Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1RCFx4n0paIEQEgn2VNnbIUmCmE.cer
File:                     1RCFx4n0paIEQEgn2VNnbIUmCmE.cer (raw, json)
Hash identifier:          Ig/tumqAqY//2iBtWXBGHD8wmIISRGfS4zYIjt8+VIQ=
Subject key identifier:   D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A510FC35B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 10:58:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 199634
                          IP: 176.57.72.0/21
                          IP: 185.8.124.0/22
                          IP: 2a02:d840::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708954568112 (0xa510fc35b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:58:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d51085c789f4a5a204404827d953676c85260a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:32:69:f5:9d:75:cb:64:b0:ba:6d:a3:96:
                    af:b7:34:b8:29:66:27:3f:97:4b:ac:f4:84:c6:14:
                    16:12:53:44:bd:e8:53:79:59:58:00:06:4b:b3:a4:
                    64:63:9c:b1:eb:93:67:07:dc:29:7e:cd:31:38:e7:
                    2b:f7:2f:34:e3:37:71:da:b9:25:dc:40:95:b8:20:
                    83:b0:bf:ac:d9:26:ea:11:1b:93:85:9d:81:30:77:
                    ed:00:3b:fe:38:7e:6c:fa:62:b7:db:17:24:76:dd:
                    e5:db:36:37:78:dd:17:0e:30:bd:0a:c3:a0:77:b0:
                    67:28:5c:07:c8:aa:32:00:6e:ae:39:25:99:9f:ce:
                    48:e9:11:fb:69:b5:9d:34:af:c6:3a:b5:33:b2:f5:
                    7b:b8:70:c3:e8:2d:0c:c3:35:45:67:f7:8f:4c:8f:
                    27:e7:05:3a:bb:8f:0e:b7:e6:96:c4:6b:b9:df:b4:
                    6c:08:e8:4a:3b:4d:f5:2d:d5:6d:a7:86:1c:cc:e0:
                    d9:e1:a8:72:e0:dc:e6:7d:d9:b7:c7:ff:d0:7f:08:
                    dd:1e:04:06:71:02:79:91:c0:e8:27:31:05:32:01:
                    42:44:d4:a6:e5:43:62:54:2f:7f:63:84:f3:38:1c:
                    a8:91:1e:d2:77:6e:af:ce:51:17:e1:2d:38:8c:ff:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.72.0/21
                  185.8.124.0/22
                IPv6:
                  2a02:d840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199634

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:91:9d:fd:6d:37:74:96:3e:58:1c:bb:84:fb:31:16:f0:
         87:f4:2c:e9:bf:72:85:cc:9c:49:89:20:43:03:44:69:0e:f5:
         a4:9b:87:80:14:df:f3:00:18:3f:af:27:00:02:ee:18:a5:ef:
         cf:7d:a7:18:ef:91:e3:70:63:f8:9c:eb:59:91:f0:a8:11:cf:
         82:a8:d1:4e:78:18:ae:de:5b:96:6e:16:6a:67:2d:cd:35:9d:
         3a:5f:b5:0d:28:d4:2d:9e:ea:a4:cc:ce:54:68:f1:b6:59:79:
         5d:e6:0e:a3:ce:63:d9:0f:a2:c6:f7:43:c1:14:74:ef:21:d8:
         ad:45:ff:7a:85:89:e6:99:60:9d:52:d1:9d:b6:bf:d9:f1:ec:
         1d:d7:bf:76:24:62:ce:b5:cc:db:2a:7f:69:a3:7f:cc:d1:5b:
         6d:e7:58:7e:46:92:8e:23:70:24:57:0e:50:94:12:c3:d7:e1:
         83:f5:2a:a7:9e:ff:a5:b3:5e:7a:93:10:67:bb:61:6c:7c:5e:
         f5:60:b9:35:f1:b4:35:ab:1c:69:4e:85:c6:8f:0a:d6:b3:46:
         a0:80:11:e4:0a:c1:40:13:b8:79:61:6c:63:e7:9e:aa:11:2b:
         25:f1:83:b8:2d:a3:f1:d0:3a:56:3a:90:62:72:5d:bc:da:3e:
         82:ef:a7:f1
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIGAKUQ/DWwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTA1ODAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNTEwODVjNzg5
ZjRhNWEyMDQ0MDQ4MjdkOTUzNjc2Yzg1MjYwYTYxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7OQyafWddctksLpto5avtzS4KWYnP5dLrPSExhQWElNE
vehTeVlYAAZLs6RkY5yx65NnB9wpfs0xOOcr9y804zdx2rkl3ECVuCCDsL+s2Sbq
ERuThZ2BMHftADv+OH5s+mK32xckdt3l2zY3eN0XDjC9CsOgd7BnKFwHyKoyAG6u
OSWZn85I6RH7abWdNK/GOrUzsvV7uHDD6C0MwzVFZ/ePTI8n5wU6u48Ot+aWxGu5
37RsCOhKO031LdVtp4YczODZ4ahy4Nzmfdm3x//QfwjdHgQGcQJ5kcDoJzEFMgFC
RNSm5UNiVC9/Y4TzOByokR7Sd26vzlEX4S04jP8UmQIDAQABo4ICtTCCArEwHQYD
VR0OBBYEFNUQhceJ9KWiBEBIJ9lTZ2yFJgphMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzM0MWI4Zi1iMWQ1LTRlZTQt
OWU3Ni0zYWQ5MmUyMWExNDQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMzQxYjhmLWIxZDUtNGVlNC05
ZTc2LTNhZDkyZTIxYTE0NC8xLzFSQ0Z4NG4wcGFJRVFFZ24yVk5uYklVbUNtRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQDsDlIAwQCuQh8MA0EAgACMAcDBQMqAthAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwML0jANBgkqhkiG9w0BAQsFAAOCAQEAHNqRnf1tN3SWPlgcu4T7
MRbwh/Qs6b9yhcycSYkgQwNEaQ71pJuHgBTf8wAYP68nAALuGKXvz32nGO+R43Bj
+JzrWZHwqBHPgqjRTngYrt5blm4WamctzTWdOl+1DSjULZ7qpMzOVGjxtll5XeYO
o85j2Q+ixvdDwRR07yHYrUX/eoWJ5plgnVLRnba/2fHsHde/diRizrXM2yp/aaN/
zNFbbedYfkaSjiNwJFcOUJQSw9fhg/Uqp57/pbNeepMQZ7thbHxe9WC5NfG0Nasc
aU6Fxo8K1rNGoIAR5ArBQBO4eWFsY+eeqhErJfGDuC2j8dA6VjqQYnJdvNo+gu+n
8Q==
-----END CERTIFICATE-----