Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37FBkIPLMbFRLO0wRcAOIE8hTjY.cer
File:                     37FBkIPLMbFRLO0wRcAOIE8hTjY.cer (raw, json)
Hash identifier:          Od0zp5RL+CloGfvg/j7kS4M/OLrWtFTkgqPKavIud2M=
Subject key identifier:   DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9FA7917AEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:04:03 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.5.170.0 -- 194.5.174.255

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685711129322 (0x9fa7917aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:04:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfb1419083cb31b1512ced3045c00e204f214e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:09:aa:47:51:28:2e:df:40:2f:c0:f0:45:
                    e4:00:6e:c3:61:a1:6b:76:7f:33:b4:d2:14:3e:fc:
                    94:40:be:81:be:58:5d:05:e8:41:5d:08:da:a7:bd:
                    82:16:a7:45:14:82:f3:5d:b8:2e:93:6c:1c:73:0a:
                    b9:d8:ad:0a:83:f6:0d:dd:4b:35:e9:0e:96:da:86:
                    14:99:ad:0f:c2:ca:24:00:ce:d0:b6:c4:bf:81:0a:
                    8d:cb:3d:c8:8e:83:23:6d:c5:62:02:3c:c1:d5:15:
                    2a:a1:e8:81:98:86:35:77:1b:14:1d:e6:7f:d1:ca:
                    41:d8:a7:6b:d4:5b:2b:55:e2:2c:2d:f7:b5:d3:56:
                    d1:7e:f7:db:75:3c:8b:de:b8:8f:a8:d4:28:3b:fb:
                    06:8b:15:dc:1d:4e:5b:e0:9e:fc:d6:19:23:64:c7:
                    34:29:cf:f2:b8:38:d5:13:a7:c0:42:82:2e:d0:ba:
                    d0:ee:36:37:52:77:e6:c9:58:dc:01:11:d5:e8:bd:
                    aa:70:6d:69:18:ca:66:a7:f3:3c:75:26:31:a1:38:
                    19:60:c0:54:14:ea:c5:9c:fc:b5:03:72:82:cc:9a:
                    72:70:c5:61:0a:f0:c4:20:4f:53:c6:70:83:61:07:
                    b5:92:79:62:75:bb:fc:ee:fe:9e:4a:a9:e3:d4:dd:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B1:41:90:83:CB:31:B1:51:2C:ED:30:45:C0:0E:20:4F:21:4E:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/37f6bc-d680-4e10-9125-928073904606/1/37FBkIPLMbFRLO0wRcAOIE8hTjY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.170.0-194.5.174.255

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:af:72:be:e2:75:65:1c:70:a6:c5:ec:2a:2c:17:18:19:
         34:fc:e2:88:72:93:5c:65:14:3b:e9:b5:76:58:35:2e:a1:bc:
         aa:94:a9:46:ab:4a:62:04:61:35:f6:2e:87:1d:ae:1b:26:f4:
         c9:77:36:78:04:29:35:e8:e8:7c:bb:e6:62:f8:91:ff:ed:68:
         5f:76:07:e9:a3:3e:30:51:89:f7:2d:50:81:14:26:61:57:3a:
         c8:4c:bf:28:76:a6:29:04:32:40:81:74:49:f3:01:e9:e2:9f:
         8f:bc:6e:84:93:b7:be:08:86:d6:4e:b2:ab:1a:f3:d4:22:90:
         9c:70:88:78:4c:08:4b:87:03:07:f6:f1:fa:27:42:bd:16:48:
         5a:e9:99:2a:e2:90:4d:bb:e0:17:3a:11:00:5c:64:6f:d8:68:
         b8:bf:98:ae:83:79:d4:d2:0d:9b:3d:b2:37:18:04:78:9b:4a:
         04:57:61:aa:09:c6:f6:58:04:a4:59:91:1c:ae:94:4c:7f:a3:
         f1:6c:a6:90:fc:c1:8e:7c:79:41:e3:28:ba:94:1d:61:fd:01:
         a2:df:d8:91:1a:2e:20:78:ba:fe:0e:21:b9:a7:5d:1e:da:42:
         73:67:ed:a7:be:2a:15:61:e0:ec:3d:d2:2f:f9:33:cf:0d:0c:
         d2:09:17:f0
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIGAJ+nkXrqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDYwNDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkZmIxNDE5MDgz
Y2IzMWIxNTEyY2VkMzA0NWMwMGUyMDRmMjE0ZTM2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAn38JqkdRKC7fQC/A8EXkAG7DYaFrdn8ztNIUPvyUQL6B
vlhdBehBXQjap72CFqdFFILzXbguk2wccwq52K0Kg/YN3Us16Q6W2oYUma0Pwsok
AM7QtsS/gQqNyz3IjoMjbcViAjzB1RUqoeiBmIY1dxsUHeZ/0cpB2Kdr1FsrVeIs
Lfe101bRfvfbdTyL3riPqNQoO/sGixXcHU5b4J781hkjZMc0Kc/yuDjVE6fAQoIu
0LrQ7jY3UnfmyVjcARHV6L2qcG1pGMpmp/M8dSYxoTgZYMBUFOrFnPy1A3KCzJpy
cMVhCvDEIE9TxnCDYQe1knlidbv87v6eSqnj1N2yiQIDAQABo4ICjDCCAogwHQYD
VR0OBBYEFN+xQZCDyzGxUSztMEXADiBPIU42MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzM3ZjZiYy1kNjgwLTRlMTAt
OTEyNS05MjgwNzM5MDQ2MDYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMzdmNmJjLWQ2ODAtNGUxMC05
MTI1LTkyODA3MzkwNDYwNi8xLzM3RkJrSVBMTWJGUkxPMHdSY0FPSUU4aFRqWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAHCBaoDBADCBa4wDQYJKoZIhvcNAQELBQADggEBAFL+r3K+4nVl
HHCmxewqLBcYGTT84ohyk1xlFDvptXZYNS6hvKqUqUarSmIEYTX2Locdrhsm9Ml3
NngEKTXo6Hy75mL4kf/taF92B+mjPjBRifctUIEUJmFXOshMvyh2pikEMkCBdEnz
Aenin4+8boSTt74IhtZOsqsa89QikJxwiHhMCEuHAwf28fonQr0WSFrpmSrikE27
4Bc6EQBcZG/YaLi/mK6DedTSDZs9sjcYBHibSgRXYaoJxvZYBKRZkRyulEx/o/Fs
ppD8wY58eUHjKLqUHWH9AaLf2JEaLiB4uv4OIbmnXR7aQnNn7ae+KhVh4Ow90i/5
M88NDNIJF/A=
-----END CERTIFICATE-----