Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4iAruy2JyrqujDQStnmbe48OgZM.cer
File:                     4iAruy2JyrqujDQStnmbe48OgZM.cer (raw, json)
Hash identifier:          8OYdbL9IQ/6N3FMcToeaKNqrN0Xoyiv9jn96lLaw1HY=
Subject key identifier:   E2:20:2B:BB:2D:89:CA:BA:AE:8C:34:12:B6:79:9B:7B:8F:0E:81:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6AA995E7C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/dd9023-4599-4f6d-bf64-b3f47ddc3115/1/4iAruy2JyrqujDQStnmbe48OgZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/dd9023-4599-4f6d-bf64-b3f47ddc3115/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 18 May 2020 15:06:08 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 176.119.140.0/22
                          IP: 2a0d:cc40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458111707077 (0x6aa995e7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 18 15:06:08 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e2202bbb2d89cabaae8c3412b6799b7b8f0e8193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:07:91:38:1d:62:a0:43:51:69:56:4a:83:
                    76:58:ee:cc:4a:c9:d9:2c:2b:21:ec:d1:ec:88:f5:
                    3b:5a:8b:a1:b8:e9:34:16:c6:cd:87:98:fa:89:85:
                    32:e4:9c:a2:de:86:a8:16:fb:44:bb:09:e4:d6:4e:
                    cd:78:46:80:96:75:6d:59:50:08:78:20:21:7d:c1:
                    6e:33:cb:8a:40:96:2b:d3:77:ed:28:94:46:ef:15:
                    ba:11:fd:20:ef:88:26:a9:e9:e0:f5:ef:2b:43:c8:
                    90:21:9e:87:4d:4b:5a:96:d9:78:fc:63:94:87:d2:
                    0f:42:4a:e5:51:49:03:02:28:f9:04:0d:4d:60:4e:
                    b8:03:d6:ff:53:59:b0:85:35:3e:16:21:c0:fc:e7:
                    30:9c:87:4b:59:76:fe:fc:28:74:69:85:0e:4b:78:
                    5d:8b:6f:a4:b0:d7:d6:96:c9:9f:ef:07:a4:ff:e4:
                    b7:3b:87:c1:7b:f5:e5:ca:da:d4:18:6a:f5:c1:8d:
                    c1:3a:3d:f7:4d:02:4b:0d:95:ca:ec:11:4a:e3:51:
                    05:03:5d:f0:c7:14:ae:c4:60:88:44:16:00:7e:d4:
                    9a:b7:2b:bf:31:a7:af:49:f3:9c:a1:f8:b4:f8:44:
                    6a:a5:89:d4:77:5d:c2:e7:e2:73:39:4a:0d:bb:be:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:20:2B:BB:2D:89:CA:BA:AE:8C:34:12:B6:79:9B:7B:8F:0E:81:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/dd9023-4599-4f6d-bf64-b3f47ddc3115/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/dd9023-4599-4f6d-bf64-b3f47ddc3115/1/4iAruy2JyrqujDQStnmbe48OgZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.140.0/22
                IPv6:
                  2a0d:cc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:22:27:bf:e8:d2:83:f6:d7:cb:b3:03:13:db:ac:d1:30:49:
         68:50:09:be:7c:b0:f2:d6:56:00:8b:71:65:79:2f:37:f1:a2:
         24:ad:46:c1:c2:dc:af:68:b4:68:0a:f2:1e:1a:fe:14:2d:4c:
         29:e4:d5:8a:95:27:eb:a2:84:b0:0b:85:cf:4f:35:63:a5:22:
         45:b4:f4:cb:0b:c8:32:1f:a1:18:de:69:ed:e2:d0:5e:bf:d1:
         6f:46:a4:29:aa:7a:5c:e5:f0:31:ff:b0:d8:3b:4d:c2:0f:9e:
         c0:01:de:40:ed:c2:2f:4d:f1:89:25:49:5d:91:e2:75:5e:10:
         82:b6:a7:28:8d:3f:ac:71:6f:f7:bf:83:40:75:a0:57:ae:8d:
         88:68:b4:db:81:1c:8f:85:55:00:2e:0f:82:3c:29:01:aa:4e:
         cf:ea:c0:22:f8:72:3d:33:9c:ba:46:65:79:e6:85:48:19:17:
         9c:d5:33:67:c2:d4:cf:6e:3b:f2:d0:54:31:59:81:a2:03:b0:
         b6:87:90:43:d9:4a:da:10:5f:25:be:32:e1:9b:46:67:e3:6b:
         d3:86:6a:4f:39:55:3c:24:9b:b8:c9:84:9b:76:ea:f9:22:c0:
         be:ca:13:af:6d:29:5d:58:b5:7e:be:04:54:a9:d8:97:00:13:
         15:b3:72:cc
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFaqmV58UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDA1
MTgxNTA2MDhaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUyMjAyYmJiMmQ4
OWNhYmFhZThjMzQxMmI2Nzk5YjdiOGYwZTgxOTMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCl0AeROB1ioENRaVZKg3ZY7sxKydksKyHs0eyI9Ttai6G4
6TQWxs2HmPqJhTLknKLehqgW+0S7CeTWTs14RoCWdW1ZUAh4ICF9wW4zy4pAlivT
d+0olEbvFboR/SDviCap6eD17ytDyJAhnodNS1qW2Xj8Y5SH0g9CSuVRSQMCKPkE
DU1gTrgD1v9TWbCFNT4WIcD85zCch0tZdv78KHRphQ5LeF2Lb6Sw19aWyZ/vB6T/
5Lc7h8F79eXK2tQYavXBjcE6PfdNAksNlcrsEUrjUQUDXfDHFK7EYIhEFgB+1Jq3
K78xp69J85yh+LT4RGqlidR3XcLn4nM5Sg27vuKVAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU4iAruy2JyrqujDQStnmbe48OgZMwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZGQ5MDIzLTQ1OTktNGY2ZC1i
ZjY0LWIzZjQ3ZGRjMzExNS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZDkwMjMtNDU5OS00ZjZkLWJm
NjQtYjNmNDdkZGMzMTE1LzEvNGlBcnV5Mkp5cnF1akRRU3RubWJlNDhPZ1pNLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAKwd4wwDQQCAAIwBwMFAyoNzEAwDQYJKoZIhvcNAQELBQADggEBADAi
J7/o0oP218uzAxPbrNEwSWhQCb58sPLWVgCLcWV5LzfxoiStRsHC3K9otGgK8h4a
/hQtTCnk1YqVJ+uihLALhc9PNWOlIkW09MsLyDIfoRjeae3i0F6/0W9GpCmqelzl
8DH/sNg7TcIPnsAB3kDtwi9N8YklSV2R4nVeEIK2pyiNP6xxb/e/g0B1oFeujYho
tNuBHI+FVQAuD4I8KQGqTs/qwCL4cj0znLpGZXnmhUgZF5zVM2fC1M9uO/LQVDFZ
gaIDsLaHkEPZStoQXyW+MuGbRmfja9OGak85VTwkm7jJhJt26vkiwL7KE69tKV1Y
tX6+BFSp2JcAExWzcsw=
-----END CERTIFICATE-----