Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4hIV0_07X49ImTYQg4qZ7gHDtDE.cer
File:                     4hIV0_07X49ImTYQg4qZ7gHDtDE.cer (raw, json)
Hash identifier:          77zX5KMWpy2w4EADIArhWE9IxZkzxVbaSVrN2FgrsiA=
Subject key identifier:   E2:12:15:D3:FD:3B:5F:8F:48:99:36:10:83:8A:99:EE:01:C3:B4:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       76D4AD782D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/d41a41-38fd-4ba3-9ccd-0acbba4b9ed7/1/4hIV0_07X49ImTYQg4qZ7gHDtDE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/d41a41-38fd-4ba3-9ccd-0acbba4b9ed7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:36:52 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 204107
                          IP: 185.254.228.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510374279213 (0x76d4ad782d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:36:52 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e21215d3fd3b5f8f48993610838a99ee01c3b431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:c8:3b:56:2c:19:f7:83:ce:ab:ca:4f:9c:
                    d9:6f:13:6f:d0:48:0e:b0:fd:f7:0e:15:fb:38:6a:
                    f7:85:3c:9e:90:b1:6a:88:e9:01:31:df:1f:cf:e0:
                    c8:18:cc:fe:f9:25:61:05:89:ad:60:64:32:ee:dd:
                    6b:63:ac:18:94:32:0f:48:f0:8b:f2:e6:5c:e0:58:
                    85:ae:74:d0:dc:e5:e4:24:9e:6a:81:97:45:20:1f:
                    17:a2:24:7a:57:ec:f3:34:b4:de:99:e4:e3:5b:2e:
                    c1:6c:b9:b4:65:84:59:be:17:d9:38:8b:95:6f:19:
                    4a:f6:af:0b:b3:b4:6b:7a:f5:60:59:bb:53:76:b2:
                    70:89:91:00:2b:53:cd:74:a0:9e:12:98:5e:c0:4b:
                    e8:12:40:c9:a3:7f:b9:00:12:17:46:9e:61:84:65:
                    e0:f2:2b:0c:62:c3:f1:27:cb:ea:ad:d1:0b:aa:3e:
                    46:1b:51:7f:87:e8:43:c8:b7:34:dd:83:cd:9f:22:
                    ac:b2:0b:57:e8:15:46:cf:eb:92:d7:ac:93:98:d6:
                    0f:bc:c6:c1:3a:d5:bb:5b:84:ce:ae:c7:d6:4a:eb:
                    ab:16:3d:ad:59:76:f5:15:88:06:42:5b:be:5a:b9:
                    ce:50:1c:85:f1:dc:ec:34:df:89:09:6c:66:48:92:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:12:15:D3:FD:3B:5F:8F:48:99:36:10:83:8A:99:EE:01:C3:B4:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d41a41-38fd-4ba3-9ccd-0acbba4b9ed7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d41a41-38fd-4ba3-9ccd-0acbba4b9ed7/1/4hIV0_07X49ImTYQg4qZ7gHDtDE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204107

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:31:10:bc:b4:55:16:9c:6f:ad:0b:f4:67:c5:e7:e4:1f:
         2a:7d:69:b4:9b:f2:fd:46:0b:df:18:ab:f5:51:ae:34:d5:89:
         07:d4:e4:f1:29:a8:96:55:87:d7:c9:c2:23:58:98:0e:59:f5:
         9e:2b:72:b9:b7:88:1c:8c:96:a7:c7:aa:fa:b8:d6:e1:dd:b9:
         c5:b0:d3:1c:35:d6:65:6c:1b:5f:90:0f:07:41:04:2b:7e:a3:
         34:11:d5:f7:39:7b:a8:08:07:14:dd:85:26:ac:c1:dc:4d:8c:
         c9:f4:20:6f:a5:99:44:70:91:b9:a2:e9:1d:8e:c4:5e:13:b7:
         8d:e1:3e:22:6b:f1:c8:10:98:e5:16:5f:59:c3:31:04:b2:ed:
         58:8e:75:eb:6d:d8:d6:be:bf:91:b7:cd:23:b3:6e:12:45:77:
         a8:96:8d:35:03:b9:07:ce:52:3d:3e:8a:63:04:e9:c2:65:71:
         c6:35:25:2a:04:f7:e9:e4:35:b4:5f:de:51:78:09:6d:be:93:
         df:b6:de:82:77:2e:bc:a1:06:f3:90:a8:16:e3:c4:83:a1:cd:
         f1:eb:02:01:04:ea:3a:66:e5:35:0d:dc:d8:0a:06:5c:93:8b:
         96:68:d4:77:ec:c8:da:f9:32:2e:7e:c1:42:29:d0:85:fe:96:
         79:c5:1c:f7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIFdtSteC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDM2NTJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUyMTIxNWQzZmQz
YjVmOGY0ODk5MzYxMDgzOGE5OWVlMDFjM2I0MzEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyR8g7ViwZ94POq8pPnNlvE2/QSA6w/fcOFfs4aveFPJ6Q
sWqI6QEx3x/P4MgYzP75JWEFia1gZDLu3WtjrBiUMg9I8Ivy5lzgWIWudNDc5eQk
nmqBl0UgHxeiJHpX7PM0tN6Z5ONbLsFsubRlhFm+F9k4i5VvGUr2rwuztGt69WBZ
u1N2snCJkQArU810oJ4SmF7AS+gSQMmjf7kAEhdGnmGEZeDyKwxiw/Eny+qt0Quq
PkYbUX+H6EPItzTdg82fIqyyC1foFUbP65LXrJOY1g+8xsE61btbhM6ux9ZK66sW
Pa1ZdvUViAZCW75auc5QHIXx3Ow034kJbGZIkrAfAgMBAAGjggKgMIICnDAdBgNV
HQ4EFgQU4hIV0/07X49ImTYQg4qZ7gHDtDEwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZDQxYTQxLTM4ZmQtNGJhMy05
Y2NkLTBhY2JiYTRiOWVkNy8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNDFhNDEtMzhmZC00YmEzLTlj
Y2QtMGFjYmJhNGI5ZWQ3LzEvNGhJVjBfMDdYNDlJbVRZUWc0cVo3Z0hEdERFLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAK5/uQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAx1LMA0GCSqGSIb3
DQEBCwUAA4IBAQCNlTEQvLRVFpxvrQv0Z8Xn5B8qfWm0m/L9RgvfGKv1Ua401YkH
1OTxKaiWVYfXycIjWJgOWfWeK3K5t4gcjJanx6r6uNbh3bnFsNMcNdZlbBtfkA8H
QQQrfqM0EdX3OXuoCAcU3YUmrMHcTYzJ9CBvpZlEcJG5oukdjsReE7eN4T4ia/HI
EJjlFl9ZwzEEsu1YjnXrbdjWvr+Rt80js24SRXeolo01A7kHzlI9PopjBOnCZXHG
NSUqBPfp5DW0X95ReAltvpPftt6Cdy68oQbzkKgW48SDoc3x6wIBBOo6ZuU1DdzY
CgZck4uWaNR37Mja+TIufsFCKdCF/pZ5xRz3
-----END CERTIFICATE-----