Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5u_RZchoRBdczV-qXQr8RY8LuPU.cer
File:                     5u_RZchoRBdczV-qXQr8RY8LuPU.cer (raw, json)
Hash identifier:          btpdn/f3W/dWQ1rFL2HGDrDchK4+2Nv4GtgHACAmHEE=
Subject key identifier:   E6:EF:D1:65:C8:68:44:17:5C:CD:5F:AA:5D:0A:FC:45:8F:0B:B8:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       811AB00DA2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/adb84a-2317-466c-9c20-9b64ecda6cd7/1/5u_RZchoRBdczV-qXQr8RY8LuPU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/adb84a-2317-466c-9c20-9b64ecda6cd7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:13:46 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.141.172.0/22
                          IP: 2a0e:cec0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554498526626 (0x811ab00da2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:13:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e6efd165c86844175ccd5faa5d0afc458f0bb8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:e8:20:14:fc:6c:3d:79:5d:2b:61:85:a5:
                    98:a1:8c:8b:12:d2:1d:d6:20:5a:79:e6:09:e0:96:
                    3a:08:4a:c1:28:a2:fe:f3:d2:02:2b:b9:bf:d5:c4:
                    fa:3c:39:9b:92:54:2c:21:91:b1:bb:52:e4:99:2b:
                    8d:06:8e:ef:93:2a:40:8d:e5:e8:cd:6c:34:00:16:
                    13:76:18:b9:b1:fa:08:8d:0d:a3:da:31:e2:9e:03:
                    f3:c8:c5:28:ee:25:fd:a3:3b:23:e6:d6:1c:29:9e:
                    a7:fb:f1:1b:ab:6b:f3:de:da:e7:05:0e:09:b5:15:
                    32:df:57:78:53:cf:49:ad:aa:c2:d2:f3:62:31:c9:
                    e2:1b:94:50:4e:f3:62:10:99:ca:5a:25:59:c8:61:
                    82:d6:39:20:ce:b9:c6:9e:db:f6:ec:37:c5:c5:4e:
                    0b:99:37:25:9f:10:fc:c8:12:e2:f9:2b:0f:5e:77:
                    36:d9:87:61:ac:03:b0:2d:97:6a:e9:2f:b8:82:2b:
                    ec:e1:97:fc:ea:91:dd:d9:b3:45:9e:29:1c:10:f6:
                    c8:1b:c6:87:ec:a7:0e:f2:97:41:dd:ec:89:ee:12:
                    04:7b:45:8d:83:85:3f:e5:03:c3:59:b6:cb:e2:99:
                    5d:62:20:05:f0:50:aa:94:2b:7b:4c:78:a5:3b:ba:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:D1:65:C8:68:44:17:5C:CD:5F:AA:5D:0A:FC:45:8F:0B:B8:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/adb84a-2317-466c-9c20-9b64ecda6cd7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/adb84a-2317-466c-9c20-9b64ecda6cd7/1/5u_RZchoRBdczV-qXQr8RY8LuPU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.172.0/22
                IPv6:
                  2a0e:cec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:67:d6:be:01:84:6b:30:c0:2f:8f:a4:a9:f1:33:73:50:af:
         ad:9b:ff:8c:4a:4a:52:0b:a2:8c:b6:80:0e:20:b2:e2:4f:a5:
         3a:28:63:3d:1a:6f:89:74:00:bd:d7:c3:b9:e6:eb:38:49:f3:
         6a:fd:27:ff:86:d3:a8:e1:c7:a3:18:99:3e:85:13:da:88:35:
         bc:0e:e2:2d:32:85:47:c6:4c:43:4f:eb:87:cf:25:70:49:42:
         07:50:f8:91:1d:19:3d:60:ce:2d:bf:34:30:42:c5:32:9e:7e:
         9f:4e:0f:bd:38:8d:f7:66:bf:e8:1e:40:54:1b:dc:98:a2:17:
         e1:cc:a2:72:d3:57:55:8e:6b:6e:e2:e5:40:7e:8c:8f:6c:b0:
         80:44:cc:8a:2d:aa:bf:bd:e4:7b:95:fa:4f:13:e3:0f:78:a3:
         39:63:08:a2:ce:4d:86:01:cf:e3:12:cf:55:0c:9d:7f:79:70:
         62:53:78:00:41:83:bf:f7:53:f2:b9:4d:a1:f4:b3:a3:17:dc:
         86:1b:6f:4e:8c:ca:41:ac:cc:fe:4e:6c:96:b0:60:ec:0d:43:
         fe:5d:ab:a5:b7:76:bb:0f:0e:18:bb:ec:24:9d:b6:e7:1f:79:
         86:e0:5b:26:15:54:d9:13:9b:53:6e:26:13:cc:df:12:cd:94:
         fb:40:70:8b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAIEasA2iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUxMzQ2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlNmVmZDE2NWM4
Njg0NDE3NWNjZDVmYWE1ZDBhZmM0NThmMGJiOGY1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxl3oIBT8bD15XSthhaWYoYyLEtId1iBaeeYJ4JY6CErB
KKL+89ICK7m/1cT6PDmbklQsIZGxu1LkmSuNBo7vkypAjeXozWw0ABYTdhi5sfoI
jQ2j2jHingPzyMUo7iX9ozsj5tYcKZ6n+/Ebq2vz3trnBQ4JtRUy31d4U89JrarC
0vNiMcniG5RQTvNiEJnKWiVZyGGC1jkgzrnGntv27DfFxU4LmTclnxD8yBLi+SsP
Xnc22YdhrAOwLZdq6S+4givs4Zf86pHd2bNFnikcEPbIG8aH7KcO8pdB3eyJ7hIE
e0WNg4U/5QPDWbbL4pldYiAF8FCqlCt7THilO7pydQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFObv0WXIaEQXXM1fql0K/EWPC7j1MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2FkYjg0YS0yMzE3LTQ2NmMt
OWMyMC05YjY0ZWNkYTZjZDcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYWRiODRhLTIzMTctNDY2Yy05
YzIwLTliNjRlY2RhNmNkNy8xLzV1X1JaY2hvUkJkY3pWLXFYUXI4Ulk4THVQVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLY2sMA0EAgACMAcDBQMqDs7AMA0GCSqGSIb3DQEBCwUAA4IBAQAA
Z9a+AYRrMMAvj6Sp8TNzUK+tm/+MSkpSC6KMtoAOILLiT6U6KGM9Gm+JdAC918O5
5us4SfNq/Sf/htOo4cejGJk+hRPaiDW8DuItMoVHxkxDT+uHzyVwSUIHUPiRHRk9
YM4tvzQwQsUynn6fTg+9OI33Zr/oHkBUG9yYohfhzKJy01dVjmtu4uVAfoyPbLCA
RMyKLaq/veR7lfpPE+MPeKM5Ywiizk2GAc/jEs9VDJ1/eXBiU3gAQYO/91PyuU2h
9LOjF9yGG29OjMpBrMz+TmyWsGDsDUP+Xault3a7Dw4Yu+wknbbnH3mG4FsmFVTZ
E5tTbiYTzN8SzZT7QHCL
-----END CERTIFICATE-----