Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-HmNe_BHQZM3S26cYbn8mm1ZJDA.cer
File:                     1-HmNe_BHQZM3S26cYbn8mm1ZJDA.cer (raw, json)
Hash identifier:          MbRU3z1X2RYZqFVmKL5ih14Dj2hgmec0wbQ1i4UJOrY=
Subject key identifier:   F8:79:8D:7B:F0:47:41:93:37:4B:6E:9C:61:B9:FC:9A:6D:59:24:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81535E5EAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/7ce678-b958-4440-9ead-a688cb115b26/1/1-HmNe_BHQZM3S26cYbn8mm1ZJDA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/7ce678-b958-4440-9ead-a688cb115b26/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:21:37 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.140.8.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555449474733 (0x81535e5ead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:21:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f8798d7bf0474193374b6e9c61b9fc9a6d592430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:d9:c6:2b:b2:7f:68:07:cc:0c:73:87:6a:
                    e2:1e:90:c1:fb:84:9e:06:5e:34:d4:f7:26:65:b4:
                    9e:50:c2:fe:46:af:d1:65:cb:11:9b:21:b7:f3:79:
                    b2:3e:5d:5a:5c:ac:98:b8:1d:31:7f:1e:6e:3d:02:
                    2a:22:ad:fb:4e:d4:3a:c5:1d:39:22:6c:aa:f8:ac:
                    e6:b9:06:c1:4b:2a:b4:2c:c4:a7:70:40:80:c7:62:
                    8c:4f:f4:89:58:27:03:52:f2:93:56:b8:a5:2d:00:
                    0f:48:7f:6d:09:28:db:5e:89:98:f4:ae:aa:b0:76:
                    80:ab:f4:c7:98:9a:62:23:14:ca:e0:53:27:ae:48:
                    04:dd:39:44:f7:66:46:e0:f6:56:a4:d7:fb:5d:af:
                    e6:c8:63:ea:d1:89:bb:f9:1c:c5:3f:2f:73:39:14:
                    c8:82:25:8f:2e:8a:a1:3f:59:79:0f:77:ce:bc:07:
                    43:34:92:85:df:67:de:01:95:7e:4c:a0:c3:aa:45:
                    e1:cc:d5:96:3a:57:d7:db:0c:87:82:43:0d:35:6c:
                    89:9f:b9:0b:ac:2c:9f:f3:f2:4d:44:92:b5:c3:41:
                    0e:26:7b:54:21:b3:cf:27:4d:e4:96:87:ce:75:58:
                    96:86:5b:60:c2:e4:5d:0d:82:44:9f:0a:53:42:64:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:8D:7B:F0:47:41:93:37:4B:6E:9C:61:B9:FC:9A:6D:59:24:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7ce678-b958-4440-9ead-a688cb115b26/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7ce678-b958-4440-9ead-a688cb115b26/1/1-HmNe_BHQZM3S26cYbn8mm1ZJDA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:ed:9e:ca:71:f4:81:b5:b3:0a:36:ae:76:2b:09:aa:f3:
         49:5b:d1:0d:db:94:e3:03:ba:ff:9e:77:d3:f7:3c:48:b7:f2:
         80:cb:59:5b:66:dc:b2:ec:c3:4a:c4:7d:44:75:3c:2a:a8:4a:
         0f:c2:b5:39:a6:a2:25:02:48:3b:37:23:86:77:e5:5f:b6:f6:
         b0:bf:ad:89:6d:b1:75:e1:93:08:a9:34:60:34:9b:86:72:1c:
         07:40:af:63:b4:b7:40:11:96:38:56:61:6c:79:5b:ab:b8:2a:
         2c:7e:c1:4e:68:d3:d4:20:e6:4d:30:c2:56:64:1d:aa:37:64:
         ec:c9:ae:52:e1:83:d5:40:b1:dd:be:4f:55:89:8a:28:79:75:
         5e:f7:73:39:5a:e0:ab:97:1d:59:40:3b:63:7c:c1:e7:40:47:
         be:b9:ec:b3:82:5f:20:37:b0:77:e3:e9:6a:35:c9:e7:cd:f1:
         09:b4:5f:fe:9b:0f:12:bc:78:3a:54:03:71:cb:70:86:fc:24:
         fc:d4:30:7c:a8:52:f8:6c:2c:9e:a7:58:0f:01:f2:b3:11:25:
         ec:75:11:f3:0c:1d:77:c2:a9:e8:4a:a7:81:cc:5c:ae:34:0d:
         96:30:fc:fb:8f:f6:67:4a:29:d6:31:30:61:c3:6d:ed:22:e7:
         1a:bb:c1:0a
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIGAIFTXl6tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUyMTM3WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODc5OGQ3YmYw
NDc0MTkzMzc0YjZlOWM2MWI5ZmM5YTZkNTkyNDMwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAkoDZxiuyf2gHzAxzh2riHpDB+4SeBl401PcmZbSeUML+
Rq/RZcsRmyG383myPl1aXKyYuB0xfx5uPQIqIq37TtQ6xR05Imyq+KzmuQbBSyq0
LMSncECAx2KMT/SJWCcDUvKTVrilLQAPSH9tCSjbXomY9K6qsHaAq/THmJpiIxTK
4FMnrkgE3TlE92ZG4PZWpNf7Xa/myGPq0Ym7+RzFPy9zORTIgiWPLoqhP1l5D3fO
vAdDNJKF32feAZV+TKDDqkXhzNWWOlfX2wyHgkMNNWyJn7kLrCyf8/JNRJK1w0EO
JntUIbPPJ03klofOdViWhltgwuRdDYJEnwpTQmSNNwIDAQABo4IChTCCAoEwHQYD
VR0OBBYEFPh5jXvwR0GTN0tunGG5/JptWSQwMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzdjZTY3OC1iOTU4LTQ0NDAt
OWVhZC1hNjg4Y2IxMTViMjYvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvN2NlNjc4LWI5NTgtNDQ0MC05
ZWFkLWE2ODhjYjExNWIyNi8xLzEtSG1OZV9CSFFaTTNTMjZjWWJuOG1tMVpKREEu
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAi2MCDANBgkqhkiG9w0BAQsFAAOCAQEAshXtnspx9IG1swo2rnYr
CarzSVvRDduU4wO6/5530/c8SLfygMtZW2bcsuzDSsR9RHU8KqhKD8K1OaaiJQJI
OzcjhnflX7b2sL+tiW2xdeGTCKk0YDSbhnIcB0CvY7S3QBGWOFZhbHlbq7gqLH7B
TmjT1CDmTTDCVmQdqjdk7MmuUuGD1UCx3b5PVYmKKHl1XvdzOVrgq5cdWUA7Y3zB
50BHvrnss4JfIDewd+PpajXJ583xCbRf/psPErx4OlQDcctwhvwk/NQwfKhS+Gws
nqdYDwHysxEl7HUR8wwdd8Kp6EqngcxcrjQNljD8+4/2Z0op1jEwYcNt7SLnGrvB
Cg==
-----END CERTIFICATE-----