Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer
File:                     7Ef-zOCWGrDR-FcylqInQhesONI.cer (raw, json)
Hash identifier:          JzNnUHa01xSfCA+36NYgTLj1JHWHLXzJdC7uzkuhYjs=
Subject key identifier:   EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A125D0B741
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:53:13 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.149.8.0/22
                          IP: 185.242.64.0/22
                          IP: 2a0c:c080::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692124170049 (0xa125d0b741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:53:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:32:97:89:ac:21:bc:0d:79:ee:26:99:68:
                    57:14:cb:48:7b:04:65:1c:2d:8d:48:55:45:91:b8:
                    35:ed:70:46:89:8a:70:6e:74:7b:0f:98:88:cf:eb:
                    19:b9:64:8b:57:b1:a3:5f:b8:ef:13:61:33:5f:5e:
                    4f:62:79:7e:7c:e7:62:5b:fb:c9:20:e5:97:0c:0f:
                    48:75:ae:c9:0d:d1:1b:35:d3:fc:fc:b5:36:58:72:
                    f7:26:e6:fe:38:d0:68:79:17:f0:5f:54:b0:72:22:
                    c3:7a:ca:44:87:39:b0:e9:33:28:9d:cf:a7:64:fa:
                    12:02:56:30:80:a4:b5:ad:54:d8:91:2e:8d:4f:97:
                    dd:30:fd:90:ef:46:26:8f:ae:89:a2:a6:02:8d:8b:
                    46:f9:63:01:41:51:82:fc:8c:df:40:5e:01:ad:2c:
                    64:f3:4a:b3:49:0b:35:03:98:58:77:fc:88:41:70:
                    22:49:48:c8:13:be:5a:73:14:c0:ad:10:3d:45:ff:
                    9f:d8:76:d3:dd:f9:f6:ec:a0:e5:dc:30:e2:5c:0e:
                    0b:6c:c4:94:35:cf:4b:fa:30:f1:4f:3b:93:d4:cc:
                    df:71:98:23:0f:8d:2c:04:58:75:6f:b3:71:05:3f:
                    d0:fb:7e:40:cd:65:98:d5:a5:5d:2e:a9:5e:74:cc:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.8.0/22
                  185.242.64.0/22
                IPv6:
                  2a0c:c080::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:66:e7:b8:63:67:96:8f:d1:b2:53:5f:96:e2:1b:26:48:ed:
         64:59:8e:04:a7:2b:48:c7:c3:41:b6:b5:63:0d:1e:12:5e:37:
         93:97:85:07:67:d1:d0:b9:83:62:85:5e:24:4f:30:81:e6:b1:
         3c:d6:c8:74:ab:1d:e7:ea:fc:05:29:3c:8f:c0:9c:4a:44:60:
         84:a8:bf:a5:c4:32:46:bf:cc:fb:2d:47:a9:8f:f9:6b:8a:62:
         c0:01:11:72:80:c2:ad:09:7d:18:f3:93:a8:fd:15:35:ca:8a:
         cb:27:5d:8b:fd:6a:fa:ad:5f:c1:67:13:dc:81:32:2a:76:da:
         cc:d1:94:47:b9:53:71:01:b3:ab:b5:42:77:02:87:57:69:89:
         3e:de:af:09:8d:25:60:70:7c:71:f7:9d:88:e1:9e:83:45:22:
         ec:fe:06:09:7f:6a:3f:7a:81:e2:0c:55:e3:0a:db:be:51:61:
         98:d1:38:8f:da:3e:f5:9e:ba:c2:fc:60:cb:44:e4:43:a1:20:
         65:4e:fd:53:f9:98:7c:d8:f8:70:07:c6:26:8c:78:13:f0:67:
         b1:e0:92:61:cf:c2:a9:05:f5:0c:03:14:5f:a2:18:1b:be:90:
         94:28:15:aa:8b:9b:a2:35:a3:ca:e5:00:db:97:36:e2:0f:7f:
         ae:8a:e0:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIGAKEl0LdBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDc1MzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYzQ3ZmVjY2Uw
OTYxYWIwZDFmODU3MzI5NmEyMjc0MjE3YWMzOGQyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArwAyl4msIbwNee4mmWhXFMtIewRlHC2NSFVFkbg17XBG
iYpwbnR7D5iIz+sZuWSLV7GjX7jvE2EzX15PYnl+fOdiW/vJIOWXDA9Ida7JDdEb
NdP8/LU2WHL3Jub+ONBoeRfwX1SwciLDespEhzmw6TMonc+nZPoSAlYwgKS1rVTY
kS6NT5fdMP2Q70Ymj66JoqYCjYtG+WMBQVGC/IzfQF4BrSxk80qzSQs1A5hYd/yI
QXAiSUjIE75acxTArRA9Rf+f2HbT3fn27KDl3DDiXA4LbMSUNc9L+jDxTzuT1Mzf
cZgjD40sBFh1b7NxBT/Q+35AzWWY1aVdLqledMw+kwIDAQABo4ICmTCCApUwHQYD
VR0OBBYEFOxH/szglhqw0fhXMpaiJ0IXrDjSMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzJlNDg3Mi0xOTAzLTQyMTMt
OTU2MS00YzU1ZTQ2OTlhYjkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvMmU0ODcyLTE5MDMtNDIxMy05
NTYxLTRjNTVlNDY5OWFiOS8xLzdFZi16T0NXR3JEUi1GY3lscUluUWhlc09OSS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLZUIAwQCufJAMA0EAgACMAcDBQMqDMCAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5Zue4Y2eWj9GyU1+W4hsmSO1kWY4EpytIx8NBtrVjDR4SXjeTl4UHZ9HQ
uYNihV4kTzCB5rE81sh0qx3n6vwFKTyPwJxKRGCEqL+lxDJGv8z7LUepj/lrimLA
ARFygMKtCX0Y85Oo/RU1yorLJ12L/Wr6rV/BZxPcgTIqdtrM0ZRHuVNxAbOrtUJ3
AodXaYk+3q8JjSVgcHxx952I4Z6DRSLs/gYJf2o/eoHiDFXjCtu+UWGY0TiP2j71
nrrC/GDLRORDoSBlTv1T+Zh82PhwB8YmjHgT8Gex4JJhz8KpBfUMAxRfohgbvpCU
KBWqi5uiNaPK5QDblzbiD3+uiuA8
-----END CERTIFICATE-----