Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4nawdWXzEtAHmQrael0hI6XH7uY.cer
File:                     4nawdWXzEtAHmQrael0hI6XH7uY.cer (raw, json)
Hash identifier:          IJMjd6nZZBzdFssmXjA63ZCyYtWlq7g8OEdADSB2rlw=
Subject key identifier:   E2:76:B0:75:65:F3:12:D0:07:99:0A:DA:7A:5D:21:23:A5:C7:EE:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       784E1FEC4E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/d498d2-d9e4-4f79-b728-21d57308fcfd/1/4nawdWXzEtAHmQrael0hI6XH7uY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/d498d2-d9e4-4f79-b728-21d57308fcfd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:10:42 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.142.92.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516706790478 (0x784e1fec4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:10:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e276b07565f312d007990ada7a5d2123a5c7eee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:c2:62:ee:38:14:a8:eb:9a:c6:54:36:63:
                    bb:bc:f2:70:3b:8e:13:f2:8c:26:05:db:c9:63:64:
                    86:c9:fb:28:76:40:18:d9:54:28:99:25:fa:b2:9d:
                    75:76:74:fb:74:22:b3:b5:03:27:26:31:05:6e:05:
                    04:a4:68:f2:60:64:6f:17:df:3f:e7:a6:ac:66:7d:
                    ae:04:61:ce:ca:30:b6:1b:f2:b1:7f:b3:a6:43:c3:
                    23:cd:67:09:dd:e6:d7:03:13:cf:60:d3:0f:1c:f3:
                    3f:92:b8:5a:43:69:0d:8f:c4:d1:21:a7:ac:39:2c:
                    db:42:84:ee:68:f0:0b:26:75:85:05:00:3f:ea:63:
                    f8:0b:27:6f:ad:e3:6e:59:12:9c:d7:a4:01:c7:a1:
                    20:eb:30:d6:74:01:cb:0d:08:7e:e9:8a:bd:e7:8a:
                    bc:90:29:2a:9c:c3:af:05:a9:95:c5:d2:2c:23:68:
                    64:54:7f:63:d6:05:25:bb:92:11:24:76:19:9d:b3:
                    74:98:70:48:9c:55:5c:82:02:43:ec:4a:54:db:0f:
                    4f:8c:eb:55:d2:86:00:70:aa:7f:a9:7f:bb:b8:43:
                    3b:ed:de:dc:ee:ee:23:0c:57:a0:4e:4f:b1:48:e6:
                    3e:97:de:ec:e0:51:ea:3d:ef:e6:c7:d1:55:fa:26:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:B0:75:65:F3:12:D0:07:99:0A:DA:7A:5D:21:23:A5:C7:EE:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d498d2-d9e4-4f79-b728-21d57308fcfd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d498d2-d9e4-4f79-b728-21d57308fcfd/1/4nawdWXzEtAHmQrael0hI6XH7uY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:cd:d1:39:b2:12:0b:8b:fa:ba:7b:20:00:a3:56:b3:5d:
         dc:95:d9:58:4c:57:09:59:49:21:9a:0a:6f:f6:f8:29:85:0c:
         d0:12:64:81:73:09:31:dc:bc:b5:70:cb:10:7d:e7:49:0c:e3:
         ca:cf:2c:79:ab:7a:11:0b:ae:71:8f:65:25:2a:ad:ad:22:09:
         c2:b1:9c:2c:03:45:ff:ac:6c:41:ef:3f:be:d8:6e:4e:87:1b:
         1e:4e:6d:14:8d:a6:51:fd:e5:db:32:58:63:7e:94:3e:ad:19:
         c2:df:20:f4:57:7f:aa:51:be:aa:48:17:75:29:37:f6:73:41:
         55:e5:84:ab:36:4d:45:5d:e2:7b:04:9d:98:15:df:53:03:fc:
         7c:86:b5:fd:fe:a8:2b:ba:8b:15:6d:6b:14:60:f1:9a:15:2c:
         40:fd:cd:df:c9:8a:e3:c3:19:ed:61:54:ec:15:41:86:53:a4:
         e3:12:e1:97:97:38:f5:d0:3b:88:c3:84:12:51:1c:c4:5f:f1:
         b3:18:bb:ef:f9:6a:3c:ad:58:eb:df:f6:63:ef:6c:d1:a2:2c:
         30:de:49:dc:ea:86:73:ad:44:3e:bd:2b:1c:79:65:46:bf:8f:
         f9:75:6b:bb:0f:80:e8:33:85:81:36:4b:e7:79:c5:4b:d7:74:
         ca:17:dc:9d
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFeE4f7E4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTEwNDJaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUyNzZiMDc1NjVm
MzEyZDAwNzk5MGFkYTdhNWQyMTIzYTVjN2VlZTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBs8Ji7jgUqOuaxlQ2Y7u88nA7jhPyjCYF28ljZIbJ+yh2
QBjZVCiZJfqynXV2dPt0IrO1AycmMQVuBQSkaPJgZG8X3z/npqxmfa4EYc7KMLYb
8rF/s6ZDwyPNZwnd5tcDE89g0w8c8z+SuFpDaQ2PxNEhp6w5LNtChO5o8AsmdYUF
AD/qY/gLJ2+t425ZEpzXpAHHoSDrMNZ0AcsNCH7pir3niryQKSqcw68FqZXF0iwj
aGRUf2PWBSW7khEkdhmds3SYcEicVVyCAkPsSlTbD0+M61XShgBwqn+pf7u4Qzvt
3tzu7iMMV6BOT7FI5j6X3uzgUeo97+bH0VX6JohHAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU4nawdWXzEtAHmQrael0hI6XH7uYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZDQ5OGQyLWQ5ZTQtNGY3OS1i
NzI4LTIxZDU3MzA4ZmNmZC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNDk4ZDItZDllNC00Zjc5LWI3
MjgtMjFkNTczMDhmY2ZkLzEvNG5hd2RXWHpFdEFIbVFyYWVsMGhJNlhIN3VZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItjlwwDQYJKoZIhvcNAQELBQADggEBAH88zdE5shILi/q6eyAAo1az
XdyV2VhMVwlZSSGaCm/2+CmFDNASZIFzCTHcvLVwyxB950kM48rPLHmrehELrnGP
ZSUqra0iCcKxnCwDRf+sbEHvP77Ybk6HGx5ObRSNplH95dsyWGN+lD6tGcLfIPRX
f6pRvqpIF3UpN/ZzQVXlhKs2TUVd4nsEnZgV31MD/HyGtf3+qCu6ixVtaxRg8ZoV
LED9zd/JiuPDGe1hVOwVQYZTpOMS4ZeXOPXQO4jDhBJRHMRf8bMYu+/5ajytWOvf
9mPvbNGiLDDeSdzqhnOtRD69Kxx5ZUa/j/l1a7sPgOgzhYE2S+d5xUvXdMoX3J0=
-----END CERTIFICATE-----