Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26ZN81fpoZhBgp-nyf_d_fcSta0.cer
File:                     26ZN81fpoZhBgp-nyf_d_fcSta0.cer (raw, json)
Hash identifier:          nZ7UEjETCORoNJB4b+iJfDgt2u9s4GxBR0XLuSpiUVQ=
Subject key identifier:   DB:A6:4D:F3:57:E9:A1:98:41:82:9F:A7:C9:FF:DD:FD:F7:12:B5:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8690C3B697
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/a46e1e-eb5c-4fec-a7c6-272269db84e6/1/26ZN81fpoZhBgp-nyf_d_fcSta0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/a46e1e-eb5c-4fec-a7c6-272269db84e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 15 Feb 2021 19:10:30 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.136.104.0/22
                          IP: 2a05:100::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577954363031 (0x8690c3b697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 15 19:10:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dba64df357e9a19841829fa7c9ffddfdf712b5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:36:45:10:7c:68:c3:52:25:2e:16:f9:13:
                    30:c0:b5:1c:96:56:27:10:98:f7:12:32:45:d6:6b:
                    43:29:7f:30:aa:3b:39:ef:4c:65:12:1a:1d:44:5a:
                    8f:de:2f:61:ca:ee:31:a5:bc:13:70:26:85:c7:0c:
                    66:6e:e9:a4:cf:3a:5b:d3:1f:17:23:ca:6c:c3:56:
                    6d:6b:72:15:c7:3a:b0:dc:79:4e:dd:82:0c:c5:f1:
                    bb:4a:b7:e0:b7:e9:02:7d:ac:39:07:d7:68:91:9a:
                    ac:2f:a4:9a:06:e5:24:aa:6c:3d:c0:51:7a:38:ed:
                    f0:fa:f4:1f:44:e4:51:8e:0e:76:a1:af:6a:f8:f4:
                    e0:6a:08:37:79:6a:00:59:92:dc:01:d6:c6:f2:5e:
                    18:98:d6:a1:ea:9e:6a:9a:fd:2c:e3:1f:4d:0c:fd:
                    f1:c4:4e:d2:75:b8:a6:6e:74:40:25:63:17:36:4a:
                    11:95:53:3e:2e:40:13:62:06:a5:b4:d5:aa:30:e3:
                    c7:fe:64:1e:cd:a4:20:0b:35:d8:2d:e2:40:bc:ed:
                    54:87:7e:7f:5c:c5:95:2c:a4:08:c7:47:42:b1:4a:
                    8a:b0:90:56:2c:f0:69:dd:47:5a:2a:f6:df:66:bb:
                    aa:52:cd:0d:62:c2:87:0e:14:a4:c1:42:a9:e8:08:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:4D:F3:57:E9:A1:98:41:82:9F:A7:C9:FF:DD:FD:F7:12:B5:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a46e1e-eb5c-4fec-a7c6-272269db84e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a46e1e-eb5c-4fec-a7c6-272269db84e6/1/26ZN81fpoZhBgp-nyf_d_fcSta0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.104.0/22
                IPv6:
                  2a05:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:d5:aa:74:99:c0:27:a9:0f:51:a2:05:a6:0e:17:58:32:
         02:32:c9:f4:fa:6a:5d:9f:ea:6d:f8:4f:a8:f4:a9:8a:e8:d5:
         f0:a7:22:9d:3a:de:b1:de:32:37:1b:49:e0:5d:a4:0c:13:8d:
         ca:9b:64:72:65:01:b2:51:ea:1c:e1:17:12:a1:54:e3:39:82:
         23:81:10:9a:24:83:57:9b:ea:43:3f:e5:d3:1b:86:04:6f:68:
         ef:6f:46:d8:be:6a:59:35:53:ec:62:c6:9e:e3:01:13:3d:77:
         1c:82:1b:bb:c3:7a:9b:81:77:cc:51:34:9d:a2:77:ff:32:f7:
         fe:56:17:1b:85:28:60:fd:a9:18:97:c6:f2:f1:38:d1:6b:d0:
         35:5b:0f:d4:8c:4e:3d:e9:1e:92:5b:02:98:13:79:a0:37:b9:
         32:22:36:f9:5e:12:bd:b7:85:eb:c3:25:33:5a:f0:7b:91:bf:
         08:ea:02:41:a7:4a:5c:bb:39:5d:39:0f:65:4b:86:89:2e:31:
         a3:d2:bd:5c:e5:0b:38:cb:37:07:9c:6e:9e:c1:32:9c:74:97:
         3a:ea:55:d2:3a:ce:14:64:2c:78:dc:33:2b:3e:a8:e4:e1:63:
         e6:ea:40:a1:d0:59:c9:f4:bf:df:98:c1:10:51:50:10:74:b0:
         b0:38:43:5f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAIaQw7aXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MjE1MTkxMDMwWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYmE2NGRmMzU3
ZTlhMTk4NDE4MjlmYTdjOWZmZGRmZGY3MTJiNWFkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA00Y2RRB8aMNSJS4W+RMwwLUcllYnEJj3EjJF1mtDKX8w
qjs570xlEhodRFqP3i9hyu4xpbwTcCaFxwxmbumkzzpb0x8XI8psw1Zta3IVxzqw
3HlO3YIMxfG7Srfgt+kCfaw5B9dokZqsL6SaBuUkqmw9wFF6OO3w+vQfRORRjg52
oa9q+PTgagg3eWoAWZLcAdbG8l4YmNah6p5qmv0s4x9NDP3xxE7SdbimbnRAJWMX
NkoRlVM+LkATYgaltNWqMOPH/mQezaQgCzXYLeJAvO1Uh35/XMWVLKQIx0dCsUqK
sJBWLPBp3UdaKvbfZruqUs0NYsKHDhSkwUKp6AhXSwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFNumTfNX6aGYQYKfp8n/3f33ErWtMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2E0NmUxZS1lYjVjLTRmZWMt
YTdjNi0yNzIyNjlkYjg0ZTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYTQ2ZTFlLWViNWMtNGZlYy1h
N2M2LTI3MjI2OWRiODRlNi8xLzI2Wk44MWZwb1poQmdwLW55Zl9kX2ZjU3RhMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLYhoMA0EAgACMAcDBQMqBQEAMA0GCSqGSIb3DQEBCwUAA4IBAQBL
wNWqdJnAJ6kPUaIFpg4XWDICMsn0+mpdn+pt+E+o9KmK6NXwpyKdOt6x3jI3G0ng
XaQME43Km2RyZQGyUeoc4RcSoVTjOYIjgRCaJINXm+pDP+XTG4YEb2jvb0bYvmpZ
NVPsYsae4wETPXccghu7w3qbgXfMUTSdonf/Mvf+VhcbhShg/akYl8by8TjRa9A1
Ww/UjE496R6SWwKYE3mgN7kyIjb5XhK9t4XrwyUzWvB7kb8I6gJBp0pcuzldOQ9l
S4aJLjGj0r1c5Qs4yzcHnG6ewTKcdJc66lXSOs4UZCx43DMrPqjk4WPm6kCh0FnJ
9L/fmMEQUVAQdLCwOENf
-----END CERTIFICATE-----