Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
File:                     _qyIuvk9wHodKaUNs9UFddMyx5k.cer (raw, json)
Hash identifier:          KasC/BQO+6DEsYMxXmCmPCCw1hy6xNZyqWN6+E8a6LU=
Subject key identifier:   FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708A4A40D93244C2CC3866D3B7CAC696
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:09 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.236.79.0/24
                          IP: 2a12:1980::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:4a:40:d9:32:44:c2:cc:38:66:d3:b7:ca:c6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=feac88baf93dc07a1d29a50db3d50575d332c799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:c2:3d:32:26:5d:44:d5:2a:eb:e2:7f:37:
                    25:13:98:4c:41:d8:57:79:8f:5e:68:18:01:b0:0b:
                    46:a2:f0:b5:69:53:5d:9e:1e:4b:c8:85:df:79:4d:
                    1c:95:8b:59:5b:08:ac:31:cd:7d:8a:3b:1d:83:61:
                    25:8a:9e:e2:49:e9:96:d1:b6:cd:ba:c5:5b:10:96:
                    f0:1d:8f:07:ac:7d:9d:ed:66:11:a4:35:a5:a8:7d:
                    fd:39:87:63:58:6d:db:97:97:5b:92:6d:5e:89:80:
                    dd:eb:16:34:04:fb:5e:05:ed:f5:fd:34:c1:ef:07:
                    f0:de:7f:a1:2a:df:ee:fd:f0:fe:2e:cd:aa:61:4b:
                    78:d7:5a:64:bd:13:2c:ba:f0:25:90:4b:b1:ed:82:
                    1f:20:fb:f9:62:ec:07:c5:88:fe:b1:ef:f0:7a:43:
                    d1:e6:8b:0c:e3:02:69:7b:01:fb:3b:e7:60:b0:d4:
                    a5:1d:39:e6:ff:42:50:07:da:44:da:74:57:7a:36:
                    3c:01:77:4b:dd:2a:a5:da:91:06:67:1b:98:b7:b9:
                    f1:b3:72:95:0b:39:ba:21:c6:f7:c5:51:01:4d:82:
                    5a:d6:25:5c:17:45:a5:e4:4b:d5:31:ec:52:62:9a:
                    a1:af:31:77:8d:92:1c:aa:46:bb:94:42:2c:55:a8:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.79.0/24
                IPv6:
                  2a12:1980::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:75:44:bc:11:c8:6f:b9:c1:f8:b5:23:f2:f3:f5:4c:67:
         72:dd:36:3f:74:f9:d6:a9:eb:d6:ee:af:0f:f4:56:ab:4e:65:
         68:50:f2:78:da:c9:51:32:30:8f:40:19:56:df:f3:87:aa:5b:
         25:88:74:31:4d:6e:f3:d5:ff:50:6b:11:33:cb:5d:ec:c8:52:
         10:83:f7:3f:24:3d:e9:16:5a:4e:87:55:56:f6:65:67:b2:57:
         c4:42:84:81:11:a3:e1:85:81:92:52:ca:68:cd:0e:66:60:f7:
         7e:3a:cb:ca:05:22:66:d2:a2:31:07:c9:f4:9d:25:0a:38:29:
         4e:d4:61:01:26:f9:64:d0:99:8e:c3:59:dd:89:9c:3b:6e:de:
         8c:d1:44:2a:a7:4d:41:30:04:b0:8b:9e:e1:6e:9a:12:75:af:
         f1:74:be:9a:6f:a9:16:e0:1c:d0:76:da:e7:11:c1:af:d0:4f:
         c7:86:36:00:b4:c0:11:bb:61:a3:bc:70:19:f2:d7:66:17:79:
         35:31:5f:29:fe:17:e2:ac:d8:69:3a:03:07:71:e1:ce:44:50:
         72:1f:80:f1:59:6c:36:55:df:af:05:2c:75:77:8b:e7:97:6f:
         ec:18:be:df:a1:7d:40:dd:5c:5b:3d:bc:6d:f1:ce:e2:21:91:
         3e:62:a8:08
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwikpA2TJEwsw4ZtO3ysaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWFjODhiYWY5M2RjMDdhMWQyOWE1MGRiM2Q1MDU3NWQzMzJjNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjDCPTImXUTVKuvifzclE5hMQdhX
eY9eaBgBsAtGovC1aVNdnh5LyIXfeU0clYtZWwisMc19ijsdg2Elip7iSemW0bbN
usVbEJbwHY8HrH2d7WYRpDWlqH39OYdjWG3bl5dbkm1eiYDd6xY0BPteBe31/TTB
7wfw3n+hKt/u/fD+Ls2qYUt411pkvRMsuvAlkEux7YIfIPv5YuwHxYj+se/wekPR
5osM4wJpewH7O+dgsNSlHTnm/0JQB9pE2nRXejY8AXdL3Sql2pEGZxuYt7nxs3KV
Czm6Icb3xVEBTYJa1iVcF0Wl5EvVMexSYpqhrzF3jZIcqka7lEIsVajLHQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFP6siLr5PcB6HSmlDbPVBXXTMseZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzYyYmEw
NC04YzAxLTQ4NDUtOTViYy1kMDcyOWQ5MGUyN2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjJiYTA0
LThjMDEtNDg0NS05NWJjLWQwNzI5ZDkwZTI3YS8xL19xeUl1dms5d0hvZEthVU5z
OVVGZGRNeXg1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW+xPMA0EAgACMAcDBQMqEhmAMA0GCSqGSIb3
DQEBCwUAA4IBAQBa+nVEvBHIb7nB+LUj8vP1TGdy3TY/dPnWqevW7q8P9FarTmVo
UPJ42slRMjCPQBlW3/OHqlsliHQxTW7z1f9QaxEzy13syFIQg/c/JD3pFlpOh1VW
9mVnslfEQoSBEaPhhYGSUspozQ5mYPd+OsvKBSJm0qIxB8n0nSUKOClO1GEBJvlk
0JmOw1ndiZw7bt6M0UQqp01BMASwi57hbpoSda/xdL6ab6kW4BzQdtrnEcGv0E/H
hjYAtMARu2GjvHAZ8tdmF3k1MV8p/hfirNhpOgMHceHORFByH4DxWWw2Vd+vBSx1
d4vnl2/sGL7foX1A3VxbPbxt8c7iIZE+YqgI
-----END CERTIFICATE-----