Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N8eNwtFa7QFXJVq7pxWd-ZOzdm0.cer
File:                     N8eNwtFa7QFXJVq7pxWd-ZOzdm0.cer (raw, json)
Hash identifier:          suzVDaC6hvaJFiDZ69MI8l6hLvG53/hV3cfK6+FYkKE=
Subject key identifier:   37:C7:8D:C2:D1:5A:ED:01:57:25:5A:BB:A7:15:9D:F9:93:B3:76:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       83A48D4FEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/2e2739-708f-4738-85c4-4e929e96b43d/1/N8eNwtFa7QFXJVq7pxWd-ZOzdm0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/2e2739-708f-4738-85c4-4e929e96b43d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:21:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.158.56.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565401440234 (0x83a48d4fea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:21:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=37c78dc2d15aed0157255abba7159df993b3766d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:08:7a:e4:9d:5a:69:8c:9b:6e:47:e9:57:
                    e1:d0:82:3e:7e:16:a0:4d:d4:6a:2b:1c:4e:47:7d:
                    5d:c4:5e:f9:8d:6b:aa:0d:1f:4a:85:33:e5:1e:ec:
                    ae:e4:2b:67:a7:26:21:8b:24:5f:01:16:5a:55:59:
                    54:ab:c9:b2:46:45:30:26:8e:09:44:30:da:08:3b:
                    8a:4c:7b:f4:0a:be:84:a3:3b:60:99:30:a4:7a:4c:
                    68:2b:3f:d7:55:05:b5:dc:10:9b:3a:12:88:02:28:
                    1d:ba:87:0d:f5:2c:e2:9c:d0:8f:ec:3f:60:5e:63:
                    e0:31:2c:90:f7:d0:bd:a2:ce:8b:58:87:f5:07:18:
                    7d:84:f2:27:34:c9:8a:f8:ef:09:db:13:8c:62:35:
                    d7:3e:8e:87:71:70:44:13:c8:aa:86:54:69:0b:f3:
                    b5:09:ad:13:9f:39:bd:49:1d:bd:c5:e5:b5:f9:25:
                    fd:81:b6:a4:60:af:11:9e:a6:b6:58:3d:84:0d:17:
                    2e:90:37:a5:88:24:c7:f6:21:02:9f:3e:b8:85:59:
                    12:72:ed:15:36:86:3d:b4:51:70:0f:b6:57:78:2f:
                    cc:d8:09:25:74:d9:d0:76:48:d7:1c:2d:82:17:0a:
                    f4:be:dd:94:82:d6:2a:cb:3b:37:8e:c4:db:0d:81:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:8D:C2:D1:5A:ED:01:57:25:5A:BB:A7:15:9D:F9:93:B3:76:6D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2e2739-708f-4738-85c4-4e929e96b43d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2e2739-708f-4738-85c4-4e929e96b43d/1/N8eNwtFa7QFXJVq7pxWd-ZOzdm0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:b8:22:a2:82:bb:38:d8:35:fa:0c:65:60:91:f9:1a:f0:
         95:c6:5e:a8:95:53:1c:53:12:d6:7e:77:34:ed:a1:77:26:df:
         63:1c:11:52:43:15:7d:2b:fb:7b:7a:c5:05:c4:e8:5a:34:9a:
         c6:ec:86:41:18:b3:33:0b:ac:5f:b0:c4:10:1d:07:5f:ad:85:
         27:7e:81:26:7c:d4:8d:cb:bc:dd:ee:47:4f:1d:66:97:72:bf:
         e5:c8:26:c6:3f:f6:02:ac:e5:1b:32:25:91:bb:33:e8:a5:1b:
         06:5b:1d:2c:33:a8:37:7d:f5:11:dc:33:5f:cd:8a:0b:d0:d9:
         ad:88:7a:26:42:ec:68:1d:4d:86:09:f5:04:a0:67:d7:96:df:
         76:76:24:27:d4:19:30:0f:ec:56:a5:cc:ce:fb:45:1c:3e:48:
         06:be:20:c1:4b:6c:ce:76:a4:33:e4:84:df:c2:1e:5f:65:28:
         c6:14:28:f3:89:dd:29:51:01:ec:38:11:53:42:5a:8b:47:c4:
         89:9d:17:52:35:5d:93:94:95:37:b4:53:68:2e:1c:4c:12:bf:
         aa:6f:09:01:52:1c:ab:de:15:bc:37:41:b7:be:43:b9:22:94:
         4a:be:27:c3:e3:73:e1:7a:96:2b:bf:1c:7b:09:17:20:d6:6c:
         09:99:f9:5c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAIOkjU/qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDcyMTEyWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzN2M3OGRjMmQx
NWFlZDAxNTcyNTVhYmJhNzE1OWRmOTkzYjM3NjZkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAroMIeuSdWmmMm25H6Vfh0II+fhagTdRqKxxOR31dxF75
jWuqDR9KhTPlHuyu5CtnpyYhiyRfARZaVVlUq8myRkUwJo4JRDDaCDuKTHv0Cr6E
oztgmTCkekxoKz/XVQW13BCbOhKIAigduocN9SzinNCP7D9gXmPgMSyQ99C9os6L
WIf1Bxh9hPInNMmK+O8J2xOMYjXXPo6HcXBEE8iqhlRpC/O1Ca0Tnzm9SR29xeW1
+SX9gbakYK8Rnqa2WD2EDRcukDeliCTH9iECnz64hVkScu0VNoY9tFFwD7ZXeC/M
2AkldNnQdkjXHC2CFwr0vt2UgtYqyzs3jsTbDYECswIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDfHjcLRWu0BVyVau6cVnfmTs3ZtMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzJlMjczOS03MDhmLTQ3Mzgt
ODVjNC00ZTkyOWU5NmI0M2QvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMmUyNzM5LTcwOGYtNDczOC04
NWM0LTRlOTI5ZTk2YjQzZC8xL044ZU53dEZhN1FGWEpWcTdweFdkLVpPemRtMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZ44MA0GCSqGSIb3DQEBCwUAA4IBAQCL5bgiooK7ONg1+gxlYJH5
GvCVxl6olVMcUxLWfnc07aF3Jt9jHBFSQxV9K/t7esUFxOhaNJrG7IZBGLMzC6xf
sMQQHQdfrYUnfoEmfNSNy7zd7kdPHWaXcr/lyCbGP/YCrOUbMiWRuzPopRsGWx0s
M6g3ffUR3DNfzYoL0NmtiHomQuxoHU2GCfUEoGfXlt92diQn1BkwD+xWpczO+0Uc
PkgGviDBS2zOdqQz5ITfwh5fZSjGFCjzid0pUQHsOBFTQlqLR8SJnRdSNV2TlJU3
tFNoLhxMEr+qbwkBUhyr3hW8N0G3vkO5IpRKvifD43PhepYrvxx7CRcg1mwJmflc
-----END CERTIFICATE-----