Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4owDHwAdg6INKrR5u31RCdlLhPA.cer
File:                     4owDHwAdg6INKrR5u31RCdlLhPA.cer (raw, json)
Hash identifier:          q1Phetc1lKXclnSpkTrzFHg9r67EdUr+GC8EcbT6Yx0=
Subject key identifier:   E2:8C:03:1F:00:1D:83:A2:0D:2A:B4:79:BB:7D:51:09:D9:4B:84:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       791F8D9378
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/3cfa5b-dd41-41a1-bb6d-ff1a0a0b04c0/1/4owDHwAdg6INKrR5u31RCdlLhPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/3cfa5b-dd41-41a1-bb6d-ff1a0a0b04c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:46:38 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2.57.104.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520220414840 (0x791f8d9378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:46:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e28c031f001d83a20d2ab479bb7d5109d94b84f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:bc:3f:18:f0:2d:2d:2c:c8:47:45:02:70:
                    cc:6a:6a:6c:dd:03:e2:42:90:5d:1a:fa:ef:69:6e:
                    69:29:66:a5:c8:d8:b4:2b:ec:a5:35:3b:6d:e5:d0:
                    8b:5a:8d:38:c3:5b:4d:71:9b:25:48:a0:a7:ae:84:
                    99:ff:13:18:7c:ca:6e:0f:71:4b:d1:f7:45:1a:a3:
                    42:39:da:99:3a:d6:e4:7b:c1:b4:79:43:ec:b1:08:
                    7d:6e:be:30:58:2d:98:c2:6c:e5:ff:c7:24:5d:55:
                    cf:ad:5c:08:b5:23:18:c0:d2:03:fc:15:57:dc:72:
                    8e:6c:87:fb:03:07:f9:b3:79:7e:72:f8:c3:ad:b8:
                    6f:77:cb:b7:c9:1a:a9:11:95:f9:a5:9d:96:cd:6c:
                    19:10:01:d0:dd:3c:8f:d9:a8:9b:ab:47:0b:65:e4:
                    fe:08:9c:af:b4:f5:c0:1e:0c:bc:ff:b3:3a:d6:50:
                    19:92:e6:0e:8a:d2:6c:ec:f5:04:c8:8d:d8:6c:71:
                    9b:42:62:37:e8:e8:9f:41:0f:41:56:30:f1:76:4f:
                    6a:67:02:e8:80:1f:a6:fa:0b:19:c2:3a:95:98:5b:
                    2c:e5:e5:62:d1:ec:4d:4b:e0:44:e0:aa:76:6e:26:
                    ba:80:d4:6d:72:cb:f7:6c:79:70:3c:cb:a9:6e:73:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8C:03:1F:00:1D:83:A2:0D:2A:B4:79:BB:7D:51:09:D9:4B:84:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3cfa5b-dd41-41a1-bb6d-ff1a0a0b04c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3cfa5b-dd41-41a1-bb6d-ff1a0a0b04c0/1/4owDHwAdg6INKrR5u31RCdlLhPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:89:1e:19:f9:1a:80:71:f7:89:fa:8f:cd:de:68:9c:17:
         e6:f9:71:16:3f:0c:ab:b5:cf:0d:e9:90:de:03:ca:7c:cb:e8:
         0f:18:0f:6c:c6:b5:f6:1c:86:c1:7c:cf:bc:80:dc:cb:0d:95:
         c5:86:58:0c:70:f1:25:4b:c4:14:6e:4e:05:7e:fb:02:38:8c:
         6f:25:26:f9:4a:62:fe:fc:fb:55:2f:bb:28:f8:85:8a:5e:6b:
         01:36:e2:15:b4:a8:9a:3e:82:ba:e7:05:61:ee:bf:ad:c3:8a:
         54:c2:aa:14:2e:d7:9d:2c:0a:33:92:0b:e5:c2:f8:d5:ec:01:
         81:dd:7e:4e:ff:1b:6d:78:d7:2c:6d:b4:40:7c:47:da:dd:8c:
         57:6f:7a:75:01:09:c2:f8:a6:39:83:53:e1:02:1b:ab:85:9c:
         0e:0f:ed:2a:28:ca:56:d4:e0:ef:25:de:f4:68:64:47:c3:f1:
         09:8a:e6:62:32:0e:ac:63:9d:e6:eb:d0:68:3c:36:6b:14:a0:
         1a:ce:f9:b7:47:1c:55:db:cb:d6:27:e6:65:6f:77:d2:c3:1a:
         52:21:9c:88:aa:86:d9:e7:49:79:68:52:c0:be:e1:e5:28:2a:
         4b:ad:eb:b2:4e:3d:18:5f:43:76:96:66:f2:e2:3f:d6:02:47:
         3e:1b:89:dc
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFeR+Nk3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTQ2MzhaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUyOGMwMzFmMDAx
ZDgzYTIwZDJhYjQ3OWJiN2Q1MTA5ZDk0Yjg0ZjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJyLw/GPAtLSzIR0UCcMxqamzdA+JCkF0a+u9pbmkpZqXI
2LQr7KU1O23l0ItajTjDW01xmyVIoKeuhJn/Exh8ym4PcUvR90Uao0I52pk61uR7
wbR5Q+yxCH1uvjBYLZjCbOX/xyRdVc+tXAi1IxjA0gP8FVfcco5sh/sDB/mzeX5y
+MOtuG93y7fJGqkRlfmlnZbNbBkQAdDdPI/ZqJurRwtl5P4InK+09cAeDLz/szrW
UBmS5g6K0mzs9QTIjdhscZtCYjfo6J9BD0FWMPF2T2pnAuiAH6b6CxnCOpWYWyzl
5WLR7E1L4ETgqnZuJrqA1G1yy/dseXA8y6luc1NdAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU4owDHwAdg6INKrR5u31RCdlLhPAwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvM2NmYTViLWRkNDEtNDFhMS1i
YjZkLWZmMWEwYTBiMDRjMC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zY2ZhNWItZGQ0MS00MWExLWJi
NmQtZmYxYTBhMGIwNGMwLzEvNG93REh3QWRnNklOS3JSNXUzMVJDZGxMaFBBLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAICOWgwDQYJKoZIhvcNAQELBQADggEBAB12iR4Z+RqAcfeJ+o/N3mic
F+b5cRY/DKu1zw3pkN4DynzL6A8YD2zGtfYchsF8z7yA3MsNlcWGWAxw8SVLxBRu
TgV++wI4jG8lJvlKYv78+1Uvuyj4hYpeawE24hW0qJo+grrnBWHuv63DilTCqhQu
150sCjOSC+XC+NXsAYHdfk7/G2141yxttEB8R9rdjFdvenUBCcL4pjmDU+ECG6uF
nA4P7SooylbU4O8l3vRoZEfD8QmK5mIyDqxjnebr0Gg8NmsUoBrO+bdHHFXby9Yn
5mVvd9LDGlIhnIiqhtnnSXloUsC+4eUoKkut67JOPRhfQ3aWZvLiP9YCRz4bidw=
-----END CERTIFICATE-----