Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer
File:                     45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer (raw, json)
Hash identifier:          cYEljfJ0dolGdrfQwe8kmFz1XBRGIevr6zfm0WK6pls=
Subject key identifier:   E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9EBB910B78
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 05:51:39 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 212.115.32.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681751677816 (0x9ebb910b78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:51:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3947ca3c48ca8867f32d347c195aad4aa63e889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:7a:93:0b:00:97:a8:ba:10:7c:8d:70:27:
                    e5:61:1d:c8:14:bd:05:cb:8a:80:a5:51:85:d9:46:
                    c4:a5:fe:3f:38:18:5d:05:1a:d2:bd:84:e8:5b:34:
                    fc:1b:94:f2:71:6a:0d:1a:35:c9:0d:c3:d7:24:3b:
                    5e:c2:19:9e:33:38:ba:83:14:c8:fb:4d:64:7a:36:
                    a4:6d:24:16:ce:82:35:f3:aa:ed:09:70:ee:fc:f7:
                    0b:95:2b:a2:af:4a:4f:45:19:5b:41:f8:87:f5:f9:
                    e8:d3:08:7b:87:43:03:ff:46:66:02:1f:bb:44:30:
                    a8:ae:8e:84:cc:af:16:ee:03:b7:15:fb:8b:bd:a2:
                    47:02:35:27:d0:2e:37:bf:7e:76:89:d3:2c:77:7f:
                    bf:57:62:d7:56:c7:f7:d9:f1:39:90:92:a9:f0:f3:
                    0f:8e:42:06:38:57:5b:c0:20:36:8c:b0:b3:7e:08:
                    d0:11:13:6e:a6:44:f9:d6:e4:05:fa:ed:6a:1b:22:
                    62:71:db:9d:90:eb:12:aa:ee:38:52:b6:5e:97:9a:
                    63:9f:7f:54:d5:e1:38:e7:2d:11:23:82:ba:a8:09:
                    f9:f9:94:54:42:4f:88:fe:9c:31:a0:c9:50:0f:8e:
                    a1:53:13:05:11:fb:95:40:35:c7:53:25:17:03:21:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:74:97:25:33:0b:66:22:69:8c:aa:07:66:cf:e0:7f:53:df:
         0a:0c:f0:6a:cd:2d:63:b5:07:73:c2:8d:68:ae:bc:af:62:e8:
         5a:4a:be:ca:02:cf:5e:f2:d9:f7:ca:f6:e8:66:67:e8:15:0b:
         b6:46:4e:f4:f1:c6:68:86:d8:c5:85:6b:75:6d:cd:f0:6a:08:
         c1:bc:73:ff:dd:5b:7f:19:7b:82:15:a6:2e:12:97:b0:f5:b9:
         c1:22:67:5a:2a:7f:24:0d:41:51:de:9f:a0:2d:18:e8:4c:46:
         0c:30:c2:95:f9:d5:8c:65:36:ac:72:7c:39:2b:33:fc:9a:5d:
         5b:76:5a:f0:e7:f6:23:65:a0:2d:3f:6c:9f:41:e1:32:fa:d5:
         7b:0c:13:77:8e:98:e5:16:be:69:52:7f:29:07:d5:da:cc:79:
         26:1f:f5:2f:70:9d:68:66:20:22:58:e5:42:36:69:f5:41:2b:
         60:fb:b7:b9:93:30:96:54:6b:0d:30:76:d4:7c:ae:02:7c:9b:
         dc:cb:06:8a:37:4a:24:3d:7c:e3:e0:2c:a1:5d:dd:c4:f6:76:
         77:1a:ef:81:40:14:b8:90:eb:ff:71:bb:7a:c0:b9:f9:6a:32:
         35:51:82:d6:95:46:8d:fc:85:03:c8:e3:06:3f:0b:59:de:5d:
         c2:b0:8d:89
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ67kQt4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1MTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMzk0N2NhM2M0
OGNhODg2N2YzMmQzNDdjMTk1YWFkNGFhNjNlODg5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAo8N6kwsAl6i6EHyNcCflYR3IFL0Fy4qApVGF2UbEpf4/
OBhdBRrSvYToWzT8G5TycWoNGjXJDcPXJDtewhmeMzi6gxTI+01kejakbSQWzoI1
86rtCXDu/PcLlSuir0pPRRlbQfiH9fno0wh7h0MD/0ZmAh+7RDCoro6EzK8W7gO3
FfuLvaJHAjUn0C43v352idMsd3+/V2LXVsf32fE5kJKp8PMPjkIGOFdbwCA2jLCz
fgjQERNupkT51uQF+u1qGyJicdudkOsSqu44UrZel5pjn39U1eE45y0RI4K6qAn5
+ZRUQk+I/pwxoMlQD46hUxMFEfuVQDXHUyUXAyEsOQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFOOUfKPEjKiGfzLTR8GVqtSqY+iJMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzIxYWQxYi05OWFjLTQ1YmIt
OTVkNi1kNDQxZDUwYzNhNWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMjFhZDFiLTk5YWMtNDViYi05
NWQ2LWQ0NDFkNTBjM2E1ZC8xLzQ1UjhvOFNNcUlaX010Tkh3WldxMUtwajZJay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC1HMgMA0GCSqGSIb3DQEBCwUAA4IBAQB3dJclMwtmImmMqgdmz+B/
U98KDPBqzS1jtQdzwo1orryvYuhaSr7KAs9e8tn3yvboZmfoFQu2Rk708cZohtjF
hWt1bc3wagjBvHP/3Vt/GXuCFaYuEpew9bnBImdaKn8kDUFR3p+gLRjoTEYMMMKV
+dWMZTascnw5KzP8ml1bdlrw5/YjZaAtP2yfQeEy+tV7DBN3jpjlFr5pUn8pB9Xa
zHkmH/UvcJ1oZiAiWOVCNmn1QStg+7e5kzCWVGsNMHbUfK4CfJvcywaKN0okPXzj
4CyhXd3E9nZ3Gu+BQBS4kOv/cbt6wLn5ajI1UYLWlUaN/IUDyOMGPwtZ3l3CsI2J
-----END CERTIFICATE-----