Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4va-vt_1T4pS8QGSIcyyaGKAh_Q.cer
File:                     4va-vt_1T4pS8QGSIcyyaGKAh_Q.cer (raw, json)
Hash identifier:          UTRYHaCpI7QkZ9VQhjRuCRrZCFy4Spu8i1lrirD9WYA=
Subject key identifier:   E2:F6:BE:BE:DF:F5:4F:8A:52:F1:01:92:21:CC:B2:68:62:80:87:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9E18671A63
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/4va-vt_1T4pS8QGSIcyyaGKAh_Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:58:50 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 199773
                          IP: 193.142.211.0/24
                          IP: 194.42.55.224/27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679014242915 (0x9e18671a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:58:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2f6bebedff54f8a52f1019221ccb268628087f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:ca:75:5d:97:5f:79:37:89:82:73:27:26:
                    91:33:82:3f:93:4b:0d:37:f0:1a:32:e9:72:cc:9e:
                    71:5c:be:06:6a:62:85:5a:30:51:de:5c:b6:8e:a3:
                    63:1b:93:78:22:38:e6:a5:d3:aa:4d:47:54:0f:39:
                    43:2b:34:e1:fb:b5:f2:dc:80:64:c3:31:ab:4b:b2:
                    9c:64:ea:d4:0e:77:da:ae:f0:be:29:bc:d6:d9:64:
                    5b:b1:c1:f9:90:e5:06:ae:d3:6a:c1:8c:c9:75:f5:
                    ab:c7:d4:82:b5:b4:a2:6d:cf:c2:9e:60:6e:a7:47:
                    e5:ea:ab:c7:c9:43:20:9b:d2:90:f4:8c:58:8b:16:
                    94:c8:1f:6e:da:32:0f:8c:bd:3e:70:72:f9:e1:9a:
                    c6:dc:1d:65:01:f8:08:df:ac:f5:a6:f5:4f:bd:86:
                    19:ec:4b:d2:7a:ea:0f:10:43:d6:ac:63:9c:30:8d:
                    ef:32:b6:d9:58:cd:aa:fb:4b:da:87:b2:bc:bf:77:
                    f5:fb:f4:f4:5c:3e:88:17:e9:71:f8:c8:69:03:48:
                    de:93:2a:31:ba:47:1a:db:1f:68:7e:ba:57:77:f3:
                    a1:03:81:75:c2:48:1d:98:ec:cb:1c:f8:93:22:e7:
                    09:1f:25:a5:39:fd:14:d3:ca:fa:58:26:ca:64:8d:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:BE:BE:DF:F5:4F:8A:52:F1:01:92:21:CC:B2:68:62:80:87:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/4va-vt_1T4pS8QGSIcyyaGKAh_Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.211.0/24
                  194.42.55.224/27

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199773

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:de:cd:c0:88:7d:1e:7a:aa:db:7e:57:21:6d:9b:38:a7:
         6f:84:c1:68:39:2c:d4:41:3e:55:0b:5c:80:86:bd:ae:60:2f:
         3f:46:99:8c:00:6f:b7:9e:fb:4a:32:c9:84:70:46:9b:9e:41:
         c3:7b:ae:1a:fb:95:35:c8:90:8c:d2:64:f3:0a:ad:b6:a4:9c:
         3f:4c:47:e6:cf:d9:96:fa:d4:79:db:bd:29:6f:90:37:b5:6e:
         62:92:ac:3e:84:4b:99:0c:5a:c1:21:2f:ed:bd:77:cd:c7:95:
         50:4d:a8:51:6b:61:40:e9:68:1f:70:02:35:79:49:bd:a3:dc:
         ed:5a:2b:f6:00:5d:e4:77:ac:39:1e:88:e4:e9:1c:58:c6:6d:
         c7:21:f3:ba:17:37:cc:ea:16:7c:dc:a7:d7:4f:53:d5:f3:0e:
         fe:0a:49:10:e7:df:0c:24:04:e0:26:d7:be:7d:23:b3:9c:03:
         0e:c0:cc:ce:8a:d8:e8:13:d2:fc:2e:c1:a8:2a:be:2d:46:54:
         86:9c:f9:7c:bf:bd:5f:02:78:81:8f:34:ee:9d:58:59:a6:01:
         00:82:a9:e5:8a:a7:6f:1e:70:a3:98:2d:74:58:db:1c:40:a1:
         b3:f9:e7:fd:8b:ae:89:1c:48:40:87:7c:d9:d9:53:77:b4:ae:
         3d:36:22:26
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIGAJ4YZxpjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQ1ODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMmY2YmViZWRm
ZjU0ZjhhNTJmMTAxOTIyMWNjYjI2ODYyODA4N2Y0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsknKdV2XX3k3iYJzJyaRM4I/k0sNN/AaMulyzJ5xXL4G
amKFWjBR3ly2jqNjG5N4IjjmpdOqTUdUDzlDKzTh+7Xy3IBkwzGrS7KcZOrUDnfa
rvC+KbzW2WRbscH5kOUGrtNqwYzJdfWrx9SCtbSibc/CnmBup0fl6qvHyUMgm9KQ
9IxYixaUyB9u2jIPjL0+cHL54ZrG3B1lAfgI36z1pvVPvYYZ7EvSeuoPEEPWrGOc
MI3vMrbZWM2q+0vah7K8v3f1+/T0XD6IF+lx+MhpA0jekyoxukca2x9ofrpXd/Oh
A4F1wkgdmOzLHPiTIucJHyWlOf0U08r6WCbKZI3mwQIDAQABo4ICpzCCAqMwHQYD
VR0OBBYEFOL2vr7f9U+KUvEBkiHMsmhigIf0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2NkMzkyMS0zZTZmLTQwNDQt
OWU4Ny0yMzhhNWIzYTcwMjAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvY2QzOTIxLTNlNmYtNDA0NC05
ZTg3LTIzOGE1YjNhNzAyMC8xLzR2YS12dF8xVDRwUzhRR1NJY3l5YUdLQWhfUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTAT
BAIAATANAwQAwY7TAwUFwio34DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDF0w
DQYJKoZIhvcNAQELBQADggEBAAPX3s3AiH0eeqrbflchbZs4p2+EwWg5LNRBPlUL
XICGva5gLz9GmYwAb7ee+0oyyYRwRpueQcN7rhr7lTXIkIzSZPMKrbaknD9MR+bP
2Zb61HnbvSlvkDe1bmKSrD6ES5kMWsEhL+29d83HlVBNqFFrYUDpaB9wAjV5Sb2j
3O1aK/YAXeR3rDkeiOTpHFjGbcch87oXN8zqFnzcp9dPU9XzDv4KSRDn3wwkBOAm
1759I7OcAw7AzM6K2OgT0vwuwagqvi1GVIac+Xy/vV8CeIGPNO6dWFmmAQCCqeWK
p28ecKOYLXRY2xxAobP55/2LrokcSECHfNnZU3e0rj02IiY=
-----END CERTIFICATE-----