Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-AcqNwuYLITUzcIbvhVPjJfql3Q.cer
File:                     1-AcqNwuYLITUzcIbvhVPjJfql3Q.cer (raw, json)
Hash identifier:          jwwSPdYYq5myM3RthCjcyri5lIrEzbcxaD2oa3RR+2Y=
Subject key identifier:   F8:07:2A:37:0B:98:2C:84:D4:CD:C2:1B:BE:15:4F:8C:97:EA:97:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7690F0A69A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/31588f-3da9-40b5-9b6d-c46340978737/1/1-AcqNwuYLITUzcIbvhVPjJfql3Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/31588f-3da9-40b5-9b6d-c46340978737/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:30:32 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.11.172.0/22
                          IP: 2a0e:9900::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509237831322 (0x7690f0a69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:30:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f8072a370b982c84d4cdc21bbe154f8c97ea9774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:18:39:65:61:cb:16:30:11:0f:61:a9:6c:
                    17:3e:23:13:7a:ce:e5:f4:69:0d:8f:cf:38:dc:ea:
                    a5:05:a2:fc:a9:03:85:54:2c:72:27:f1:46:56:2f:
                    5f:df:98:5b:97:82:96:6d:e4:59:4d:d2:b2:4a:72:
                    49:17:13:6a:29:02:34:3a:49:d1:75:ba:0a:e2:9f:
                    43:df:ef:01:1c:72:06:27:de:4a:c0:de:f3:15:f8:
                    c9:5b:48:f4:7d:c0:ac:81:a3:a1:55:ae:64:4f:67:
                    97:1b:24:ee:52:81:d1:b1:c1:98:09:50:41:40:4e:
                    50:ae:5c:6b:1c:40:f4:69:6f:08:2e:81:17:20:5f:
                    fb:ac:cd:90:87:94:d5:29:43:8e:b2:40:ef:60:77:
                    be:8a:30:0a:c0:26:6d:16:88:ac:df:4b:21:74:fd:
                    c4:68:40:4f:57:4d:53:71:70:55:86:c5:3e:71:a6:
                    6a:e2:06:c6:19:a3:e8:34:76:d9:d1:a3:2a:eb:17:
                    4e:7d:a4:fa:61:88:d7:e6:88:f9:66:10:e6:db:e0:
                    bc:d3:be:90:65:83:16:4d:63:89:7b:90:72:81:4a:
                    0b:45:dd:44:a6:43:65:0d:05:b8:fc:09:36:cc:ee:
                    e0:13:87:4b:aa:78:bb:f5:e4:bf:fa:82:02:6a:07:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:07:2A:37:0B:98:2C:84:D4:CD:C2:1B:BE:15:4F:8C:97:EA:97:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/31588f-3da9-40b5-9b6d-c46340978737/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/31588f-3da9-40b5-9b6d-c46340978737/1/1-AcqNwuYLITUzcIbvhVPjJfql3Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.172.0/22
                IPv6:
                  2a0e:9900::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:38:55:96:6f:46:a8:4b:fb:d9:50:19:1d:35:ee:b3:85:6f:
         9d:d2:93:17:5b:aa:26:e3:63:c1:97:6f:4e:14:d7:42:51:ba:
         93:d9:09:04:2e:fe:05:12:6d:06:eb:c9:54:8c:85:64:af:44:
         96:94:df:99:53:48:35:5b:0b:3c:1c:59:62:05:70:bf:90:02:
         c2:f3:bc:87:6d:89:79:60:cc:0e:89:f2:dc:9c:cd:44:62:d0:
         1e:ff:16:1c:5f:bd:ca:80:2d:6c:3d:b1:11:83:d9:9e:ba:2e:
         37:81:26:6d:ff:9a:6a:67:1e:a5:cb:dc:22:aa:72:fb:b2:65:
         80:03:7d:11:67:be:28:e7:28:2d:70:b5:23:1b:35:9f:c7:c6:
         df:de:3e:6e:02:fe:62:d1:8a:bd:c0:b3:ba:9c:07:1e:31:41:
         8e:55:b6:e5:15:c9:b7:64:c4:3c:bb:eb:0a:ec:5b:b1:0d:fa:
         27:ce:6d:30:38:f7:21:48:90:aa:83:b2:ce:f7:99:07:67:a3:
         2c:51:46:ce:7c:70:16:b2:d1:90:60:17:85:7a:62:71:fa:4a:
         be:93:ec:0a:f2:ef:02:23:03:7c:63:6b:c1:92:94:19:dd:e8:
         07:e6:3b:65:c2:67:85:0e:8d:83:3a:8a:c5:f6:d1:89:16:20:
         ee:58:85:fa
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIFdpDwppowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDMwMzJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY4MDcyYTM3MGI5
ODJjODRkNGNkYzIxYmJlMTU0ZjhjOTdlYTk3NzQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZqRg5ZWHLFjARD2GpbBc+IxN6zuX0aQ2Pzzjc6qUFovyp
A4VULHIn8UZWL1/fmFuXgpZt5FlN0rJKckkXE2opAjQ6SdF1ugrin0Pf7wEccgYn
3krA3vMV+MlbSPR9wKyBo6FVrmRPZ5cbJO5SgdGxwZgJUEFATlCuXGscQPRpbwgu
gRcgX/uszZCHlNUpQ46yQO9gd76KMArAJm0WiKzfSyF0/cRoQE9XTVNxcFWGxT5x
pmriBsYZo+g0dtnRoyrrF059pPphiNfmiPlmEObb4LzTvpBlgxZNY4l7kHKBSgtF
3USmQ2UNBbj8CTbM7uATh0uqeLv15L/6ggJqB0YNAgMBAAGjggKUMIICkDAdBgNV
HQ4EFgQU+AcqNwuYLITUzcIbvhVPjJfql3QwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASQGCCsGAQUFBwELBIIBFjCCARIwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMzE1ODhmLTNkYTktNDBiNS05
YjZkLWM0NjM0MDk3ODczNy8xLzB9BggrBgEFBQcwCoZxcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMTU4OGYtM2RhOS00MGI1LTli
NmQtYzQ2MzQwOTc4NzM3LzEvMS1BY3FOd3VZTElUVXpjSWJ2aFZQakpmcWwzUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLQusMA0EAgACMAcDBQMqDpkAMA0GCSqGSIb3DQEBCwUAA4IBAQBj
OFWWb0aoS/vZUBkdNe6zhW+d0pMXW6om42PBl29OFNdCUbqT2QkELv4FEm0G68lU
jIVkr0SWlN+ZU0g1Wws8HFliBXC/kALC87yHbYl5YMwOifLcnM1EYtAe/xYcX73K
gC1sPbERg9meui43gSZt/5pqZx6ly9wiqnL7smWAA30RZ74o5ygtcLUjGzWfx8bf
3j5uAv5i0Yq9wLO6nAceMUGOVbblFcm3ZMQ8u+sK7FuxDfonzm0wOPchSJCqg7LO
95kHZ6MsUUbOfHAWstGQYBeFemJx+kq+k+wK8u8CIwN8Y2vBkpQZ3egH5jtlwmeF
Do2DOorF9tGJFiDuWIX6
-----END CERTIFICATE-----