Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Ofd7cAGZ8wmBGn0PK6pltyx3FU.cer
File:                     4Ofd7cAGZ8wmBGn0PK6pltyx3FU.cer (raw, json)
Hash identifier:          Lg5sr0xliL81Y1aeDEMMgSiY9XQcaKH4OSmdF/ikzGs=
Subject key identifier:   E0:E7:DD:ED:C0:06:67:CC:26:04:69:F4:3C:AE:A9:96:DC:B1:DC:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81AF8710B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/73829f-6878-4002-929d-a6cfef8cfd4b/1/4Ofd7cAGZ8wmBGn0PK6pltyx3FU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/73829f-6878-4002-929d-a6cfef8cfd4b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:37:27 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 94.154.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556995645616 (0x81af8710b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:37:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e0e7ddedc00667cc260469f43caea996dcb1dc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:0c:e7:59:de:57:dc:4f:b8:f2:ca:80:45:
                    9c:3c:3f:3d:2c:48:28:d3:4b:d2:ec:14:70:9a:69:
                    0c:72:70:81:a2:94:f4:51:9a:7f:a1:0c:f5:cb:7e:
                    c5:86:df:c3:cc:e4:8e:00:b0:ff:12:f9:6c:68:cd:
                    a7:90:60:1e:3c:95:1c:98:44:c3:8a:da:a1:fa:de:
                    6a:90:d6:59:70:fc:5b:f9:c3:f9:18:8b:7d:d7:d5:
                    87:53:bd:ae:fb:f1:a6:f7:77:13:b6:cd:e2:31:40:
                    b2:c4:f3:0d:53:55:bc:04:b6:25:13:84:4b:c0:15:
                    74:1f:99:5c:f5:7c:b5:72:7e:d0:4c:9c:c0:8b:54:
                    41:1a:0c:85:2c:d4:41:d6:76:08:99:66:56:27:cd:
                    d7:0b:26:1a:46:48:89:f8:9a:ad:7a:1e:2f:d7:4c:
                    9c:58:30:d7:c3:fe:75:e2:82:99:09:ca:c5:92:80:
                    fd:07:d9:11:95:d8:9d:6d:e0:2e:db:59:b8:78:27:
                    5c:e8:02:a2:24:d5:bd:a6:bc:c2:87:62:71:75:cd:
                    5a:7b:69:29:9e:1c:89:a1:41:0b:f2:65:ae:5f:ad:
                    37:01:a9:23:7d:10:cd:8d:3c:0c:bc:7f:cb:8b:f4:
                    8f:be:6e:8e:90:fe:18:56:58:bc:50:60:c8:73:f5:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E7:DD:ED:C0:06:67:CC:26:04:69:F4:3C:AE:A9:96:DC:B1:DC:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/73829f-6878-4002-929d-a6cfef8cfd4b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/73829f-6878-4002-929d-a6cfef8cfd4b/1/4Ofd7cAGZ8wmBGn0PK6pltyx3FU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:81:12:df:7b:37:dc:bf:99:45:bd:ac:7a:cb:21:9f:7b:bc:
         c3:7e:53:24:ab:70:92:96:a1:32:21:c0:96:fe:4c:a8:5c:9a:
         8a:3a:ad:e4:db:52:dd:6c:ae:89:8f:8d:28:57:61:9d:70:56:
         06:68:bd:2b:71:df:e0:83:99:85:25:bb:5c:0f:15:98:83:7f:
         84:a8:4c:c3:91:35:38:31:dd:dd:79:30:0d:2d:c5:d7:02:63:
         cc:75:63:8a:4e:02:6e:28:38:dd:73:89:b4:4a:4d:2e:43:a1:
         73:69:5b:7f:46:73:1f:35:fb:07:95:1d:7b:15:de:f7:01:c3:
         28:20:3e:9f:b7:31:c5:f2:2a:32:35:5a:e3:8e:91:e3:82:50:
         0f:4d:3a:39:24:80:0f:0c:92:9e:3b:9a:17:d3:32:23:b1:5a:
         57:f4:46:51:fa:ee:33:4a:a0:1a:1e:83:47:73:67:98:c8:8f:
         94:5b:f2:d1:f5:d9:13:de:9f:af:6b:3d:17:72:47:1d:9d:b3:
         70:a7:fe:f4:df:bd:a8:82:88:d7:41:b3:59:72:c1:55:71:97:
         6b:b3:c9:ba:54:dd:60:c0:02:d9:94:f7:c8:27:b6:ad:e4:db:
         bc:1b:41:c0:63:58:eb:93:79:f9:2e:20:60:0e:f5:c7:ac:f5:
         36:fe:17:ef
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAIGvhxCwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUzNzI3WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMGU3ZGRlZGMw
MDY2N2NjMjYwNDY5ZjQzY2FlYTk5NmRjYjFkYzU1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvrkM51neV9xPuPLKgEWcPD89LEgo00vS7BRwmmkMcnCB
opT0UZp/oQz1y37Fht/DzOSOALD/EvlsaM2nkGAePJUcmETDitqh+t5qkNZZcPxb
+cP5GIt919WHU72u+/Gm93cTts3iMUCyxPMNU1W8BLYlE4RLwBV0H5lc9Xy1cn7Q
TJzAi1RBGgyFLNRB1nYImWZWJ83XCyYaRkiJ+Jqteh4v10ycWDDXw/514oKZCcrF
koD9B9kRldidbeAu21m4eCdc6AKiJNW9przCh2Jxdc1ae2kpnhyJoUEL8mWuX603
AakjfRDNjTwMvH/Li/SPvm6OkP4YVli8UGDIc/W4VQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFODn3e3ABmfMJgRp9DyuqZbcsdxVMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzczODI5Zi02ODc4LTQwMDIt
OTI5ZC1hNmNmZWY4Y2ZkNGIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNzM4MjlmLTY4NzgtNDAwMi05
MjlkLWE2Y2ZlZjhjZmQ0Yi8xLzRPZmQ3Y0FHWjh3bUJHbjBQSzZwbHR5eDNGVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCXpqwMA0GCSqGSIb3DQEBCwUAA4IBAQAhgRLfezfcv5lFvax6yyGf
e7zDflMkq3CSlqEyIcCW/kyoXJqKOq3k21LdbK6Jj40oV2GdcFYGaL0rcd/gg5mF
JbtcDxWYg3+EqEzDkTU4Md3deTANLcXXAmPMdWOKTgJuKDjdc4m0Sk0uQ6FzaVt/
RnMfNfsHlR17Fd73AcMoID6ftzHF8ioyNVrjjpHjglAPTTo5JIAPDJKeO5oX0zIj
sVpX9EZR+u4zSqAaHoNHc2eYyI+UW/LR9dkT3p+vaz0XckcdnbNwp/70372ogojX
QbNZcsFVcZdrs8m6VN1gwALZlPfIJ7at5Nu8G0HAY1jrk3n5LiBgDvXHrPU2/hfv
-----END CERTIFICATE-----