Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LQFdl7h57P7I_Ee3V6f2Vw3L0f8.cer
File:                     LQFdl7h57P7I_Ee3V6f2Vw3L0f8.cer (raw, json)
Hash identifier:          m5UoqGRcCXpwMaXMezavGvlv2/fjxnUciFQnxNF0xYY=
Subject key identifier:   2D:01:5D:97:B8:79:EC:FE:C8:FC:47:B7:57:A7:F6:57:0D:CB:D1:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7531C0686D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/635372/0/2D015D97B879ECFEC8FC47B757A7F6570DCBD1FF.mft
caRepository:             rsync://nostromo.heficed.net/repo/635372/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:01:27 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.45.36.0/22
                          IP: 2a03:fbc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503345866861 (0x7531c0686d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2d015d97b879ecfec8fc47b757a7f6570dcbd1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:7c:9b:25:41:87:2e:1d:a9:a7:20:35:98:
                    fc:53:a4:e6:91:ab:91:f6:a0:e7:0c:59:87:94:c2:
                    44:60:9f:23:f0:6f:be:e0:59:49:e4:eb:44:da:ee:
                    27:ae:d7:1d:79:68:fa:11:f5:2e:af:8c:e5:2f:de:
                    9f:85:69:9e:f7:65:bf:1e:e4:37:5d:43:55:5b:be:
                    c2:0e:52:80:dc:94:bb:35:84:67:3c:14:e7:aa:63:
                    52:af:16:bf:ae:d1:d1:c5:1e:6b:7f:1b:02:01:d3:
                    7a:d1:59:39:0a:4d:0b:5c:41:6a:44:72:63:a6:bf:
                    15:be:6c:38:cc:fc:5d:58:d7:42:d3:5f:08:20:bd:
                    dd:6e:f5:2e:8b:5d:71:96:88:90:ec:e6:6d:13:a4:
                    05:05:ac:69:7f:2d:9c:0b:a0:4e:1a:5b:3f:6d:71:
                    40:95:0b:18:bf:dc:b9:8d:7b:6c:09:11:ed:fc:4e:
                    4f:63:52:87:f4:8a:21:f2:76:40:cd:67:04:a5:4a:
                    64:28:18:2f:74:73:51:d8:5d:56:c0:86:8c:6b:bb:
                    ee:8f:c5:b8:1f:83:ed:1e:b6:f7:a3:89:1b:9b:b3:
                    9c:19:8c:31:15:34:91:67:c3:5f:25:e4:0e:cf:ed:
                    9e:f2:f3:71:72:75:be:9f:41:56:c7:4f:d7:d5:2f:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:01:5D:97:B8:79:EC:FE:C8:FC:47:B7:57:A7:F6:57:0D:CB:D1:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635372/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635372/0/2D015D97B879ECFEC8FC47B757A7F6570DCBD1FF.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22
                IPv6:
                  2a03:fbc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:7b:23:c5:5a:01:69:b6:c6:5e:ee:48:28:d9:74:2f:81:12:
         47:3c:09:03:bd:fa:39:49:10:fd:57:0d:ab:72:ab:30:df:4b:
         cb:61:77:1c:be:6c:3b:ca:57:43:31:bf:9c:11:f3:1d:41:1a:
         b3:36:2e:7d:13:d4:32:dd:8c:12:cf:fe:02:9c:41:19:d8:ec:
         21:2d:9d:2c:95:d9:f1:df:c0:24:c7:36:b2:ae:23:bb:e2:7a:
         12:9c:c6:80:ec:fe:dd:11:1f:35:7e:b3:9f:b4:fd:b3:fa:fe:
         74:fd:16:fb:34:a5:41:2f:db:a8:ee:73:5f:ac:c3:8e:6c:1c:
         45:3f:29:a6:92:b4:41:ff:0d:48:19:5b:01:32:3c:1c:29:92:
         a8:ca:81:5d:ad:2b:08:76:b4:9e:56:5e:73:e1:c3:3b:59:08:
         5b:71:b7:b9:49:68:d7:48:b2:23:e9:ff:83:e4:96:27:e6:eb:
         b8:b2:7f:82:23:e9:70:5d:23:82:55:0c:c0:5b:65:5c:92:fd:
         25:58:5b:df:f4:a9:3d:37:02:f1:b6:96:36:d8:6d:71:f7:b4:
         b7:f5:30:e7:56:ac:b4:7a:3e:ff:4a:78:33:5c:6d:6b:17:ce:
         a2:ed:83:bb:12:67:be:25:af:39:9b:57:72:8f:76:d9:b7:36:
         ec:e3:cb:03
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIFdTHAaG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMjdaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJkMDE1ZDk3Yjg3
OWVjZmVjOGZjNDdiNzU3YTdmNjU3MGRjYmQxZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEC3ybJUGHLh2ppyA1mPxTpOaRq5H2oOcMWYeUwkRgnyPw
b77gWUnk60Ta7ieu1x15aPoR9S6vjOUv3p+FaZ73Zb8e5DddQ1VbvsIOUoDclLs1
hGc8FOeqY1KvFr+u0dHFHmt/GwIB03rRWTkKTQtcQWpEcmOmvxW+bDjM/F1Y10LT
Xwggvd1u9S6LXXGWiJDs5m0TpAUFrGl/LZwLoE4aWz9tcUCVCxi/3LmNe2wJEe38
Tk9jUof0iiHydkDNZwSlSmQoGC90c1HYXVbAhoxru+6Pxbgfg+0etvejiRubs5wZ
jDEVNJFnw18l5A7P7Z7y83Fydb6fQVbHT9fVLwxdAgMBAAGjggJdMIICWTAdBgNV
HQ4EFgQULQFdl7h57P7I/Ee3V6f2Vw3L0f8wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
7gYIKwYBBQUHAQsEgeEwgd4wNwYIKwYBBQUHMAWGK3JzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby82MzUzNzIvMC8wYwYIKwYBBQUHMAqGV3JzeW5jOi8v
bm9zdHJvbW8uaGVmaWNlZC5uZXQvcmVwby82MzUzNzIvMC8yRDAxNUQ5N0I4NzlF
Q0ZFQzhGQzQ3Qjc1N0E3RjY1NzBEQ0JEMUZGLm1mdDA+BggrBgEFBQcwDYYyaHR0
cHM6Ly9ub3N0cm9tby5oZWZpY2VkLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWww
WQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAIFLSQwDQQCAAIwBwMFAyoD+8AwDQYJKoZIhvcNAQELBQADggEBACl7I8VaAWm2
xl7uSCjZdC+BEkc8CQO9+jlJEP1XDatyqzDfS8thdxy+bDvKV0Mxv5wR8x1BGrM2
Ln0T1DLdjBLP/gKcQRnY7CEtnSyV2fHfwCTHNrKuI7viehKcxoDs/t0RHzV+s5+0
/bP6/nT9Fvs0pUEv26juc1+sw45sHEU/KaaStEH/DUgZWwEyPBwpkqjKgV2tKwh2
tJ5WXnPhwztZCFtxt7lJaNdIsiPp/4Pklifm67iyf4Ij6XBdI4JVDMBbZVyS/SVY
W9/0qT03AvG2ljbYbXH3tLf1MOdWrLR6Pv9KeDNcbWsXzqLtg7sSZ74lrzmbV3KP
dtm3NuzjywM=
-----END CERTIFICATE-----