Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45i4SPu8_10u9lUkYptatbxhHYU.cer
File:                     45i4SPu8_10u9lUkYptatbxhHYU.cer (raw, json)
Hash identifier:          fFwKxfRYyeb91CG/FBhFnclfyKVy/C6CM+d6e/ETngs=
Subject key identifier:   E3:98:B8:48:FB:BC:FF:5D:2E:F6:55:24:62:9B:5A:B5:BC:61:1D:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       752C5743E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123981/0/E398B848FBBCFF5D2EF65524629B5AB5BC611D85.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123981/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:01:10 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 61317
                          AS: 210277
                          IP: 185.34.40.0/22
                          IP: 185.137.92.0/22
                          IP: 2a00:d1a0::/32
                          IP: 2a0a:4e80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503255090146 (0x752c5743e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:10 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e398b848fbbcff5d2ef65524629b5ab5bc611d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:f3:81:83:cc:26:44:4c:fc:75:08:78:7f:
                    67:18:08:9e:5a:bf:d0:6d:69:ef:e1:dd:23:31:4f:
                    37:54:c6:a9:04:2f:36:f0:09:d2:ea:f1:42:87:2d:
                    84:2f:95:64:15:c7:7e:d2:9e:8b:c5:04:29:9f:44:
                    a1:cf:81:96:71:17:06:01:59:9c:08:26:0e:ed:39:
                    bd:3a:79:68:48:9a:3a:c0:38:3b:db:df:06:dd:dc:
                    59:9f:9f:1d:6b:f7:84:a7:6c:f4:2c:f4:30:1a:e5:
                    ec:c2:fd:eb:1b:b8:0f:5a:b4:8b:7b:cf:0d:ff:1a:
                    8e:b9:57:b2:e8:e9:8b:16:f5:0b:11:6f:8c:ab:6c:
                    67:67:69:b0:3f:81:89:6b:01:6c:0b:eb:cd:49:a2:
                    68:03:a0:98:e1:4e:4e:c2:15:ec:13:f6:1a:fd:6c:
                    25:ab:32:0f:da:c3:47:3e:48:47:c2:28:7c:59:20:
                    e7:ba:dc:fb:fb:94:e0:1f:3a:9a:1a:3a:a9:25:68:
                    71:40:a6:6f:23:f7:43:40:c2:37:b4:ff:43:96:96:
                    8b:b1:fa:86:cc:3a:a3:ca:0c:3a:7b:38:63:5c:16:
                    d0:9c:30:a7:4a:99:ac:65:54:23:7a:80:df:3e:f0:
                    90:97:87:d5:3e:c1:52:15:8f:10:8e:6d:c6:43:ad:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:B8:48:FB:BC:FF:5D:2E:F6:55:24:62:9B:5A:B5:BC:61:1D:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123981/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123981/0/E398B848FBBCFF5D2EF65524629B5AB5BC611D85.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.40.0/22
                  185.137.92.0/22
                IPv6:
                  2a00:d1a0::/32
                  2a0a:4e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61317
                  210277

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:8f:4a:2d:77:10:bc:7e:33:b1:e3:90:6c:19:c4:0f:98:
         a6:4d:2c:f3:90:27:2c:c2:c9:51:13:be:70:69:ab:f2:95:4e:
         c3:3c:9b:d9:a6:9d:e9:ee:0b:69:88:55:77:01:39:b2:3c:6c:
         e1:f4:74:c2:58:a3:40:ce:04:07:7a:9c:86:73:70:f3:2a:ee:
         5b:a7:ec:51:99:61:77:76:79:81:63:63:6b:97:4a:9a:3d:4e:
         df:ec:e7:73:78:c6:12:15:d0:23:75:a6:46:f4:79:88:b6:e2:
         76:ba:ff:e8:99:d3:f9:f0:56:ca:35:2c:70:2e:b9:12:71:30:
         f9:36:db:79:4a:5a:a8:0b:58:e4:95:ac:b1:53:4b:e7:8a:08:
         34:3d:db:b2:9f:e3:cf:f8:e1:a8:17:32:3c:09:f9:a6:9a:26:
         29:42:49:a1:d3:f0:03:a4:19:24:69:32:36:bd:55:4e:1b:df:
         48:75:ad:d4:73:5c:00:7c:6d:34:8a:cc:17:db:ec:46:53:d2:
         f8:b9:8a:66:e3:f7:aa:80:94:5c:cb:3c:21:86:95:ba:0e:f1:
         8c:12:55:df:26:fd:6d:c6:12:49:ed:99:2e:13:9b:0a:33:72:
         f5:88:39:33:57:d4:bf:5c:9f:b5:3b:24:b2:69:65:ce:a5:7a:
         31:64:44:1d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIFdSxXQ+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMTBaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUzOThiODQ4ZmJi
Y2ZmNWQyZWY2NTUyNDYyOWI1YWI1YmM2MTFkODUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1NfOBg8wmREz8dQh4f2cYCJ5av9Btae/h3SMxTzdUxqkE
LzbwCdLq8UKHLYQvlWQVx37SnovFBCmfRKHPgZZxFwYBWZwIJg7tOb06eWhImjrA
ODvb3wbd3Fmfnx1r94SnbPQs9DAa5ezC/esbuA9atIt7zw3/Go65V7Lo6YsW9QsR
b4yrbGdnabA/gYlrAWwL681JomgDoJjhTk7CFewT9hr9bCWrMg/aw0c+SEfCKHxZ
IOe63Pv7lOAfOpoaOqklaHFApm8j90NAwje0/0OWloux+obMOqPKDDp7OGNcFtCc
MKdKmaxlVCN6gN8+8JCXh9U+wVIVjxCObcZDrY5DAgMBAAGjggKNMIICiTAdBgNV
HQ4EFgQU45i4SPu8/10u9lUkYptatbxhHYUwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzOTgxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzk4MS8wL0UzOThCODQ4RkJC
Q0ZGNUQyRUY2NTUyNDYyOUI1QUI1QkM2MTFEODUubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowEgQCAAEw
DAMEArkiKAMEArmJXDAUBAIAAjAOAwUAKgDRoAMFAyoKToAwHwYIKwYBBQUHAQgB
Af8EEDAOoAwwCgIDAO+FAgMDNWUwDQYJKoZIhvcNAQELBQADggEBAIPwj0otdxC8
fjOx45BsGcQPmKZNLPOQJyzCyVETvnBpq/KVTsM8m9mmnenuC2mIVXcBObI8bOH0
dMJYo0DOBAd6nIZzcPMq7lun7FGZYXd2eYFjY2uXSpo9Tt/s53N4xhIV0CN1pkb0
eYi24na6/+iZ0/nwVso1LHAuuRJxMPk223lKWqgLWOSVrLFTS+eKCDQ927Kf48/4
4agXMjwJ+aaaJilCSaHT8AOkGSRpMja9VU4b30h1rdRzXAB8bTSKzBfb7EZT0vi5
imbj96qAlFzLPCGGlboO8YwSVd8m/W3GEkntmS4TmwozcvWIOTNX1L9cn7U7JLJp
Zc6lejFkRB0=
-----END CERTIFICATE-----