Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Hf3k6jUMEFBzbc-88rnVhGxBys.cer
File:                     6Hf3k6jUMEFBzbc-88rnVhGxBys.cer (raw, json)
Hash identifier:          7BCdFSBqYDzIC2k43d1RApcSnfDLH2FjGGgLeksF+Vo=
Subject key identifier:   E8:77:F7:93:A8:D4:30:41:41:CD:B7:3E:F3:CA:E7:56:11:B1:07:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       780CA56E00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/2d6fe8-b6dd-48a6-bd96-744f85b2cfa3/1/6Hf3k6jUMEFBzbc-88rnVhGxBys.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/2d6fe8-b6dd-48a6-bd96-744f85b2cfa3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:05:15 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.153.128.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515608243712 (0x780ca56e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:05:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e877f793a8d4304141cdb73ef3cae75611b1072b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:da:fb:18:1a:b7:db:3a:4e:a8:90:d5:92:
                    c5:27:6f:8f:a1:ba:66:73:92:07:28:36:b0:08:8d:
                    f6:a3:5a:f7:be:46:80:da:80:d5:43:55:bb:0d:a1:
                    01:60:20:c8:8f:0b:dd:00:fb:0a:67:17:70:ee:6c:
                    f5:8e:2a:91:0d:95:dc:28:d1:ac:ca:34:d1:a0:35:
                    b5:28:c7:d1:69:92:8d:e9:b8:d3:d1:f9:e8:ec:51:
                    7c:9e:d6:cd:31:a6:e8:5f:ce:4a:cc:4a:89:fd:d9:
                    78:c3:b9:7a:63:6a:4b:8b:b8:50:7b:a2:aa:4a:b6:
                    a8:f4:0d:e8:f3:1b:dc:d2:8c:0b:84:73:17:53:a8:
                    c3:ce:43:b3:69:d4:0b:e1:19:a7:96:a4:6d:06:ec:
                    e9:34:af:6a:9c:ae:88:1a:52:d0:41:da:87:83:7c:
                    d4:96:d9:d4:85:3a:81:c8:11:d5:f3:59:a5:18:d1:
                    ed:37:ec:0c:9c:74:46:71:e8:73:28:fd:c3:b8:81:
                    de:da:6f:a9:33:9c:f4:04:2c:4e:d2:9f:b3:76:13:
                    d4:04:5d:16:45:a7:21:77:06:8d:46:02:ca:96:ca:
                    44:d1:cb:13:db:ce:f2:60:99:f4:9d:93:04:10:84:
                    ce:46:fd:9c:10:7b:43:1d:01:11:d8:98:da:13:b1:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:77:F7:93:A8:D4:30:41:41:CD:B7:3E:F3:CA:E7:56:11:B1:07:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2d6fe8-b6dd-48a6-bd96-744f85b2cfa3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2d6fe8-b6dd-48a6-bd96-744f85b2cfa3/1/6Hf3k6jUMEFBzbc-88rnVhGxBys.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:45:3b:da:71:02:e7:10:2c:b4:6e:80:45:51:49:e7:74:90:
         45:ef:31:dc:9a:29:6a:5a:33:b0:8c:f6:fa:21:11:45:4f:9e:
         70:03:bf:88:63:80:eb:b3:b0:75:25:ac:36:3b:1c:b8:20:e5:
         f6:1a:ef:09:41:87:16:57:13:69:9c:d9:3f:0b:65:66:66:da:
         50:71:fc:8a:98:a7:c0:0b:9e:dc:8c:7b:28:5a:be:03:61:92:
         07:b6:c6:ef:6e:35:cc:d8:db:3c:89:cc:16:45:e6:13:6e:97:
         bd:3b:16:44:24:77:e5:7d:b6:ea:82:94:fe:f2:ec:a9:78:32:
         a6:7a:02:a7:d9:88:a5:32:43:03:77:3e:fd:cc:04:f3:ce:89:
         ab:13:cd:5f:c0:8c:a5:36:41:a3:0e:5c:ad:1c:1e:4b:93:49:
         9c:b8:36:ce:8e:da:c2:07:a1:aa:df:b5:a5:12:b7:5b:98:36:
         a7:ef:82:16:e7:03:aa:db:22:72:c8:0e:27:01:f2:58:ed:45:
         ec:dc:51:95:97:fa:40:d6:24:81:b6:3f:75:12:b4:11:6e:f2:
         e2:3f:a4:94:24:c3:4a:64:4a:7c:5b:a6:a9:55:d0:f7:20:01:
         ba:57:64:50:ba:89:f8:58:09:79:a5:da:a7:22:dc:99:79:77:
         00:e9:e7:7c
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFeAylbgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTA1MTVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU4NzdmNzkzYThk
NDMwNDE0MWNkYjczZWYzY2FlNzU2MTFiMTA3MmIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDE6tr7GBq32zpOqJDVksUnb4+humZzkgcoNrAIjfajWve+
RoDagNVDVbsNoQFgIMiPC90A+wpnF3DubPWOKpENldwo0azKNNGgNbUox9Fpko3p
uNPR+ejsUXye1s0xpuhfzkrMSon92XjDuXpjakuLuFB7oqpKtqj0DejzG9zSjAuE
cxdTqMPOQ7Np1AvhGaeWpG0G7Ok0r2qcrogaUtBB2oeDfNSW2dSFOoHIEdXzWaUY
0e037AycdEZx6HMo/cO4gd7ab6kznPQELE7Sn7N2E9QEXRZFpyF3Bo1GAsqWykTR
yxPbzvJgmfSdkwQQhM5G/ZwQe0MdARHYmNoTsQ63AgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU6Hf3k6jUMEFBzbc+88rnVhGxByswHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvMmQ2ZmU4LWI2ZGQtNDhhNi1i
ZDk2LTc0NGY4NWIyY2ZhMy8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZDZmZTgtYjZkZC00OGE2LWJk
OTYtNzQ0Zjg1YjJjZmEzLzEvNkhmM2s2alVNRUZCemJjLTg4cm5WaEd4QnlzLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItmYAwDQYJKoZIhvcNAQELBQADggEBAFBFO9pxAucQLLRugEVRSed0
kEXvMdyaKWpaM7CM9vohEUVPnnADv4hjgOuzsHUlrDY7HLgg5fYa7wlBhxZXE2mc
2T8LZWZm2lBx/IqYp8ALntyMeyhavgNhkge2xu9uNczY2zyJzBZF5hNul707FkQk
d+V9tuqClP7y7Kl4MqZ6AqfZiKUyQwN3Pv3MBPPOiasTzV/AjKU2QaMOXK0cHkuT
SZy4Ns6O2sIHoarftaUSt1uYNqfvghbnA6rbInLIDicB8ljtRezcUZWX+kDWJIG2
P3UStBFu8uI/pJQkw0pkSnxbpqlV0PcgAbpXZFC6ifhYCXml2qci3Jl5dwDp53w=
-----END CERTIFICATE-----