Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Q7YG8fViA47gAAHKJnokbcNZ9U.cer
File:                     6Q7YG8fViA47gAAHKJnokbcNZ9U.cer (raw, json)
Hash identifier:          WESjqI2J7yGzuRk9u5cFNn2apX/Hr6uq7Fr7gtblJ6A=
Subject key identifier:   E9:0E:D8:1B:C7:D5:88:0E:3B:80:00:07:28:99:E8:91:B7:0D:67:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       688111F30B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/97d503-1d4d-4670-ba5a-73b4a413a9af/1/6Q7YG8fViA47gAAHKJnokbcNZ9U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/97d503-1d4d-4670-ba5a-73b4a413a9af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Apr 2020 12:55:21 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 46.149.160.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448842035979 (0x688111f30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 12:55:21 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e90ed81bc7d5880e3b8000072899e891b70d67d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:bc:25:98:46:e1:7c:c9:33:dd:99:a8:25:
                    49:e7:be:f7:56:8f:2c:bf:22:e0:55:e0:60:b9:43:
                    e7:0d:f2:ba:9d:53:91:52:f8:11:be:dd:8a:12:46:
                    92:0e:df:1e:ee:dc:16:87:bb:ba:be:cc:77:70:0b:
                    bd:9b:9d:c1:bb:dd:bb:0e:ee:74:95:a2:94:55:66:
                    15:ee:55:ea:bd:8a:cb:5d:e1:84:10:97:91:e3:3f:
                    57:e7:32:32:3c:3a:9b:3b:c5:1e:9f:fb:2e:70:e8:
                    54:f7:66:c8:41:11:be:37:7b:b2:4d:ea:ff:e2:fb:
                    f4:0b:b8:8d:64:29:3d:0b:c4:95:a6:d3:e2:5e:d3:
                    30:8c:f7:bb:63:5f:3b:2f:9b:8a:83:f3:e5:3f:6d:
                    89:05:34:47:0b:b0:6b:62:fb:6f:63:c6:06:0b:cf:
                    8d:5c:5e:86:5d:c1:78:0d:36:e8:5a:81:d9:c2:b1:
                    ee:c2:8e:87:5d:45:df:07:2e:c9:23:46:92:cc:a8:
                    26:1b:89:ce:1b:90:43:14:2b:8d:a2:0e:46:bc:d6:
                    80:5e:d8:a2:0f:da:d1:93:01:e9:6e:ed:9d:eb:95:
                    83:5e:4f:7c:2e:72:b5:88:38:43:ea:2f:57:f1:2d:
                    cb:3e:d1:de:4b:1c:f5:25:e9:52:5a:e3:0d:53:66:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:D8:1B:C7:D5:88:0E:3B:80:00:07:28:99:E8:91:B7:0D:67:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/97d503-1d4d-4670-ba5a-73b4a413a9af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/97d503-1d4d-4670-ba5a-73b4a413a9af/1/6Q7YG8fViA47gAAHKJnokbcNZ9U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.149.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:cb:78:ab:8c:1d:1c:29:af:c7:2c:70:7b:09:ae:c2:62:
         23:40:f0:e5:83:13:8b:2e:c8:0f:cd:e4:8d:13:79:de:5f:dc:
         6c:3e:53:69:b9:9b:fa:46:7b:88:64:c1:23:7d:50:83:84:68:
         46:6a:c4:e1:8d:b7:b1:01:d1:8e:eb:9e:78:2e:6b:04:84:62:
         da:c0:b9:6a:67:92:48:ee:31:21:23:e0:6a:1a:ff:c0:9b:c5:
         b9:a4:5d:e1:2b:c5:7e:8d:59:6d:32:fe:34:59:3b:c3:fd:ce:
         b8:61:22:1a:0d:1e:a3:44:b4:f8:59:64:3d:c1:17:af:8c:90:
         55:a9:17:cf:60:0d:f6:7f:75:16:3a:21:64:f0:47:06:56:e6:
         e7:f5:5b:24:cf:7f:79:d8:a2:c0:39:20:de:3b:28:4d:17:19:
         49:b6:d6:19:2b:18:c5:b1:30:8c:3e:65:2b:ff:35:8b:cb:03:
         f2:82:a5:bf:ab:25:b3:94:25:b8:18:c2:b5:79:97:bb:9f:3f:
         67:d4:df:7e:98:a5:25:41:5f:79:49:f8:3b:55:ce:48:06:65:
         1a:ff:ef:16:04:8e:48:65:93:7d:84:2b:44:f3:14:4e:68:00:
         18:c0:d3:50:ae:f1:dc:c4:39:7d:64:3c:90:02:6f:71:5c:01:
         28:dd:dd:06
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFaIER8wswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDA0
MDIxMjU1MjFaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU5MGVkODFiYzdk
NTg4MGUzYjgwMDAwNzI4OTllODkxYjcwZDY3ZDUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0eLwlmEbhfMkz3ZmoJUnnvvdWjyy/IuBV4GC5Q+cN8rqd
U5FS+BG+3YoSRpIO3x7u3BaHu7q+zHdwC72bncG73bsO7nSVopRVZhXuVeq9istd
4YQQl5HjP1fnMjI8Ops7xR6f+y5w6FT3ZshBEb43e7JN6v/i+/QLuI1kKT0LxJWm
0+Je0zCM97tjXzsvm4qD8+U/bYkFNEcLsGti+29jxgYLz41cXoZdwXgNNuhagdnC
se7CjoddRd8HLskjRpLMqCYbic4bkEMUK42iDka81oBe2KIP2tGTAelu7Z3rlYNe
T3wucrWIOEPqL1fxLcs+0d5LHPUl6VJa4w1TZh0zAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU6Q7YG8fViA47gAAHKJnokbcNZ9UwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvOTdkNTAzLTFkNGQtNDY3MC1i
YTVhLTczYjRhNDEzYTlhZi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85N2Q1MDMtMWQ0ZC00NjcwLWJh
NWEtNzNiNGE0MTNhOWFmLzEvNlE3WUc4ZlZpQTQ3Z0FBSEtKbm9rYmNOWjlVLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAIulaAwDQYJKoZIhvcNAQELBQADggEBAC6yy3irjB0cKa/HLHB7Ca7C
YiNA8OWDE4suyA/N5I0Ted5f3Gw+U2m5m/pGe4hkwSN9UIOEaEZqxOGNt7EB0Y7r
nnguawSEYtrAuWpnkkjuMSEj4Goa/8CbxbmkXeErxX6NWW0y/jRZO8P9zrhhIhoN
HqNEtPhZZD3BF6+MkFWpF89gDfZ/dRY6IWTwRwZW5uf1WyTPf3nYosA5IN47KE0X
GUm21hkrGMWxMIw+ZSv/NYvLA/KCpb+rJbOUJbgYwrV5l7ufP2fU336YpSVBX3lJ
+DtVzkgGZRr/7xYEjkhlk32EK0TzFE5oABjA01Cu8dzEOX1kPJACb3FcASjd3QY=
-----END CERTIFICATE-----