4c:d8:84:
         d7:ba:6d:1c:37:20:f3:56:2f:2e:53:e3:28:b1:d7:26:25:db:
         14:a4:10:93:9c:0c:8a:d9:f2:a0:14:42:cc:9b:a2:2d:bf:4d:
         1b:38:53:78:fa:6c:13:2b:5a:9c:82:86:20:4e:02:dd:53:5d:
         0c:a7:b5:b5:79:36:5d:9e:81:0f:d0:80:fb:e6:4a:0a:2d:ac:
         77:e7:f7:6e:db:63:ae:a9:93:61:b3:c2:2a:ef:fc:70:e6:7d:
         47:3d:26:11
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFfTJMg5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzIwNThaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBmODNkMzAyNzY4
ZTkzY2QzMDZmYWRhMGJkNTI5YWY2YWIxYzZlNWMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwBv7ZAYU7wUKg5xdS6NOyb/r7my9uZCTfPnlA3UX5s9/x
F0fYFSgVTpqSNiTCUGGaYuXzJvE7dj1EiFkdskEhJobPMm66J5othP7BqQ1kQsdD
EaS0HbG9isfHbulGd0Tpl5yP8sv5K26Y2KwuPUtYzTfdE1nj9VIVOD3BcF1vgZH3
gPruVfcYWEVnvzyGlpR5du6y5Eyc1JxnzkGtUK6ABVA77mkgoAjee0UmBAyXUc+C
XN6y11ePCEjZeWjF6eJ9PbYRtCSr8zYLpV9hZWW6AtKDdkMNcN00TWGO8u4yLV70
ZudlnlDni4IeSMwYLKeTdGbQ/FV/KevzL1BgMYmfAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQUD4PTAnaOk80wb62gvVKa9qscblwwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOTQ2YjBjLTIyYjgtNGNkYS1i
ZmZlLTRjMDc5Y2NkZTc3Yi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NDZiMGMtMjJiOC00Y2RhLWJm
ZmUtNGMwNzljY2RlNzdiLzEvRDRQVEFuYU9rODB3YjYyZ3ZWS2E5cXNjYmx3Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItCKwwDQYJKoZIhvcNAQELBQADggEBAIU9BnAe49cggjZfkw7CbSJx
6Vx9rtg0Ys59c4n6xiGhebQVkiPRe70SyLdpR8rgyeoN4imoolxM6O8XPE0YDYxg
M64kzglXzeB/FGf4T/P1zQWHZy4xpgl4vwJISCoM+gtfKZOO83OSLoeInLKXSnqf
+Kj3QQCQmD4+0XhDxxwW8RryJxCdl1di/nLSGGZvkkmErrZ/tN+fopWetW50u0zY
hNe6bRw3IPNWLy5T4yix1yYl2xSkEJOcDIrZ8qAUQsyboi2/TRs4U3j6bBMrWpyC
hiBOAt1TXQyntbV5Nl2egQ/QgPvmSgotrHfn927bY66pk2Gzwirv/HDmfUc9JhE=
-----END CERTIFICATE-----