Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d_ZBIceSDVm-qk-U1avReAZ3Zk.cer
File:                     5d_ZBIceSDVm-qk-U1avReAZ3Zk.cer (raw, json)
Hash identifier:          oCjco1hEmgg+1fJN2fhLuJeGDh71C+r2n/fW6b1OP70=
Subject key identifier:   E5:DF:D9:04:87:1E:48:35:66:FA:A9:3E:53:56:AF:45:E0:19:DD:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7F4ECF4AC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/71711f-a38f-4b5b-af9c-f8df8594067f/1/5d_ZBIceSDVm-qk-U1avReAZ3Zk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/71711f-a38f-4b5b-af9c-f8df8594067f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:14:35 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 47841
                          IP: 91.208.181.0/24
                          IP: 95.131.136.0/21
                          IP: 146.185.40.0/21
                          IP: 185.65.112.0/22
                          IP: 2a02:c70::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546783054532 (0x7f4ecf4ac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:14:35 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e5dfd904871e483566faa93e5356af45e019dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:51:96:e6:e0:1f:cc:10:2a:32:ce:cd:9b:
                    a8:f8:d0:24:0a:0c:87:73:cb:d1:7e:0d:d1:e8:ff:
                    c0:c3:44:4c:d6:8e:6c:0f:2f:b5:ae:a1:11:03:e5:
                    70:06:df:92:57:3b:4b:1b:3a:6c:f0:f6:9b:b4:1d:
                    d7:90:20:fc:7d:a6:6b:06:96:c8:63:6d:d7:3a:e3:
                    29:ec:5c:14:e1:82:26:e1:86:0c:02:0a:52:22:7e:
                    d3:be:a4:3d:7c:c5:b1:3a:a4:fa:cd:59:7d:56:4d:
                    72:2d:0b:69:70:29:95:66:d1:eb:08:67:73:25:c6:
                    d0:64:29:d3:9f:f2:be:28:b6:03:db:9d:a6:f2:cb:
                    d3:28:88:6b:41:38:d9:c6:83:e5:70:69:cd:c0:f0:
                    ce:42:5e:2c:a6:88:2c:5b:48:4a:52:c2:ad:db:92:
                    94:02:a3:e2:02:79:70:9d:9e:6b:dd:ed:f8:f2:38:
                    de:11:a3:d8:6e:16:ad:61:78:d9:9d:af:1f:24:a1:
                    af:c6:06:59:58:e7:2c:a4:61:3c:2a:37:83:d1:07:
                    ba:5d:ea:a5:0c:80:a0:50:a6:c7:ad:8b:45:b8:05:
                    50:a4:b4:99:c9:9f:d7:0f:fe:40:d3:4d:08:df:70:
                    60:37:e3:e1:53:fa:17:d3:a8:8d:35:18:2c:18:42:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DF:D9:04:87:1E:48:35:66:FA:A9:3E:53:56:AF:45:E0:19:DD:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/71711f-a38f-4b5b-af9c-f8df8594067f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/71711f-a38f-4b5b-af9c-f8df8594067f/1/5d_ZBIceSDVm-qk-U1avReAZ3Zk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.181.0/24
                  95.131.136.0/21
                  146.185.40.0/21
                  185.65.112.0/22
                IPv6:
                  2a02:c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47841

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:dc:27:ae:f1:70:aa:76:0e:40:94:76:db:50:5b:22:39:
         ed:e0:47:64:f9:c2:18:e2:77:1a:de:63:39:0b:dc:82:0f:51:
         f1:79:de:b8:37:e5:15:2a:b0:c9:23:86:ed:91:3c:51:45:7a:
         c5:ea:3b:e9:76:43:af:28:dd:86:b9:d0:c2:e0:b1:f1:99:12:
         fb:0e:6a:e1:02:09:d2:d8:e9:a3:95:c2:74:67:4d:aa:fa:22:
         cc:f7:d2:2c:e9:98:0c:50:f8:96:38:44:99:6d:4d:ad:15:1f:
         0c:f0:7b:07:84:39:d7:17:35:4a:50:72:1b:94:5a:11:81:e5:
         1b:de:ca:7a:bf:43:21:c3:a0:ba:c3:d9:f0:31:0f:a6:51:9e:
         c7:6d:3c:c5:05:de:c6:e7:01:8a:bd:22:93:33:17:06:03:fd:
         fa:17:07:10:79:e4:5d:c2:f8:aa:5c:5e:57:6d:46:18:72:ec:
         ce:9d:f2:e0:fd:47:a9:39:11:03:77:c5:33:b0:a5:a2:6d:ea:
         e9:47:70:ae:ed:de:f2:3c:c5:c2:39:a7:af:d2:49:93:45:73:
         52:0c:f9:be:96:92:c9:55:5b:9b:36:b9:dc:b3:8b:d0:cd:e9:
         33:5f:4c:cb:a0:2e:25:c4:8d:94:6f:83:8b:bb:3d:56:b1:95:
         09:d6:e0:00
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIFf07PSsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDE0MzVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU1ZGZkOTA0ODcx
ZTQ4MzU2NmZhYTkzZTUzNTZhZjQ1ZTAxOWRkOTkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJYlGW5uAfzBAqMs7Nm6j40CQKDIdzy9F+DdHo/8DDREzW
jmwPL7WuoRED5XAG35JXO0sbOmzw9pu0HdeQIPx9pmsGlshjbdc64ynsXBThgibh
hgwCClIiftO+pD18xbE6pPrNWX1WTXItC2lwKZVm0esIZ3MlxtBkKdOf8r4otgPb
nabyy9MoiGtBONnGg+Vwac3A8M5CXiymiCxbSEpSwq3bkpQCo+ICeXCdnmvd7fjy
ON4Ro9huFq1heNmdrx8koa/GBllY5yykYTwqN4PRB7pd6qUMgKBQpseti0W4BVCk
tJnJn9cP/kDTTQjfcGA34+FT+hfTqI01GCwYQntjAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQU5d/ZBIceSDVm+qk+U1avReAZ3ZkwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNzE3MTFmLWEzOGYtNGI1Yi1h
ZjljLWY4ZGY4NTk0MDY3Zi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MTcxMWYtYTM4Zi00YjViLWFm
OWMtZjhkZjg1OTQwNjdmLzEvNWRfWkJJY2VTRFZtLXFrLVUxYXZSZUFaM1prLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4E
AgABMBgDBABb0LUDBANfg4gDBAOSuSgDBAK5QXAwDQQCAAIwBwMFACoCDHAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDALrhMA0GCSqGSIb3DQEBCwUAA4IBAQBBwtwn
rvFwqnYOQJR221BbIjnt4Edk+cIY4nca3mM5C9yCD1Hxed64N+UVKrDJI4btkTxR
RXrF6jvpdkOvKN2GudDC4LHxmRL7DmrhAgnS2OmjlcJ0Z02q+iLM99Is6ZgMUPiW
OESZbU2tFR8M8HsHhDnXFzVKUHIblFoRgeUb3sp6v0Mhw6C6w9nwMQ+mUZ7HbTzF
Bd7G5wGKvSKTMxcGA/36FwcQeeRdwviqXF5XbUYYcuzOnfLg/UepOREDd8UzsKWi
berpR3Cu7d7yPMXCOaev0kmTRXNSDPm+lpLJVVubNrncs4vQzekzX0zLoC4lxI2U
b4OLuz1WsZUJ1uAA
-----END CERTIFICATE-----