Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-AKnbon1A3mAPb6xv2qODNETnhk.cer
File:                     1-AKnbon1A3mAPb6xv2qODNETnhk.cer (raw, json)
Hash identifier:          kJ7GWYt7nbzs9kiE/RvKo9Z8k8RbCgHg9udrMSkqRr0=
Subject key identifier:   F8:02:A7:6E:89:F5:03:79:80:3D:BE:B1:BF:6A:8E:0C:D1:13:9E:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7D2FEE67A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/269efc-f95c-48dc-aa1e-3d2275ee52a7/1/1-AKnbon1A3mAPb6xv2qODNETnhk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/269efc-f95c-48dc-aa1e-3d2275ee52a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:20:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 31518
                          IP: 194.113.141.0/24
                          IP: 2001:67c:4a0::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537675065257 (0x7d2fee67a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:20:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f802a76e89f50379803dbeb1bf6a8e0cd1139e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:e9:77:2e:c8:d7:20:4a:7d:f6:d0:bb:76:
                    5c:4e:17:88:10:eb:66:cb:48:fd:b4:98:83:ee:a0:
                    28:a2:f7:37:21:34:a6:d7:5c:03:09:4b:99:44:34:
                    8b:e1:e9:be:84:28:a6:73:d8:8f:a7:8b:b1:6a:47:
                    20:ef:02:47:69:3f:6a:86:27:af:82:0b:d4:81:56:
                    a2:a9:c7:14:04:12:44:24:87:94:63:9d:65:aa:b6:
                    84:c6:e3:bf:43:11:be:f4:2c:c4:d5:36:3d:ed:4c:
                    8c:56:31:78:57:35:07:bc:59:86:74:b6:95:dd:e8:
                    81:b6:d0:52:e6:8b:13:9f:52:57:89:17:93:03:2f:
                    29:d7:0a:fb:9d:ea:2b:74:92:65:48:61:bc:5b:93:
                    20:e9:32:2e:d5:3c:2f:86:a9:db:1b:4d:00:48:67:
                    8d:80:5f:68:3a:04:db:7a:09:24:8b:c7:7f:e6:bf:
                    bd:b9:e4:d2:22:d0:f8:4f:de:0d:24:8c:12:40:19:
                    83:fc:b9:cd:81:05:81:42:a4:70:dc:dc:3a:9c:50:
                    d0:e3:0b:1a:c9:10:2c:12:87:48:ab:34:62:e0:7a:
                    af:1e:2f:a3:e8:40:32:c1:f8:48:50:6f:46:01:64:
                    06:96:73:5a:92:c1:ac:96:2d:c9:6d:76:64:74:8b:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:A7:6E:89:F5:03:79:80:3D:BE:B1:BF:6A:8E:0C:D1:13:9E:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/269efc-f95c-48dc-aa1e-3d2275ee52a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/269efc-f95c-48dc-aa1e-3d2275ee52a7/1/1-AKnbon1A3mAPb6xv2qODNETnhk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.141.0/24
                IPv6:
                  2001:67c:4a0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31518

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:e7:9d:30:d3:80:d6:a5:f9:f8:5c:97:b0:19:59:a5:0f:
         b6:3d:2a:22:20:41:bf:92:1e:41:6d:6f:3e:8b:b8:b0:72:25:
         04:2c:be:16:f0:0a:35:54:72:5a:db:e6:12:70:42:79:c7:bf:
         e1:d1:2c:29:2e:dd:4a:16:90:65:08:2f:3e:05:20:0b:7a:14:
         53:9b:f1:ec:6c:77:e3:2c:40:fe:fc:1f:1b:05:9f:54:c7:b0:
         e0:0f:62:14:f3:0a:64:ba:91:e9:64:d0:55:5d:77:ed:6a:a7:
         6f:6e:e8:f8:de:1a:30:f7:db:72:98:41:4b:56:0a:10:03:52:
         c0:56:8f:91:34:b4:08:70:7c:22:22:0e:2a:81:1e:a5:ee:87:
         d4:59:67:37:c4:46:56:ba:3f:9a:88:7d:15:bf:84:76:c9:a9:
         f1:27:ca:77:3c:a0:20:02:ea:95:48:48:b6:fa:a1:09:28:ca:
         69:ab:66:22:4b:d0:34:c7:c5:66:e2:ef:12:e0:5a:bd:d9:dd:
         5c:fe:92:f3:94:24:d0:77:f4:cb:6d:16:1e:75:58:f1:85:09:
         df:d2:2b:13:50:bc:7b:c6:4e:e7:a9:6b:5d:24:12:1f:d0:8b:
         8e:94:39:d6:d0:ee:6e:0f:a9:92:85:f5:63:29:ba:7a:c6:47:
         05:f3:5c:61
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIFfS/uZ6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzIwNDdaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY4MDJhNzZlODlm
NTAzNzk4MDNkYmViMWJmNmE4ZTBjZDExMzllMTkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCloel3LsjXIEp99tC7dlxOF4gQ62bLSP20mIPuoCii9zch
NKbXXAMJS5lENIvh6b6EKKZz2I+ni7FqRyDvAkdpP2qGJ6+CC9SBVqKpxxQEEkQk
h5RjnWWqtoTG479DEb70LMTVNj3tTIxWMXhXNQe8WYZ0tpXd6IG20FLmixOfUleJ
F5MDLynXCvud6it0kmVIYbxbkyDpMi7VPC+GqdsbTQBIZ42AX2g6BNt6CSSLx3/m
v7255NIi0PhP3g0kjBJAGYP8uc2BBYFCpHDc3DqcUNDjCxrJECwSh0irNGLgeq8e
L6PoQDLB+EhQb0YBZAaWc1qSwayWLcltdmR0i4/TAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+AKnbon1A3mAPb6xv2qODNETnhkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASQGCCsGAQUFBwELBIIBFjCCARIwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMjY5ZWZjLWY5NWMtNDhkYy1h
YTFlLTNkMjI3NWVlNTJhNy8xLzB9BggrBgEFBQcwCoZxcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yNjllZmMtZjk1Yy00OGRjLWFh
MWUtM2QyMjc1ZWU1MmE3LzEvMS1BS25ib24xQTNtQVBiNnh2MnFPRE5FVG5oay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAwnGNMA8EAgACMAkDBwAgAQZ8BKAwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICex4wDQYJKoZIhvcNAQELBQADggEBAFXu550w04DWpfn4XJewGVmlD7Y9
KiIgQb+SHkFtbz6LuLByJQQsvhbwCjVUclrb5hJwQnnHv+HRLCku3UoWkGUILz4F
IAt6FFOb8exsd+MsQP78HxsFn1THsOAPYhTzCmS6kelk0FVdd+1qp29u6PjeGjD3
23KYQUtWChADUsBWj5E0tAhwfCIiDiqBHqXuh9RZZzfERla6P5qIfRW/hHbJqfEn
ync8oCAC6pVISLb6oQkoymmrZiJL0DTHxWbi7xLgWr3Z3Vz+kvOUJNB39MttFh51
WPGFCd/SKxNQvHvGTuepa10kEh/Qi46UOdbQ7m4PqZKF9WMpunrGRwXzXGE=
-----END CERTIFICATE-----