Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QlDPrD_NyBlXi-j6DcPaxs55aY.cer
File:                     5QlDPrD_NyBlXi-j6DcPaxs55aY.cer (raw, json)
Hash identifier:          AZRkPD3YSg/jAr5sqV4LmVpvzkZiW0KGSVWooWsh2Ws=
Subject key identifier:   E5:09:43:3E:B0:FF:37:20:65:5E:2F:A3:E8:37:0F:6B:1B:39:E5:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       691EF3D8A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/0c49cb-8827-42a4-aa8a-a53bcaed3f4b/1/5QlDPrD_NyBlXi-j6DcPaxs55aY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/0c49cb-8827-42a4-aa8a-a53bcaed3f4b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 18 Apr 2020 12:30:17 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 194.48.232.0/22
                          IP: 2a0c:c740::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451490863268 (0x691ef3d8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 18 12:30:17 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e509433eb0ff3720655e2fa3e8370f6b1b39e5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:2a:12:49:01:af:8c:0f:00:a4:1c:5d:29:
                    d6:a7:02:5f:e7:44:49:f7:66:ed:51:ac:1d:25:42:
                    5d:dc:e4:78:51:fa:8d:e9:6a:c8:ae:52:27:a1:fb:
                    5e:c8:b3:e7:54:a3:d2:1a:32:78:5e:30:3c:11:3d:
                    81:ad:92:6b:22:64:1b:ac:b9:0d:2b:d3:06:d7:90:
                    78:7c:03:82:cf:f5:0c:68:79:2a:37:e6:a1:a7:79:
                    fb:5d:10:43:33:ac:66:23:c2:10:11:55:22:34:8e:
                    02:fe:cc:5f:1a:dc:9b:9b:a5:0c:93:9c:34:96:3e:
                    2b:37:3d:ed:be:a7:5d:0d:5c:db:bc:5f:b5:4e:89:
                    85:c6:f9:43:84:e2:d8:b8:65:10:37:b0:f4:90:d4:
                    0a:24:c0:bd:50:6e:32:5c:99:3e:b9:5e:f5:5e:0d:
                    d4:54:a3:b7:3c:73:8d:3f:77:7f:44:b7:b4:79:24:
                    6f:94:b2:0a:12:08:9f:a4:56:30:e7:56:81:46:32:
                    7b:f4:13:2b:1c:6d:00:9f:e6:60:ee:2e:b2:38:01:
                    43:d1:e9:34:d8:59:c7:cf:a1:20:55:0b:a9:9d:dd:
                    84:fa:17:1c:9a:09:fe:85:ae:bc:d8:d1:12:8a:07:
                    5d:dc:42:21:5c:72:8c:23:13:54:c0:bf:93:d9:55:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:43:3E:B0:FF:37:20:65:5E:2F:A3:E8:37:0F:6B:1B:39:E5:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0c49cb-8827-42a4-aa8a-a53bcaed3f4b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0c49cb-8827-42a4-aa8a-a53bcaed3f4b/1/5QlDPrD_NyBlXi-j6DcPaxs55aY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.232.0/22
                IPv6:
                  2a0c:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:71:c8:ce:67:87:c1:1a:a7:4a:6b:50:72:cf:1b:fe:3a:
         61:63:a5:26:a7:f2:90:96:48:b1:1a:d0:1f:90:2c:2e:12:0b:
         6e:ba:ee:e9:d5:e2:36:5b:57:34:9b:18:b6:a7:92:54:b1:b5:
         b2:97:b8:fd:3b:64:84:1e:2b:4c:51:87:7e:15:58:a4:a3:7d:
         b1:dd:98:a9:d7:97:46:3c:b5:47:54:e5:d3:80:e9:fb:f2:83:
         d8:95:6d:13:c5:7b:8e:78:64:28:dd:5d:de:f8:e2:fe:6e:2a:
         eb:7e:71:b5:9e:5b:3f:58:a5:8d:7d:97:43:da:c5:4a:67:36:
         ef:bf:97:08:28:45:3a:85:69:d3:03:24:0b:c0:dd:8a:d1:93:
         6d:53:32:1d:9a:ef:c9:9d:c2:73:bc:fe:b7:6b:8a:70:ed:de:
         5d:0c:51:f8:e2:87:26:fd:e9:c6:39:09:77:68:8c:95:57:1e:
         22:7d:3c:6c:9c:ea:46:02:f0:45:a1:9b:3a:1d:a0:9d:30:35:
         b1:55:35:45:19:64:14:60:aa:47:5e:71:e6:10:7a:43:4d:91:
         e0:a1:66:b0:3a:d0:dd:c5:ba:b4:1c:1b:08:76:cd:3a:83:91:
         a7:fb:97:9b:b5:f2:a0:55:cf:5c:37:4f:98:c3:dd:11:d3:7a:
         96:2a:57:97
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFaR7z2KQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDA0
MTgxMjMwMTdaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU1MDk0MzNlYjBm
ZjM3MjA2NTVlMmZhM2U4MzcwZjZiMWIzOWU1YTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwDSoSSQGvjA8ApBxdKdanAl/nREn3Zu1RrB0lQl3c5HhR
+o3pasiuUieh+17Is+dUo9IaMnheMDwRPYGtkmsiZBusuQ0r0wbXkHh8A4LP9Qxo
eSo35qGneftdEEMzrGYjwhARVSI0jgL+zF8a3JubpQyTnDSWPis3Pe2+p10NXNu8
X7VOiYXG+UOE4ti4ZRA3sPSQ1AokwL1QbjJcmT65XvVeDdRUo7c8c40/d39Et7R5
JG+UsgoSCJ+kVjDnVoFGMnv0EyscbQCf5mDuLrI4AUPR6TTYWcfPoSBVC6md3YT6
FxyaCf6FrrzY0RKKB13cQiFccowjE1TAv5PZVR5PAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU5QlDPrD/NyBlXi+j6DcPaxs55aYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMGM0OWNiLTg4MjctNDJhNC1h
YThhLWE1M2JjYWVkM2Y0Yi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYzQ5Y2ItODgyNy00MmE0LWFh
OGEtYTUzYmNhZWQzZjRiLzEvNVFsRFByRF9OeUJsWGktajZEY1BheHM1NWFZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBALCMOgwDQQCAAIwBwMFACoMx0AwDQYJKoZIhvcNAQELBQADggEBAIP4
ccjOZ4fBGqdKa1Byzxv+OmFjpSan8pCWSLEa0B+QLC4SC2667unV4jZbVzSbGLan
klSxtbKXuP07ZIQeK0xRh34VWKSjfbHdmKnXl0Y8tUdU5dOA6fvyg9iVbRPFe454
ZCjdXd744v5uKut+cbWeWz9YpY19l0PaxUpnNu+/lwgoRTqFadMDJAvA3YrRk21T
Mh2a78mdwnO8/rdrinDt3l0MUfjihyb96cY5CXdojJVXHiJ9PGyc6kYC8EWhmzod
oJ0wNbFVNUUZZBRgqkdeceYQekNNkeChZrA60N3FurQcGwh2zTqDkaf7l5u18qBV
z1w3T5jD3RHTepYqV5c=
-----END CERTIFICATE-----