Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3SOJzIll7c0m-Q_oIqlTxNidbCk.cer
File:                     3SOJzIll7c0m-Q_oIqlTxNidbCk.cer (raw, json)
Hash identifier:          LfUG+x06RK5bdx/uD0oCcDPXkXtX6Cy+wVB1r7m75kk=
Subject key identifier:   DD:23:89:CC:89:65:ED:CD:26:F9:0F:E8:22:A9:53:C4:D8:9D:6C:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       60DFD684B3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/54ab69-a2a8-4ef4-b37b-357786e1c532/1/3SOJzIll7c0m-Q_oIqlTxNidbCk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/54ab69-a2a8-4ef4-b37b-357786e1c532/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:21:27 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 56934
                          IP: 2a04:d6c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416072238259 (0x60dfd684b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:21:27 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=dd2389cc8965edcd26f90fe822a953c4d89d6c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:26:96:66:64:7f:0d:3c:2f:bd:84:65:fc:
                    65:aa:f8:b1:49:8e:7c:d1:93:af:53:b0:42:7e:29:
                    46:64:45:f1:6f:70:79:00:16:a9:32:9a:0d:3f:96:
                    2a:de:38:06:56:08:79:cd:db:62:75:ee:75:7d:23:
                    f4:bb:7d:09:7e:f5:e0:38:f4:21:1e:fd:f7:a8:a2:
                    89:44:6e:18:8a:c1:3a:ab:97:f4:1a:b2:a5:6d:2e:
                    48:75:36:eb:c8:fb:76:8a:5b:03:c9:bd:fe:c0:99:
                    ce:2e:45:03:32:c9:c1:4f:92:61:2f:6f:a5:a6:49:
                    af:0b:06:98:82:fb:b1:7c:0c:32:00:67:a7:2a:1f:
                    45:05:88:40:74:2f:0e:64:e3:2f:8c:7e:28:ea:cf:
                    91:37:34:80:31:e2:ab:32:1d:43:53:d6:fe:b6:8a:
                    76:b8:0d:f0:1e:81:57:df:1f:a9:d5:6f:02:8e:4c:
                    69:e9:e5:7c:23:dc:5c:0c:93:eb:d3:99:31:e5:8a:
                    83:65:98:e1:a7:82:85:ee:c2:ad:83:7b:cc:41:e3:
                    43:1e:f8:54:d8:3a:1b:53:9d:52:3c:80:ff:45:67:
                    9b:04:43:2c:f4:b2:1e:19:41:f0:a6:22:e7:26:6d:
                    0c:a8:f5:7e:92:47:14:55:a0:e2:63:83:bb:95:7f:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:23:89:CC:89:65:ED:CD:26:F9:0F:E8:22:A9:53:C4:D8:9D:6C:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/54ab69-a2a8-4ef4-b37b-357786e1c532/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/54ab69-a2a8-4ef4-b37b-357786e1c532/1/3SOJzIll7c0m-Q_oIqlTxNidbCk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:d6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56934

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:50:55:20:20:fa:3c:ce:47:a6:8b:95:9c:c0:9b:01:17:
         6d:07:81:31:17:ff:1e:fa:c3:a9:66:f1:6b:05:4b:10:7f:96:
         54:79:d4:0b:db:42:06:ee:7a:51:19:bd:c1:66:b1:00:68:ec:
         9a:4e:bc:27:37:65:06:27:20:65:36:eb:fe:7a:d5:e4:6e:e9:
         7a:ae:65:7a:e8:fa:03:06:47:63:99:3b:e3:44:c9:c7:71:03:
         ae:1a:85:7c:1a:79:a2:50:29:9f:f2:2f:f1:50:ed:bc:de:99:
         6e:2f:7b:d7:bd:e2:81:df:77:a8:ba:5c:6f:4d:86:22:e1:d8:
         02:70:d1:24:0e:e7:c3:ff:98:2e:4c:57:23:56:1c:f3:0a:fa:
         46:32:15:0d:c3:02:93:d4:50:12:fc:25:62:b2:a3:ee:d6:cb:
         dc:29:2c:11:a5:8f:f6:e7:66:3a:c9:4d:70:74:f0:78:67:53:
         01:db:c0:2a:93:d3:9f:74:11:1a:06:02:cf:79:c6:21:3d:76:
         d9:d2:ed:39:2c:b3:5b:08:79:73:0a:59:2a:d4:d7:93:df:22:
         a4:73:08:cb:9a:8c:b0:9d:4d:ee:18:5f:c5:6a:bf:1d:55:3b:
         5d:1e:d6:64:43:4f:2b:da:16:3e:7f:2c:6b:83:54:dd:3d:c7:
         67:bb:0d:89
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIFYN/WhLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTIxMjdaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRkMjM4OWNjODk2
NWVkY2QyNmY5MGZlODIyYTk1M2M0ZDg5ZDZjMjkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE+iaWZmR/DTwvvYRl/GWq+LFJjnzRk69TsEJ+KUZkRfFv
cHkAFqkymg0/lireOAZWCHnN22J17nV9I/S7fQl+9eA49CEe/feooolEbhiKwTqr
l/QasqVtLkh1NuvI+3aKWwPJvf7Amc4uRQMyycFPkmEvb6WmSa8LBpiC+7F8DDIA
Z6cqH0UFiEB0Lw5k4y+Mfijqz5E3NIAx4qsyHUNT1v62ina4DfAegVffH6nVbwKO
TGnp5Xwj3FwMk+vTmTHlioNlmOGngoXuwq2De8xB40Me+FTYOhtTnVI8gP9FZ5sE
Qyz0sh4ZQfCmIucmbQyo9X6SRxRVoOJjg7uVf6qxAgMBAAGjggKhMIICnTAdBgNV
HQ4EFgQU3SOJzIll7c0m+Q/oIqlTxNidbCkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvNTRhYjY5LWEyYTgtNGVmNC1i
MzdiLTM1Nzc4NmUxYzUzMi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81NGFiNjktYTJhOC00ZWY0LWIz
N2ItMzU3Nzg2ZTFjNTMyLzEvM1NPSnpJbGw3YzBtLVFfb0lxbFR4TmlkYkNrLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQMqBNbAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDeZjANBgkqhkiG
9w0BAQsFAAOCAQEArTpQVSAg+jzOR6aLlZzAmwEXbQeBMRf/HvrDqWbxawVLEH+W
VHnUC9tCBu56URm9wWaxAGjsmk68JzdlBicgZTbr/nrV5G7peq5leuj6AwZHY5k7
40TJx3EDrhqFfBp5olApn/Iv8VDtvN6Zbi97173igd93qLpcb02GIuHYAnDRJA7n
w/+YLkxXI1Yc8wr6RjIVDcMCk9RQEvwlYrKj7tbL3CksEaWP9udmOslNcHTweGdT
AdvAKpPTn3QRGgYCz3nGIT122dLtOSyzWwh5cwpZKtTXk98ipHMIy5qMsJ1N7hhf
xWq/HVU7XR7WZENPK9oWPn8sa4NU3T3HZ7sNiQ==
-----END CERTIFICATE-----