Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ijqedgCQaUDTTXbmoiRt6dlewY.cer
File:                     1ijqedgCQaUDTTXbmoiRt6dlewY.cer (raw, json)
Hash identifier:          9f2LyJ9FO8bSsEH6NtMj1vZb/yuJTvk4uinwwnYRr+M=
Subject key identifier:   D6:28:EA:79:D8:02:41:A5:03:4D:35:DB:9A:88:91:B7:A7:65:7B:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6C89679E89
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/44d011-227b-4a08-a91a-12056afb1761/1/1ijqedgCQaUDTTXbmoiRt6dlewY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/44d011-227b-4a08-a91a-12056afb1761/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 05 Jul 2020 17:42:49 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 83.171.224.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466161737353 (0x6c89679e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul  5 17:42:49 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d628ea79d80241a5034d35db9a8891b7a7657b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:61:c1:5f:e2:fb:6b:20:d3:df:d1:23:73:
                    c5:c1:e8:56:72:1f:3b:77:1b:b6:f5:43:ec:e8:35:
                    bd:47:d0:7a:f8:2b:d1:d3:8f:45:ff:0f:5a:2e:4f:
                    8c:dd:97:cf:86:fd:be:56:22:b7:ab:63:5d:3f:b7:
                    a4:41:cd:81:a3:cd:8d:7a:8e:3e:2d:96:45:49:73:
                    e4:d8:95:56:ad:c7:b9:7c:41:cb:b8:ae:e1:a5:b0:
                    65:c3:7a:a8:50:8e:06:68:ba:d8:db:65:e1:f5:92:
                    e7:32:a0:8d:1c:14:6b:b2:e1:55:23:76:50:d3:6f:
                    5a:52:72:39:23:ac:88:08:fe:9a:c1:23:3c:3b:b0:
                    a5:6f:08:ba:08:b8:08:ed:37:32:48:79:9d:12:63:
                    20:b8:31:de:2c:2d:0f:3c:4e:9a:4e:3b:4c:ad:48:
                    c3:de:8a:37:5f:80:1d:2e:fa:b3:51:73:b9:fc:f7:
                    c0:87:94:29:06:e0:e7:a1:d5:57:59:25:4f:82:9f:
                    67:6c:01:ef:96:23:d0:30:e3:69:41:d9:cc:d2:4f:
                    71:c9:19:9f:d2:ed:71:70:1c:ed:70:7f:c8:37:3b:
                    d4:33:cc:cf:fe:5e:32:54:90:ac:d7:fe:2f:75:96:
                    45:b0:39:04:64:23:c3:20:5f:a3:9e:e1:06:93:d5:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:EA:79:D8:02:41:A5:03:4D:35:DB:9A:88:91:B7:A7:65:7B:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/44d011-227b-4a08-a91a-12056afb1761/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/44d011-227b-4a08-a91a-12056afb1761/1/1ijqedgCQaUDTTXbmoiRt6dlewY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:8a:21:e1:49:7c:63:6f:40:b9:55:07:90:09:63:98:b0:
         d4:e5:01:53:a3:9b:cc:bd:59:01:fe:a3:ae:86:ec:55:e7:8d:
         38:fc:dd:02:a5:70:2a:5b:ec:8b:5f:ed:8a:d6:e2:7e:85:e4:
         b5:2a:de:8a:b1:3a:73:b1:a4:25:c5:50:66:84:6c:57:c9:53:
         33:80:91:2d:ce:24:41:43:6d:f9:70:bd:55:2c:08:80:c2:d6:
         6b:ba:59:ce:05:94:5c:9e:8d:d4:6f:97:43:93:12:d7:d6:48:
         55:1e:06:80:5c:df:f0:71:bc:df:14:d1:de:72:7c:b6:1a:99:
         b9:02:4d:e2:58:6b:d9:46:be:ee:61:cb:da:28:56:8f:a4:95:
         3b:5c:3a:e5:d4:69:17:f2:90:b1:3c:39:34:6b:f5:f3:30:a9:
         4a:8e:45:9d:97:43:56:f0:4a:04:92:4e:f2:1e:12:36:44:b2:
         6d:6d:e6:b5:68:26:57:20:8c:07:2d:dc:ce:3c:51:93:32:33:
         28:f2:be:f4:da:b0:8c:42:f2:98:0e:af:ca:2c:a9:a9:c4:05:
         0a:a8:b9:a0:f9:07:a5:62:b5:37:a2:f0:0b:f6:47:3a:58:94:
         d9:42:b8:0d:d8:a8:80:7a:37:bd:68:81:de:7a:ae:fc:b6:3a:
         37:7e:7b:3a
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFbIlnnokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDA3
MDUxNzQyNDlaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ2MjhlYTc5ZDgw
MjQxYTUwMzRkMzVkYjlhODg5MWI3YTc2NTdiMDYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMEGHBX+L7ayDT39Ejc8XB6FZyHzt3G7b1Q+zoNb1H0Hr4
K9HTj0X/D1ouT4zdl8+G/b5WIrerY10/t6RBzYGjzY16jj4tlkVJc+TYlVatx7l8
Qcu4ruGlsGXDeqhQjgZoutjbZeH1kucyoI0cFGuy4VUjdlDTb1pScjkjrIgI/prB
Izw7sKVvCLoIuAjtNzJIeZ0SYyC4Md4sLQ88TppOO0ytSMPeijdfgB0u+rNRc7n8
98CHlCkG4Oeh1VdZJU+Cn2dsAe+WI9Aw42lB2czST3HJGZ/S7XFwHO1wf8g3O9Qz
zM/+XjJUkKzX/i91lkWwOQRkI8MgX6Oe4QaT1ZrxAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU1ijqedgCQaUDTTXbmoiRt6dlewYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvNDRkMDExLTIyN2ItNGEwOC1h
OTFhLTEyMDU2YWZiMTc2MS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80NGQwMTEtMjI3Yi00YTA4LWE5
MWEtMTIwNTZhZmIxNzYxLzEvMWlqcWVkZ0NRYVVEVFRYYm1vaVJ0NmRsZXdZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJTq+AwDQYJKoZIhvcNAQELBQADggEBAFL+iiHhSXxjb0C5VQeQCWOY
sNTlAVOjm8y9WQH+o66G7FXnjTj83QKlcCpb7Itf7YrW4n6F5LUq3oqxOnOxpCXF
UGaEbFfJUzOAkS3OJEFDbflwvVUsCIDC1mu6Wc4FlFyejdRvl0OTEtfWSFUeBoBc
3/BxvN8U0d5yfLYambkCTeJYa9lGvu5hy9ooVo+klTtcOuXUaRfykLE8OTRr9fMw
qUqORZ2XQ1bwSgSSTvIeEjZEsm1t5rVoJlcgjAct3M48UZMyMyjyvvTasIxC8pgO
r8osqanEBQqouaD5B6VitTei8Av2RzpYlNlCuA3YqIB6N71ogd56rvy2Ojd+ezo=
-----END CERTIFICATE-----