Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79A5sdDFvQO8ckStOvXgE-s_mxs.cer
File:                     79A5sdDFvQO8ckStOvXgE-s_mxs.cer (raw, json)
Hash identifier:          WUNrJjFNYUoN3WiCBQiQIpjKd+/IqKukEDaFXBz0/GQ=
Subject key identifier:   EF:D0:39:B1:D0:C5:BD:03:BC:72:44:AD:3A:F5:E0:13:EB:3F:9B:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5D4A8B0605
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/e38e2b-2cf0-4363-a798-dd4a85a84ade/1/79A5sdDFvQO8ckStOvXgE-s_mxs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/e38e2b-2cf0-4363-a798-dd4a85a84ade/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:03:35 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.177.24.0/22
                          IP: 2a0d:c540::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400682583557 (0x5d4a8b0605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:03:35 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=efd039b1d0c5bd03bc7244ad3af5e013eb3f9b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d6:27:71:7a:94:ea:af:6c:79:43:97:d2:dd:
                    2c:d0:99:3d:0e:66:09:ed:27:cc:7c:da:c9:c3:61:
                    ff:f6:77:96:5b:ad:3f:27:f6:30:11:ca:d1:e0:db:
                    02:ca:19:70:85:bb:00:67:08:19:54:33:40:67:f7:
                    39:11:79:5c:d0:47:ab:b3:9f:b2:41:47:7e:d2:a9:
                    15:3e:07:f1:13:6b:58:76:ff:a6:8f:a7:93:be:6f:
                    ec:35:01:fa:4c:ba:25:b7:69:bd:d1:d1:61:da:52:
                    23:22:7b:7c:ff:a0:c8:c8:97:9d:65:9c:52:51:3b:
                    45:9c:b6:db:cb:9e:20:f8:a9:65:fe:82:62:36:68:
                    4a:c9:2c:2c:23:39:f7:f6:e0:60:7b:0a:40:c6:82:
                    4d:7d:a8:85:ca:8b:6b:f3:d0:99:b2:92:80:ea:02:
                    28:0c:be:6c:6a:26:d6:cd:c5:d6:40:92:27:36:e8:
                    e8:97:bd:bf:8c:61:b6:ca:60:f3:3e:e9:05:86:2a:
                    17:83:47:9f:cb:5f:a1:eb:11:58:1e:39:ed:aa:dc:
                    90:df:47:10:ef:c6:cb:8f:b4:c2:bd:b2:69:cd:81:
                    f7:0b:c2:cd:27:99:0a:4f:84:4d:d5:e6:17:e7:39:
                    2f:5d:7b:04:d5:38:9f:4f:6e:81:f3:75:90:19:da:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D0:39:B1:D0:C5:BD:03:BC:72:44:AD:3A:F5:E0:13:EB:3F:9B:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e38e2b-2cf0-4363-a798-dd4a85a84ade/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e38e2b-2cf0-4363-a798-dd4a85a84ade/1/79A5sdDFvQO8ckStOvXgE-s_mxs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.24.0/22
                IPv6:
                  2a0d:c540::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:af:f1:5c:90:0d:45:62:f8:71:8c:cd:ba:d8:91:67:07:
         91:8f:be:c1:ca:57:b3:43:95:6d:65:12:74:73:07:76:7d:de:
         72:ba:74:b4:68:4d:82:23:f1:1d:18:4a:d3:92:76:e4:87:09:
         5e:21:c0:44:ad:29:e2:cd:08:82:a1:06:a2:5e:98:ab:13:4f:
         b8:02:40:7d:ed:7e:d9:b5:7d:b0:9b:ed:08:2e:96:83:4c:81:
         54:d8:54:09:27:82:65:df:1a:90:16:34:e8:28:c9:32:bd:2e:
         67:23:01:17:78:9b:c5:1f:14:7f:ce:ae:68:23:48:fe:3a:91:
         92:a1:34:6e:06:a6:4c:ac:80:1c:bc:af:76:3e:11:6a:40:df:
         a9:e5:a8:af:58:51:23:c5:6f:72:b4:d9:f9:b5:f2:29:71:ea:
         8b:7b:4a:10:37:8b:24:8c:f8:e1:7a:00:95:6d:c9:d7:c7:da:
         29:07:47:d8:14:4e:c0:b4:80:e3:ac:64:ed:f6:6b:70:b5:e7:
         c1:d4:4f:8e:3d:c6:80:ff:cf:0d:e4:68:e0:d5:b2:48:2d:e2:
         1a:90:ad:5b:d2:93:b8:86:f9:97:63:4f:be:f8:de:29:5a:cf:
         d6:c6:db:71:46:80:cc:2b:d0:fb:44:75:56:09:58:57:e5:17:
         1b:32:70:82
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFXUqLBgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTAzMzVaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVmZDAzOWIxZDBj
NWJkMDNiYzcyNDRhZDNhZjVlMDEzZWIzZjliMWIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD11idxepTqr2x5Q5fS3SzQmT0OZgntJ8x82snDYf/2d5Zb
rT8n9jARytHg2wLKGXCFuwBnCBlUM0Bn9zkReVzQR6uzn7JBR37SqRU+B/ETa1h2
/6aPp5O+b+w1AfpMuiW3ab3R0WHaUiMie3z/oMjIl51lnFJRO0WcttvLniD4qWX+
gmI2aErJLCwjOff24GB7CkDGgk19qIXKi2vz0JmykoDqAigMvmxqJtbNxdZAkic2
6OiXvb+MYbbKYPM+6QWGKheDR5/LX6HrEVgeOe2q3JDfRxDvxsuPtMK9smnNgfcL
ws0nmQpPhE3V5hfnOS9dewTVOJ9PboHzdZAZ2nsLAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU79A5sdDFvQO8ckStOvXgE+s/mxswHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTM4ZTJiLTJjZjAtNDM2My1h
Nzk4LWRkNGE4NWE4NGFkZS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMzhlMmItMmNmMC00MzYzLWE3
OTgtZGQ0YTg1YTg0YWRlLzEvNzlBNXNkREZ2UU84Y2tTdE92WGdFLXNfbXhzLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAK5sRgwDQQCAAIwBwMFAyoNxUAwDQYJKoZIhvcNAQELBQADggEBAC3O
r/FckA1FYvhxjM262JFnB5GPvsHKV7NDlW1lEnRzB3Z93nK6dLRoTYIj8R0YStOS
duSHCV4hwEStKeLNCIKhBqJemKsTT7gCQH3tftm1fbCb7QguloNMgVTYVAkngmXf
GpAWNOgoyTK9LmcjARd4m8UfFH/OrmgjSP46kZKhNG4GpkysgBy8r3Y+EWpA36nl
qK9YUSPFb3K02fm18ilx6ot7ShA3iySM+OF6AJVtydfH2ikHR9gUTsC0gOOsZO32
a3C158HUT449xoD/zw3kaODVskgt4hqQrVvSk7iG+ZdjT7743ilaz9bG23FGgMwr
0PtEdVYJWFflFxsycII=
-----END CERTIFICATE-----