Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KHWvoNY-nrURnHFJnIyyeKPF4Q.cer
File:                     1-KHWvoNY-nrURnHFJnIyyeKPF4Q.cer (raw, json)
Hash identifier:          848a7DdFiG50cqquV0V42lCmoWbYbf2e6xJhWBHYBWg=
Subject key identifier:   F8:A1:D6:BE:83:58:FA:7A:D4:46:71:C5:26:72:32:C9:E2:8F:17:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7CD69DCC01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/532d07-a85e-4562-8265-2a24e94300b2/1/1-KHWvoNY-nrURnHFJnIyyeKPF4Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/532d07-a85e-4562-8265-2a24e94300b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:11:44 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.142.44.0/22
                          IP: 2a0e:d940::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536176610305 (0x7cd69dcc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:11:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f8a1d6be8358fa7ad44671c5267232c9e28f1784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:9a:ae:e2:20:21:02:66:8b:35:ea:9c:31:
                    94:2e:0b:53:08:aa:3c:ba:c1:1d:f8:f9:8a:fd:62:
                    6a:bc:cc:11:1c:15:38:b8:40:9e:56:ca:57:7a:18:
                    27:26:bb:7f:d0:9f:2e:00:8e:b5:e3:f8:c8:89:e9:
                    8b:d0:e7:70:b8:a7:12:84:43:a4:0f:5d:34:a2:0c:
                    cb:2d:05:4d:9e:55:62:15:fd:9b:1f:db:7f:77:1c:
                    ac:ed:19:3d:d3:88:f4:4e:09:d0:4d:2c:60:22:48:
                    62:84:79:70:80:93:21:e0:5d:ab:93:28:6d:1a:51:
                    71:49:07:70:8c:81:03:da:da:39:e9:48:00:40:55:
                    c1:9a:bd:97:7c:2a:af:83:9d:10:17:4f:f1:01:7a:
                    df:43:b4:6d:62:2a:1c:30:ae:d3:0b:f2:cf:46:30:
                    2c:bb:a6:a4:2e:bc:b2:7a:57:1e:31:b7:12:46:a9:
                    6d:bd:00:87:89:98:23:ca:34:39:a0:8f:0f:bc:74:
                    51:3d:62:9d:8e:d0:2b:f0:cc:0d:ad:96:be:c0:54:
                    98:95:ef:60:f9:b9:67:c2:41:9a:9d:07:77:d0:14:
                    d4:03:13:ad:51:c9:80:59:70:80:44:a9:34:0d:f7:
                    17:55:3d:2e:23:e2:16:49:3c:1a:db:d3:74:e4:ba:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:D6:BE:83:58:FA:7A:D4:46:71:C5:26:72:32:C9:E2:8F:17:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/532d07-a85e-4562-8265-2a24e94300b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/532d07-a85e-4562-8265-2a24e94300b2/1/1-KHWvoNY-nrURnHFJnIyyeKPF4Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.44.0/22
                IPv6:
                  2a0e:d940::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:a7:d8:f2:ab:21:31:27:9e:de:b5:ea:30:42:70:1d:58:
         92:3c:16:94:6a:ec:b8:c0:80:5d:e7:1d:48:9e:95:96:c4:49:
         e5:aa:e2:38:8c:64:76:43:82:7e:13:cc:43:0d:c7:43:d1:ab:
         f9:53:48:ab:44:2b:13:c6:e1:1f:71:9d:0e:9e:0a:63:2c:dd:
         95:02:73:c0:69:2a:12:ca:ff:12:42:40:ea:8c:28:69:a3:0e:
         99:7a:4a:47:9d:21:d4:7a:e9:34:87:b5:9f:ad:43:2a:67:d9:
         e7:cd:16:35:80:15:bb:0d:72:5d:e0:a6:c3:44:73:83:ba:ae:
         c4:5c:00:e7:ae:f9:84:27:cd:fc:47:02:f4:6a:81:c7:0c:bc:
         14:c0:fb:13:b1:2b:a0:8f:67:a5:bd:53:5c:99:8d:77:ff:47:
         50:3a:c1:84:41:2d:48:76:92:22:2b:ae:5a:7c:3e:96:5c:9c:
         22:27:4b:34:7f:76:52:68:72:64:53:b7:fc:45:24:95:e6:1c:
         0d:c2:7d:0f:44:b4:e5:9a:90:b3:db:82:29:4e:64:f0:08:07:
         e2:a0:ce:81:8f:54:8c:0f:48:8e:58:24:b0:63:54:71:54:d1:
         d3:5e:00:f5:f0:ad:a7:d9:65:dc:4d:7f:7f:02:2d:ec:d0:45:
         69:7b:92:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIFfNadzAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzExNDRaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY4YTFkNmJlODM1
OGZhN2FkNDQ2NzFjNTI2NzIzMmM5ZTI4ZjE3ODQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChRpqu4iAhAmaLNeqcMZQuC1MIqjy6wR34+Yr9Ymq8zBEc
FTi4QJ5Wyld6GCcmu3/Qny4AjrXj+MiJ6YvQ53C4pxKEQ6QPXTSiDMstBU2eVWIV
/Zsf2393HKztGT3TiPROCdBNLGAiSGKEeXCAkyHgXauTKG0aUXFJB3CMgQPa2jnp
SABAVcGavZd8Kq+DnRAXT/EBet9DtG1iKhwwrtML8s9GMCy7pqQuvLJ6Vx4xtxJG
qW29AIeJmCPKNDmgjw+8dFE9Yp2O0CvwzA2tlr7AVJiV72D5uWfCQZqdB3fQFNQD
E61RyYBZcIBEqTQN9xdVPS4j4hZJPBrb03TkutRBAgMBAAGjggKUMIICkDAdBgNV
HQ4EFgQU+KHWvoNY+nrURnHFJnIyyeKPF4QwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASQGCCsGAQUFBwELBIIBFjCCARIwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNTMyZDA3LWE4NWUtNDU2Mi04
MjY1LTJhMjRlOTQzMDBiMi8xLzB9BggrBgEFBQcwCoZxcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81MzJkMDctYTg1ZS00NTYyLTgy
NjUtMmEyNGU5NDMwMGIyLzEvMS1LSFd2b05ZLW5yVVJuSEZKbkl5eWVLUEY0US5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLY4sMA0EAgACMAcDBQMqDtlAMA0GCSqGSIb3DQEBCwUAA4IBAQAD
fKfY8qshMSee3rXqMEJwHViSPBaUauy4wIBd5x1InpWWxEnlquI4jGR2Q4J+E8xD
DcdD0av5U0irRCsTxuEfcZ0OngpjLN2VAnPAaSoSyv8SQkDqjChpow6ZekpHnSHU
euk0h7WfrUMqZ9nnzRY1gBW7DXJd4KbDRHODuq7EXADnrvmEJ838RwL0aoHHDLwU
wPsTsSugj2elvVNcmY13/0dQOsGEQS1IdpIiK65afD6WXJwiJ0s0f3ZSaHJkU7f8
RSSV5hwNwn0PRLTlmpCz24IpTmTwCAfioM6Bj1SMD0iOWCSwY1RxVNHTXgD18K2n
2WXcTX9/Ai3s0EVpe5Ik
-----END CERTIFICATE-----