Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-p0dk4jDmvs2ow_nraYRiWL-JY.cer
File:                     2-p0dk4jDmvs2ow_nraYRiWL-JY.cer (raw, json)
Hash identifier:          p/piOKeHvQlBYihRmg0YyET+maHFbrhgTaYwDwg8SIo=
Subject key identifier:   DB:EA:74:76:4E:23:0E:6B:EC:DA:8C:3F:9E:B6:98:46:25:8B:F8:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       826A9D5B73
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/32c882-346c-4b29-81de-d900db054f90/1/2-p0dk4jDmvs2ow_nraYRiWL-JY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/32c882-346c-4b29-81de-d900db054f90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:33:09 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.151.248.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560134445939 (0x826a9d5b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:33:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dbea74764e230e6becda8c3f9eb69846258bf896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:0a:f4:63:5b:7e:b9:c7:b9:21:3b:24:28:
                    34:b0:1b:97:12:1d:7e:e8:98:32:f4:4b:90:b2:1d:
                    90:fe:c0:04:c3:13:8c:bc:bf:1f:ab:65:d6:c6:34:
                    c9:27:53:fe:15:b5:5f:f6:78:d8:a2:8c:93:6b:d3:
                    c9:b6:39:39:98:77:89:8b:1b:12:8b:34:75:b3:0a:
                    41:90:f7:b8:29:0b:a4:2f:34:bb:33:6d:85:02:d4:
                    d9:47:64:b2:86:b3:e6:5c:f8:cb:d3:c0:55:8a:0f:
                    68:22:79:f4:98:71:3a:a3:ef:8c:8f:49:6a:fd:d5:
                    d1:00:95:72:32:87:07:47:5e:93:06:73:56:d5:01:
                    f6:58:ce:83:2c:ef:6a:50:aa:4d:8b:72:51:f1:f3:
                    1c:e2:ee:a5:25:16:f1:73:6d:1e:a9:81:0f:75:20:
                    1e:fe:dc:d1:56:7e:d3:fc:e1:2b:a8:c8:2d:31:1a:
                    ad:e4:79:5d:98:9e:d9:12:75:df:cf:4a:f1:d6:ba:
                    fd:b5:77:aa:1e:83:56:7a:cc:93:94:58:38:a7:e0:
                    b5:38:02:a2:56:b1:e4:66:ff:11:a5:be:92:70:97:
                    24:98:38:d6:8f:0a:7f:4e:95:af:da:4b:2f:c8:e5:
                    65:9e:2f:7f:da:6b:89:27:c2:4d:88:18:87:3e:c4:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:74:76:4E:23:0E:6B:EC:DA:8C:3F:9E:B6:98:46:25:8B:F8:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/32c882-346c-4b29-81de-d900db054f90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/32c882-346c-4b29-81de-d900db054f90/1/2-p0dk4jDmvs2ow_nraYRiWL-JY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:ea:5d:ff:62:87:1e:2b:77:7f:6d:c5:3e:44:8c:54:ff:
         a3:5a:1f:a2:1c:37:97:5d:c9:c2:f7:01:eb:90:41:b1:28:06:
         ac:21:2d:97:a3:39:e3:19:6d:ae:71:80:04:5d:e7:b4:e7:31:
         66:af:e3:fb:5b:12:0a:aa:a6:1f:8b:11:a5:77:89:14:c4:a6:
         e6:f6:e8:8e:8b:25:42:59:8b:ea:4f:ba:55:00:69:30:45:b5:
         56:58:e5:a0:74:28:61:4b:cf:64:8c:70:f1:3a:1e:10:a5:bd:
         e7:92:85:3b:b7:e9:6d:48:4c:3a:88:92:60:f3:46:7e:47:d6:
         85:e8:8d:5a:31:b0:47:55:d4:08:6a:fe:25:01:95:7c:e5:3e:
         ba:4d:bf:b5:1e:80:cc:0f:01:ad:d8:d8:e3:ea:bb:8b:f2:34:
         4a:23:4b:ea:9c:3c:b9:90:61:40:1f:dc:f5:25:bc:f6:d8:50:
         f5:ff:46:7b:48:60:ac:19:6f:69:6d:37:37:82:13:af:b8:b5:
         4a:0a:43:6b:87:a2:bc:6e:a4:33:fa:c5:c9:a9:15:4e:77:12:
         bb:31:2a:05:f2:3f:66:c0:7d:74:64:85:4f:ae:e0:20:7b:06:
         4c:14:22:9c:18:92:d8:b7:2a:a5:75:55:34:75:2f:71:1b:93:
         f6:7f:c3:f1
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAIJqnVtzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDYzMzA5WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYmVhNzQ3NjRl
MjMwZTZiZWNkYThjM2Y5ZWI2OTg0NjI1OGJmODk2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAy8QK9GNbfrnHuSE7JCg0sBuXEh1+6Jgy9EuQsh2Q/sAE
wxOMvL8fq2XWxjTJJ1P+FbVf9njYooyTa9PJtjk5mHeJixsSizR1swpBkPe4KQuk
LzS7M22FAtTZR2SyhrPmXPjL08BVig9oInn0mHE6o++Mj0lq/dXRAJVyMocHR16T
BnNW1QH2WM6DLO9qUKpNi3JR8fMc4u6lJRbxc20eqYEPdSAe/tzRVn7T/OErqMgt
MRqt5HldmJ7ZEnXfz0rx1rr9tXeqHoNWesyTlFg4p+C1OAKiVrHkZv8Rpb6ScJck
mDjWjwp/TpWv2ksvyOVlni9/2muJJ8JNiBiHPsRZ3QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFNvqdHZOIw5r7NqMP562mEYli/iWMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzMyYzg4Mi0zNDZjLTRiMjkt
ODFkZS1kOTAwZGIwNTRmOTAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMzJjODgyLTM0NmMtNGIyOS04
MWRlLWQ5MDBkYjA1NGY5MC8xLzItcDBkazRqRG12czJvd19ucmFZUmlXTC1KWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZf4MA0GCSqGSIb3DQEBCwUAA4IBAQAb7epd/2KHHit3f23FPkSM
VP+jWh+iHDeXXcnC9wHrkEGxKAasIS2XoznjGW2ucYAEXee05zFmr+P7WxIKqqYf
ixGld4kUxKbm9uiOiyVCWYvqT7pVAGkwRbVWWOWgdChhS89kjHDxOh4Qpb3nkoU7
t+ltSEw6iJJg80Z+R9aF6I1aMbBHVdQIav4lAZV85T66Tb+1HoDMDwGt2Njj6ruL
8jRKI0vqnDy5kGFAH9z1Jbz22FD1/0Z7SGCsGW9pbTc3ghOvuLVKCkNrh6K8bqQz
+sXJqRVOdxK7MSoF8j9mwH10ZIVPruAgewZMFCKcGJLYtyqldVU0dS9xG5P2f8Px
-----END CERTIFICATE-----