Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4lr9VDKTfa8L9CiQr50ewNKigpQ.cer
File:                     4lr9VDKTfa8L9CiQr50ewNKigpQ.cer (raw, json)
Hash identifier:          rwQX4OXAfb3stTqSOYV9irEO+Twohx1wtKlZyFMKuug=
Subject key identifier:   E2:5A:FD:54:32:93:7D:AF:0B:F4:28:90:AF:9D:1E:C0:D2:A2:82:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9D9244A09A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/8869a2-431c-4fd2-aecb-8de8f322ed3e/1/4lr9VDKTfa8L9CiQr50ewNKigpQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/8869a2-431c-4fd2-aecb-8de8f322ed3e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:51:30 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 141.8.224.0/21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676763836570 (0x9d9244a09a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:51:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e25afd5432937daf0bf42890af9d1ec0d2a28294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:3b:a7:fa:a2:3a:0c:08:b6:46:bb:3b:73:
                    87:b9:59:52:1e:35:70:e0:dd:9b:56:6f:d6:22:fe:
                    e2:fc:48:dc:50:68:61:c7:89:8c:8d:d1:3f:e3:44:
                    ad:76:69:68:9f:65:b2:d4:b2:8f:81:f0:d0:45:37:
                    e1:ec:9b:5c:c4:49:b0:6a:02:79:e4:54:05:13:39:
                    ab:76:33:18:ff:44:f7:92:ba:2e:3a:08:6c:fa:07:
                    0d:80:ca:f5:b8:11:92:27:b6:4f:00:a1:82:01:98:
                    71:ef:7a:57:46:4b:fd:68:68:85:81:d4:a2:cb:53:
                    5c:54:07:82:e1:dc:f0:c6:e5:85:8a:0a:25:08:25:
                    9c:bf:7a:34:8a:f8:79:4e:c5:65:39:1f:53:48:13:
                    78:4b:ed:b8:72:ba:57:ee:3e:e1:fa:42:60:ae:06:
                    f5:65:38:b9:14:72:8a:0c:c6:03:78:a0:75:e3:20:
                    6c:2f:0c:f8:28:58:12:6b:db:53:1d:61:4d:d4:6f:
                    43:38:02:98:34:56:87:48:d3:7f:f5:b0:44:58:c2:
                    99:4f:ae:71:9d:62:aa:55:6d:f8:07:3b:7e:c1:c0:
                    ab:15:c6:5b:1c:52:82:98:46:42:ac:d6:41:03:92:
                    8d:05:a6:6b:78:7d:9e:d7:b5:d3:d5:bb:b9:ec:34:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:FD:54:32:93:7D:AF:0B:F4:28:90:AF:9D:1E:C0:D2:A2:82:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8869a2-431c-4fd2-aecb-8de8f322ed3e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8869a2-431c-4fd2-aecb-8de8f322ed3e/1/4lr9VDKTfa8L9CiQr50ewNKigpQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.8.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:f6:f7:e3:7d:bd:04:14:3d:68:73:12:44:a2:98:68:c7:
         64:bb:fc:39:db:6f:ce:fa:b8:88:91:f8:2f:b2:10:ec:06:b5:
         d1:92:01:b5:34:4c:39:89:11:c2:65:f4:ea:64:a4:16:74:79:
         7e:fc:9a:92:61:9f:04:c8:8f:c5:a6:06:5f:3c:0a:2b:26:42:
         d6:33:fa:f7:26:0d:5b:f4:ed:09:17:17:33:f9:0e:56:a5:34:
         1a:e4:b1:5f:0d:00:f4:3d:c9:58:c4:91:45:11:4e:c7:16:93:
         c7:f4:32:b6:67:77:db:2e:1f:9c:b6:81:98:7c:83:f8:1e:a6:
         bc:f2:57:ba:1e:3e:43:db:45:65:af:20:c2:9e:aa:1c:f6:a5:
         9c:e7:42:0b:b7:d9:1a:09:61:67:58:00:ed:e1:52:5c:71:0f:
         cc:b5:d0:df:41:a5:42:92:bb:d8:e0:bc:90:73:a5:28:bc:a4:
         69:19:e0:a3:ab:af:5a:5a:11:e0:e9:f5:6a:0c:cd:4d:10:0a:
         83:2f:17:e2:b2:17:1f:cf:85:52:95:f3:c7:69:d0:67:8c:78:
         19:13:ec:1d:65:dc:4d:03:a1:4d:a9:25:52:5a:bb:e9:97:3e:
         31:5e:6d:54:e9:57:9d:cc:0d:d2:65:fd:9b:8b:e7:eb:18:90:
         33:46:32:92
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ2SRKCaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQ1MTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMjVhZmQ1NDMy
OTM3ZGFmMGJmNDI4OTBhZjlkMWVjMGQyYTI4Mjk0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwC47p/qiOgwItka7O3OHuVlSHjVw4N2bVm/WIv7i/Ejc
UGhhx4mMjdE/40Stdmlon2Wy1LKPgfDQRTfh7JtcxEmwagJ55FQFEzmrdjMY/0T3
krouOghs+gcNgMr1uBGSJ7ZPAKGCAZhx73pXRkv9aGiFgdSiy1NcVAeC4dzwxuWF
igolCCWcv3o0ivh5TsVlOR9TSBN4S+24crpX7j7h+kJgrgb1ZTi5FHKKDMYDeKB1
4yBsLwz4KFgSa9tTHWFN1G9DOAKYNFaHSNN/9bBEWMKZT65xnWKqVW34Bzt+wcCr
FcZbHFKCmEZCrNZBA5KNBaZreH2e17XT1bu57DSVQQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFOJa/VQyk32vC/QokK+dHsDSooKUMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzg4NjlhMi00MzFjLTRmZDIt
YWVjYi04ZGU4ZjMyMmVkM2UvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvODg2OWEyLTQzMWMtNGZkMi1h
ZWNiLThkZThmMzIyZWQzZS8xLzRscjlWREtUZmE4TDlDaVFyNTBld05LaWdwUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDjQjgMA0GCSqGSIb3DQEBCwUAA4IBAQCujvb34329BBQ9aHMSRKKY
aMdku/w522/O+riIkfgvshDsBrXRkgG1NEw5iRHCZfTqZKQWdHl+/JqSYZ8EyI/F
pgZfPAorJkLWM/r3Jg1b9O0JFxcz+Q5WpTQa5LFfDQD0PclYxJFFEU7HFpPH9DK2
Z3fbLh+ctoGYfIP4Hqa88le6Hj5D20VlryDCnqoc9qWc50ILt9kaCWFnWADt4VJc
cQ/MtdDfQaVCkrvY4LyQc6UovKRpGeCjq69aWhHg6fVqDM1NEAqDLxfishcfz4VS
lfPHadBnjHgZE+wdZdxNA6FNqSVSWrvplz4xXm1U6VedzA3SZf2bi+frGJAzRjKS
-----END CERTIFICATE-----