Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1sF1waGCdwwHcMLO2oT8xRxMFqs.cer
File:                     1sF1waGCdwwHcMLO2oT8xRxMFqs.cer (raw, json)
Hash identifier:          bb3jqbZlOQPGzSAsQXXD4rDhoC1aV+VNnpIRL2VEBJk=
Subject key identifier:   D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B2EBF85C55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 08 Jun 2022 11:57:10 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 62.3.55.0/24
                          IP: 2a13:2c00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768463101013 (0xb2ebf85c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  8 11:57:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6c175c1a182770c0770c2ceda84fcc51c4c16ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:0d:27:8b:48:6b:02:49:b8:ff:d1:e4:fb:
                    3d:ed:5d:6f:83:34:ef:07:2f:cd:98:0e:d8:77:5b:
                    ea:4b:75:52:25:c2:45:b2:04:de:ca:5a:9e:bc:41:
                    25:2e:76:e9:a9:7d:36:77:b8:51:6f:f2:1a:d2:62:
                    42:fe:94:1f:04:a0:f2:bd:32:54:e1:3c:03:0e:c5:
                    f0:eb:1c:ce:73:a0:62:94:3c:07:44:cb:a2:6e:dc:
                    c6:88:b6:bb:c3:0e:e9:e0:f9:81:f4:4e:e5:15:f0:
                    b3:d1:5b:33:5c:87:b1:48:08:b4:f1:ab:04:9c:59:
                    b7:98:8b:60:08:67:27:ec:8b:15:51:76:69:9c:36:
                    13:e9:89:08:fd:b9:77:25:66:6f:48:7a:ed:f5:f2:
                    4b:41:ef:6a:11:45:b9:ca:5f:0d:cc:9d:2a:8e:e4:
                    25:9c:cd:fd:6f:76:64:df:50:cb:17:f6:43:e5:fd:
                    db:36:44:df:72:6d:dc:db:c9:1d:bc:1b:e8:50:94:
                    c5:fd:53:53:c5:60:fc:7f:f0:60:a8:b4:15:9e:c4:
                    3a:51:10:4b:ef:51:fd:74:00:28:66:42:10:69:2b:
                    1a:e9:af:1b:c7:2a:c6:4b:7b:eb:5c:00:05:7b:ad:
                    5d:bf:e0:c9:6d:ae:05:76:ed:7d:dc:7a:3c:b7:63:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.55.0/24
                IPv6:
                  2a13:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:91:39:fa:2a:91:f3:ce:45:be:50:5a:de:a7:23:72:c0:
         d9:ea:e9:c2:0b:72:12:85:37:f9:29:81:71:64:38:da:55:85:
         55:1b:b9:15:bd:6a:e2:bf:04:12:fe:e5:c3:00:6f:e8:96:0c:
         e4:cc:14:1e:b8:fd:88:52:c7:75:14:bd:19:c9:f9:23:28:c6:
         25:27:c7:b6:1c:f8:6f:a4:a2:2c:4c:81:0f:bc:50:cb:da:70:
         3a:a8:d9:72:e2:8c:8c:31:82:34:0d:6f:90:0d:7c:72:da:ef:
         76:2b:b6:bf:ac:63:4f:3f:e7:32:ea:41:d5:c3:1a:86:74:76:
         d1:52:da:9c:01:48:c7:c2:80:1e:03:65:b4:d3:1e:56:e2:91:
         9e:f9:8c:b0:8c:3e:38:00:5f:b2:c7:9a:17:20:19:a7:ff:c5:
         cd:37:94:43:2a:01:c2:24:80:56:bd:f6:f4:f3:70:20:02:05:
         08:7b:a3:42:95:21:2e:63:95:cc:70:11:a1:a1:66:4c:89:c4:
         09:b2:74:92:14:27:5b:7d:88:37:9f:ee:78:84:8c:f0:3d:37:
         80:c1:8b:d8:3e:74:2b:df:f1:20:fd:92:65:3b:27:ec:e2:55:
         e9:86:29:a4:e2:77:67:de:76:0a:a7:54:e4:42:2b:bc:a3:bc:
         c1:5c:1f:11
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGALLr+FxVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjA4MTE1NzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNmMxNzVjMWEx
ODI3NzBjMDc3MGMyY2VkYTg0ZmNjNTFjNGMxNmFiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAw2UNJ4tIawJJuP/R5Ps97V1vgzTvBy/NmA7Yd1vqS3VS
JcJFsgTeylqevEElLnbpqX02d7hRb/Ia0mJC/pQfBKDyvTJU4TwDDsXw6xzOc6Bi
lDwHRMuibtzGiLa7ww7p4PmB9E7lFfCz0VszXIexSAi08asEnFm3mItgCGcn7IsV
UXZpnDYT6YkI/bl3JWZvSHrt9fJLQe9qEUW5yl8NzJ0qjuQlnM39b3Zk31DLF/ZD
5f3bNkTfcm3c28kdvBvoUJTF/VNTxWD8f/BgqLQVnsQ6URBL71H9dAAoZkIQaSsa
6a8bxyrGS3vrXAAFe61dv+DJba4Fdu193Ho8t2OXCQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFNbBdcGhgncMB3DCztqE/MUcTBarMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzFmZWFlMy0wMGI5LTQxNTct
OTQ3OC02ODYyNjc3OTc3OTMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMWZlYWUzLTAwYjktNDE1Ny05
NDc4LTY4NjI2Nzc5Nzc5My8xLzFzRjF3YUdDZHd3SGNNTE8yb1Q4eFJ4TUZxcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAPgM3MA0EAgACMAcDBQMqEywAMA0GCSqGSIb3DQEBCwUAA4IBAQCs
i5E5+iqR885FvlBa3qcjcsDZ6unCC3IShTf5KYFxZDjaVYVVG7kVvWrivwQS/uXD
AG/olgzkzBQeuP2IUsd1FL0ZyfkjKMYlJ8e2HPhvpKIsTIEPvFDL2nA6qNly4oyM
MYI0DW+QDXxy2u92K7a/rGNPP+cy6kHVwxqGdHbRUtqcAUjHwoAeA2W00x5W4pGe
+YywjD44AF+yx5oXIBmn/8XNN5RDKgHCJIBWvfb083AgAgUIe6NClSEuY5XMcBGh
oWZMicQJsnSSFCdbfYg3n+54hIzwPTeAwYvYPnQr3/Eg/ZJlOyfs4lXphimk4ndn
3nYKp1TkQiu8o7zBXB8R
-----END CERTIFICATE-----