Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1U-SyoR_t_drWxBr4_cwsXug7Hc.cer
File:                     1U-SyoR_t_drWxBr4_cwsXug7Hc.cer (raw, json)
Hash identifier:          JcMcNWYCeZgox9J2/mJocDpI6wXmWKlsNaomhlAzs2w=
Subject key identifier:   D5:4F:92:CA:84:7F:B7:F7:6B:5B:10:6B:E3:F7:30:B1:7B:A0:EC:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7FA4246711
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/c375b0-e9f4-49e9-b295-fc8bf62fa48d/1/1U-SyoR_t_drWxBr4_cwsXug7Hc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/c375b0-e9f4-49e9-b295-fc8bf62fa48d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:24:48 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 147.78.196.0/22
                          IP: 2a0e:2c00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548214695697 (0x7fa4246711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:24:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d54f92ca847fb7f76b5b106be3f730b17ba0ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:1a:8e:e4:ba:d3:bf:00:ce:b2:37:eb:c4:
                    e2:ad:da:03:5f:57:62:0f:ab:92:9a:f2:65:a0:22:
                    18:7a:e8:41:1c:fc:f7:7b:fa:53:39:a7:f1:c7:d6:
                    92:97:08:c1:78:f7:ff:9a:60:d2:82:2d:a3:3a:c5:
                    24:70:21:05:39:c5:c1:3b:9e:5b:56:37:07:b9:03:
                    8b:5b:dd:1a:88:d9:e8:21:4f:1a:9c:53:2a:54:56:
                    66:ca:48:5b:47:a1:76:39:ce:cf:9e:e4:ef:ac:bc:
                    68:1e:74:f2:93:17:ee:75:a8:05:7a:20:39:73:65:
                    54:4f:af:1e:97:f6:fa:2e:66:01:b6:0f:ba:6b:99:
                    02:34:3c:bf:1e:ac:33:f0:bb:b9:15:b5:5d:23:ab:
                    25:5b:a1:21:5f:e5:4c:1a:c8:ca:f5:e8:97:3e:65:
                    86:a1:3a:6c:cd:8a:c7:06:cf:2c:21:d0:82:70:7a:
                    c4:f6:73:90:7f:c8:4c:41:e0:80:fb:c7:fa:bf:72:
                    60:e6:07:21:fd:45:b6:a6:a1:72:8b:cd:79:33:dc:
                    dd:77:e3:b8:81:c6:38:2a:76:92:e1:aa:a5:52:ab:
                    17:78:11:ec:f0:f9:1a:68:54:8b:90:8f:00:05:9f:
                    c2:27:fd:9f:f0:a2:e3:8f:6f:bd:13:09:28:ae:9b:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:92:CA:84:7F:B7:F7:6B:5B:10:6B:E3:F7:30:B1:7B:A0:EC:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c375b0-e9f4-49e9-b295-fc8bf62fa48d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c375b0-e9f4-49e9-b295-fc8bf62fa48d/1/1U-SyoR_t_drWxBr4_cwsXug7Hc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.196.0/22
                IPv6:
                  2a0e:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:7c:0d:74:08:19:c6:0d:77:f8:0e:2d:cd:02:90:65:c8:
         79:2f:2d:e0:a5:80:24:cb:78:f4:7c:54:e0:c6:05:0a:43:be:
         f7:ea:8e:db:10:b1:3d:3f:71:a8:91:6a:40:6c:c5:87:d0:93:
         8e:7a:6f:c0:ad:12:08:9d:96:85:a4:dd:43:05:5f:ef:d0:0b:
         e0:21:74:66:43:1a:59:24:45:c8:56:68:0e:75:9c:0d:77:47:
         81:0c:1a:25:d5:c6:21:5e:90:57:fe:ec:a7:f4:ac:1a:6f:29:
         02:9d:3f:26:fa:e7:a0:39:ea:a0:e6:77:48:a1:ff:67:1b:bf:
         23:9c:f6:fc:32:02:6e:19:52:10:c7:41:88:97:1f:17:22:1c:
         b0:d6:7b:8f:3f:5d:37:8d:5a:10:d4:09:31:e7:6a:c8:71:87:
         7c:85:6b:da:9c:56:7a:0b:d0:c4:6d:fb:e8:90:9e:13:31:84:
         ab:f9:10:78:44:2f:b5:1e:df:b2:b4:ba:87:0f:21:45:37:4d:
         f6:1a:ee:62:35:33:f6:5d:3c:26:1d:e7:7e:6f:7f:3e:4d:15:
         78:44:56:0b:35:08:af:9a:d1:8c:fa:33:65:cc:d6:fa:8b:79:
         68:7b:b3:50:2d:29:b3:93:79:a4:e7:ee:9f:ae:c5:17:71:09:
         1f:d1:68:d9
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFf6QkZxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDI0NDhaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ1NGY5MmNhODQ3
ZmI3Zjc2YjViMTA2YmUzZjczMGIxN2JhMGVjNzcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQComRqO5LrTvwDOsjfrxOKt2gNfV2IPq5Ka8mWgIhh66EEc
/Pd7+lM5p/HH1pKXCMF49/+aYNKCLaM6xSRwIQU5xcE7nltWNwe5A4tb3RqI2egh
TxqcUypUVmbKSFtHoXY5zs+e5O+svGgedPKTF+51qAV6IDlzZVRPrx6X9vouZgG2
D7prmQI0PL8erDPwu7kVtV0jqyVboSFf5UwayMr16Jc+ZYahOmzNiscGzywh0IJw
esT2c5B/yExB4ID7x/q/cmDmByH9RbamoXKLzXkz3N1347iBxjgqdpLhqqVSqxd4
Eezw+RpoVIuQjwAFn8In/Z/wouOPb70TCSium6cPAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU1U+SyoR/t/drWxBr4/cwsXug7HcwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvYzM3NWIwLWU5ZjQtNDllOS1i
Mjk1LWZjOGJmNjJmYTQ4ZC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jMzc1YjAtZTlmNC00OWU5LWIy
OTUtZmM4YmY2MmZhNDhkLzEvMVUtU3lvUl90X2RyV3hCcjRfY3dzWHVnN0hjLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAKTTsQwDQQCAAIwBwMFAyoOLAAwDQYJKoZIhvcNAQELBQADggEBAAp2
fA10CBnGDXf4Di3NApBlyHkvLeClgCTLePR8VODGBQpDvvfqjtsQsT0/caiRakBs
xYfQk456b8CtEgidloWk3UMFX+/QC+AhdGZDGlkkRchWaA51nA13R4EMGiXVxiFe
kFf+7Kf0rBpvKQKdPyb656A56qDmd0ih/2cbvyOc9vwyAm4ZUhDHQYiXHxciHLDW
e48/XTeNWhDUCTHnashxh3yFa9qcVnoL0MRt++iQnhMxhKv5EHhEL7Ue37K0uocP
IUU3TfYa7mI1M/ZdPCYd535vfz5NFXhEVgs1CK+a0Yz6M2XM1vqLeWh7s1AtKbOT
eaTn7p+uxRdxCR/RaNk=
-----END CERTIFICATE-----