Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ep-d5H_vO4H5vmdzxdLf7BwiRw.cer
File:                     0ep-d5H_vO4H5vmdzxdLf7BwiRw.cer (raw, json)
Hash identifier:          61UPR7k5WRBiWV709swNe9+0yC9YOaTKOY3CUp2ZhN8=
Subject key identifier:   D1:EA:7E:77:91:FF:BC:EE:07:E6:F9:9D:CF:17:4B:7F:B0:70:89:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7E255BE5DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/b8ea8a-0e74-4ce1-8809-b74e0e22951f/1/0ep-d5H_vO4H5vmdzxdLf7BwiRw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/b8ea8a-0e74-4ce1-8809-b74e0e22951f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:44:22 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.159.128.0/22
                          IP: 2a0f:7680::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541792658908 (0x7e255be5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:44:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d1ea7e7791ffbcee07e6f99dcf174b7fb070891c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:43:bf:a8:65:07:4e:9a:d9:b1:95:79:40:
                    5f:58:99:7c:9b:e8:aa:a2:83:16:5a:cb:52:61:a5:
                    e5:75:39:86:ba:1f:90:06:d4:3f:a9:5f:59:ff:98:
                    f3:f9:91:fe:2b:b0:8a:2e:a1:03:38:90:d8:ec:cb:
                    f0:e7:d2:34:82:8c:f6:52:80:8c:46:1a:ff:20:36:
                    98:58:73:e9:84:69:07:ba:77:a8:51:20:49:b0:ff:
                    71:77:6b:55:35:8f:0d:11:57:2f:ec:e4:31:2d:fe:
                    13:e9:8b:44:3a:10:ea:05:00:70:21:5e:84:cf:8a:
                    1d:49:dc:a0:5d:ba:af:a9:3e:51:d0:bc:22:21:09:
                    7b:ec:f7:8a:67:a5:fe:97:82:9a:ea:dc:05:43:ea:
                    0c:6d:16:67:eb:48:df:01:81:71:ab:ff:dd:9f:a4:
                    d8:07:41:5d:4d:a2:a4:cd:1d:06:37:a6:a0:bd:31:
                    7e:6a:3e:4d:69:b5:43:ee:67:3a:6b:b4:7a:d7:7d:
                    a6:5d:8b:ff:a9:c1:bb:4e:76:26:a7:82:88:59:d5:
                    a8:2d:63:55:0e:3e:e5:77:d1:ff:34:73:67:f3:12:
                    48:33:e1:c1:60:71:59:dc:89:fa:30:bf:4a:cc:8b:
                    ed:91:54:5a:e6:0f:6b:96:3e:78:7f:32:8f:83:d2:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EA:7E:77:91:FF:BC:EE:07:E6:F9:9D:CF:17:4B:7F:B0:70:89:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8ea8a-0e74-4ce1-8809-b74e0e22951f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8ea8a-0e74-4ce1-8809-b74e0e22951f/1/0ep-d5H_vO4H5vmdzxdLf7BwiRw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.128.0/22
                IPv6:
                  2a0f:7680::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:ff:c6:3b:88:4c:5f:d2:6c:c9:73:03:e8:b5:53:5c:33:1c:
         36:cc:0f:69:b6:58:82:27:ec:9e:6e:71:7c:1e:16:dc:28:8c:
         0e:5b:eb:1d:47:3e:b8:e1:aa:8b:8f:a1:84:7d:fb:ba:9d:e2:
         6b:8f:1e:d3:f5:82:c0:25:7b:2e:c8:c7:07:7d:78:5f:c7:1e:
         69:c0:42:b1:60:f2:8a:f8:16:4a:4b:b1:f9:84:4e:0c:6e:16:
         77:ec:c0:52:61:9c:88:09:ce:f4:c8:a2:14:96:cf:cd:d7:43:
         3d:bb:67:78:d7:2b:89:f1:98:de:cd:3f:af:89:5a:d8:0b:3c:
         67:68:eb:b7:a2:f2:8c:48:74:07:13:12:03:2f:c6:b0:e2:fb:
         fc:9d:31:f1:ae:a4:41:23:6e:db:79:85:c9:68:e1:b6:a0:20:
         74:a4:a0:71:d9:69:30:f4:c6:c4:93:92:b0:27:8c:c3:5d:6b:
         e9:49:e7:27:36:1c:c6:32:2c:82:ca:36:7b:86:36:fd:40:e7:
         ce:c3:55:1c:8a:20:e2:02:ca:61:a5:65:dd:14:66:78:37:fc:
         b7:39:91:74:86:73:ea:66:3e:64:54:a2:c8:89:17:64:ab:78:
         89:9b:5c:18:2f:73:de:5b:9b:19:4e:64:80:74:45:ee:a9:c6:
         cc:b3:4a:45
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFfiVb5dwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzQ0MjJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQxZWE3ZTc3OTFm
ZmJjZWUwN2U2Zjk5ZGNmMTc0YjdmYjA3MDg5MWMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsUEO/qGUHTprZsZV5QF9YmXyb6KqigxZay1JhpeV1OYa6
H5AG1D+pX1n/mPP5kf4rsIouoQM4kNjsy/Dn0jSCjPZSgIxGGv8gNphYc+mEaQe6
d6hRIEmw/3F3a1U1jw0RVy/s5DEt/hPpi0Q6EOoFAHAhXoTPih1J3KBduq+pPlHQ
vCIhCXvs94pnpf6Xgprq3AVD6gxtFmfrSN8BgXGr/92fpNgHQV1NoqTNHQY3pqC9
MX5qPk1ptUPuZzprtHrXfaZdi/+pwbtOdiangohZ1agtY1UOPuV30f80c2fzEkgz
4cFgcVncifowv0rMi+2RVFrmD2uWPnh/Mo+D0taNAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU0ep+d5H/vO4H5vmdzxdLf7BwiRwwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYjhlYThhLTBlNzQtNGNlMS04
ODA5LWI3NGUwZTIyOTUxZi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iOGVhOGEtMGU3NC00Y2UxLTg4
MDktYjc0ZTBlMjI5NTFmLzEvMGVwLWQ1SF92TzRINXZtZHp4ZExmN0J3aVJ3Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAItn4AwDQQCAAIwBwMFAyoPdoAwDQYJKoZIhvcNAQELBQADggEBAAP/
xjuITF/SbMlzA+i1U1wzHDbMD2m2WIIn7J5ucXweFtwojA5b6x1HPrjhqouPoYR9
+7qd4muPHtP1gsAley7Ixwd9eF/HHmnAQrFg8or4FkpLsfmETgxuFnfswFJhnIgJ
zvTIohSWz83XQz27Z3jXK4nxmN7NP6+JWtgLPGdo67ei8oxIdAcTEgMvxrDi+/yd
MfGupEEjbtt5hclo4bagIHSkoHHZaTD0xsSTkrAnjMNda+lJ5yc2HMYyLILKNnuG
Nv1A587DVRyKIOICymGlZd0UZng3/Lc5kXSGc+pmPmRUosiJF2SreImbXBgvc95b
mxlOZIB0Re6pxsyzSkU=
-----END CERTIFICATE-----