Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Bjper0WqxsjUYm32WAOXeWz4-U.cer
File:                     1-Bjper0WqxsjUYm32WAOXeWz4-U.cer (raw, json)
Hash identifier:          d/ITrxuGfT1Qp5G6245dfom7+RUrE3wusMAHUYJGkMY=
Subject key identifier:   F8:18:E9:7A:BD:16:AB:1B:23:51:89:B7:D9:60:0E:5D:E5:B3:E3:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7D531D365E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/89cddf-493a-4a4d-b05f-8e6356e119b4/1/1-Bjper0WqxsjUYm32WAOXeWz4-U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/89cddf-493a-4a4d-b05f-8e6356e119b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:24:31 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 31.12.92.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538265335390 (0x7d531d365e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:24:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f818e97abd16ab1b235189b7d9600e5de5b3e3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:97:94:75:af:36:30:3c:8b:54:be:09:a0:
                    c1:2f:6c:91:09:7b:7d:2a:5e:a5:1c:91:fb:1b:1e:
                    eb:cc:4f:45:0d:d9:dd:d4:dc:fd:28:a0:ac:ae:1f:
                    3e:92:88:b9:73:0c:96:1c:a7:5c:c2:6b:9a:50:cf:
                    39:84:c7:b1:d7:15:35:db:39:a0:4b:5d:f4:20:ac:
                    09:1f:84:38:be:c5:22:24:67:a1:98:9b:a2:98:80:
                    8d:8d:8f:f8:34:f2:4d:d9:93:6f:70:2b:ea:84:e8:
                    69:6d:0d:60:e2:12:68:5a:37:92:72:0a:03:c1:d9:
                    8d:fb:72:06:93:08:2e:73:9c:d4:33:49:10:a6:db:
                    63:00:6b:75:cb:35:00:f5:02:bf:07:3d:d9:0f:78:
                    85:04:49:c7:f4:12:5e:c7:d2:b6:fc:91:ae:dc:1d:
                    c4:31:7a:2c:9c:8d:9d:ff:1d:c0:cb:cb:b2:7c:ad:
                    11:1c:6b:e5:97:d0:d5:c9:96:e2:bd:b2:1f:da:e3:
                    2c:f7:ee:80:57:93:e9:87:f6:13:21:55:44:3e:88:
                    f3:93:4b:e6:fb:d7:96:51:41:66:04:c6:92:a8:26:
                    c8:eb:83:3b:64:de:7f:28:40:1e:c6:7d:8f:86:cf:
                    1d:e7:fa:80:e6:aa:cd:a4:4a:aa:f8:19:f6:9d:d0:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:E9:7A:BD:16:AB:1B:23:51:89:B7:D9:60:0E:5D:E5:B3:E3:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/89cddf-493a-4a4d-b05f-8e6356e119b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/89cddf-493a-4a4d-b05f-8e6356e119b4/1/1-Bjper0WqxsjUYm32WAOXeWz4-U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.12.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:2f:cf:c0:aa:0b:fc:23:82:a0:12:73:5e:ab:64:30:b0:
         c6:68:14:0a:3b:45:79:84:be:dc:e8:63:21:73:93:9f:1b:49:
         e0:2f:6d:6b:c1:95:92:24:2f:33:d1:0f:32:e8:53:c1:d5:cd:
         7b:31:04:37:ce:0c:d0:0d:2b:c0:26:ae:d7:93:ff:ac:c3:20:
         69:50:8e:51:74:2f:41:19:b2:bd:2d:f0:8d:b8:49:49:57:19:
         67:5e:f6:5d:d8:39:8b:02:ce:ed:de:a5:f9:6f:43:ff:f9:3c:
         98:6f:3c:a2:09:9f:04:3a:b8:2e:17:db:51:e4:7f:8f:eb:dc:
         c9:85:0c:89:ca:1e:55:19:3c:3a:a0:b2:a9:fc:4b:bb:99:fd:
         01:49:89:b5:02:f8:fd:dd:49:15:d1:a6:85:2b:03:42:7b:21:
         d2:03:f9:25:69:dc:39:ec:61:e3:9d:8c:9e:8f:6b:7b:e2:7c:
         02:11:cc:da:ac:c1:f5:b1:ec:df:c9:67:00:89:28:ab:0f:55:
         b7:f2:9c:30:a4:57:8b:86:9e:52:dc:1f:19:f2:00:8e:06:3c:
         aa:dc:b2:bf:3a:4d:bf:de:6d:aa:d5:b8:43:97:80:4f:86:80:
         91:6d:bd:d4:3f:f9:0e:9a:45:c1:29:e2:91:f6:0e:16:3c:1f:
         98:77:3c:78
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIFfVMdNl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzI0MzFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY4MThlOTdhYmQx
NmFiMWIyMzUxODliN2Q5NjAwZTVkZTViM2UzZTUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa3ZeUda82MDyLVL4JoMEvbJEJe30qXqUckfsbHuvMT0UN
2d3U3P0ooKyuHz6SiLlzDJYcp1zCa5pQzzmEx7HXFTXbOaBLXfQgrAkfhDi+xSIk
Z6GYm6KYgI2Nj/g08k3Zk29wK+qE6GltDWDiEmhaN5JyCgPB2Y37cgaTCC5znNQz
SRCm22MAa3XLNQD1Ar8HPdkPeIUEScf0El7H0rb8ka7cHcQxeiycjZ3/HcDLy7J8
rREca+WX0NXJluK9sh/a4yz37oBXk+mH9hMhVUQ+iPOTS+b715ZRQWYExpKoJsjr
gztk3n8oQB7GfY+Gzx3n+oDmqs2kSqr4Gfad0O/FAgMBAAGjggKFMIICgTAdBgNV
HQ4EFgQU+Bjper0WqxsjUYm32WAOXeWz4+UwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASQGCCsGAQUFBwELBIIBFjCCARIwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvODljZGRmLTQ5M2EtNGE0ZC1i
MDVmLThlNjM1NmUxMTliNC8xLzB9BggrBgEFBQcwCoZxcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84OWNkZGYtNDkzYS00YTRkLWIw
NWYtOGU2MzU2ZTExOWI0LzEvMS1CanBlcjBXcXhzalVZbTMyV0FPWGVXejQtVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCHwxcMA0GCSqGSIb3DQEBCwUAA4IBAQASai/PwKoL/COCoBJzXqtk
MLDGaBQKO0V5hL7c6GMhc5OfG0ngL21rwZWSJC8z0Q8y6FPB1c17MQQ3zgzQDSvA
Jq7Xk/+swyBpUI5RdC9BGbK9LfCNuElJVxlnXvZd2DmLAs7t3qX5b0P/+TyYbzyi
CZ8EOrguF9tR5H+P69zJhQyJyh5VGTw6oLKp/Eu7mf0BSYm1Avj93UkV0aaFKwNC
eyHSA/kladw57GHjnYyej2t74nwCEczarMH1sezfyWcAiSirD1W38pwwpFeLhp5S
3B8Z8gCOBjyq3LK/Ok2/3m2q1bhDl4BPhoCRbb3UP/kOmkXBKeKR9g4WPB+Ydzx4
-----END CERTIFICATE-----