Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7zZ93F8_MRR_hjUzZ1SXZO77Umg.cer
File:                     7zZ93F8_MRR_hjUzZ1SXZO77Umg.cer (raw, json)
Hash identifier:          8GycSC3whpc53Ufx6Z4qdlZxp0nDXqeEogvCua+0j90=
Subject key identifier:   EF:36:7D:DC:5F:3F:31:14:7F:86:35:33:67:54:97:64:EE:FB:52:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77C527A55A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/7b5f4e-6c97-4ac4-9a43-9c6f39363e70/1/7zZ93F8_MRR_hjUzZ1SXZO77Umg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/7b5f4e-6c97-4ac4-9a43-9c6f39363e70/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:58:11 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.93.80.0/22
                          IP: 2a0a:c380::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514408818010 (0x77c527a55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:58:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ef367ddc5f3f31147f86353367549764eefb5268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:46:c6:d6:d9:e2:52:ce:7a:5c:d6:18:5a:e0:
                    81:cb:0b:8d:b6:c0:c2:d8:4a:53:cf:75:8f:a2:ad:
                    e9:e3:8d:31:a3:57:99:16:3a:3e:22:51:79:0d:9e:
                    e4:11:81:f7:cf:82:c6:55:9d:5b:e1:60:1d:19:3d:
                    a8:0c:e2:7a:e5:c6:ec:d7:46:9b:6c:57:9d:8e:24:
                    09:db:85:92:55:89:c0:58:16:44:6a:5e:a0:fc:98:
                    2e:a4:91:c5:b9:5b:d0:71:23:66:90:a0:8f:5d:f1:
                    b2:a0:11:0f:5e:26:65:f5:1f:e5:1d:48:09:a5:3e:
                    d0:46:76:3b:8f:f8:28:df:f2:b7:d5:40:a7:ed:0d:
                    33:4b:08:82:ca:d7:d2:d3:03:71:f1:8a:b6:ab:6d:
                    60:f6:60:0e:0e:25:27:83:a4:2a:42:97:ca:d2:30:
                    2a:09:d2:93:5e:7d:cc:36:16:06:fd:91:a3:3f:4d:
                    67:65:6f:5e:e3:6e:f6:7e:ac:e3:3d:e8:2e:aa:68:
                    5d:28:67:e3:54:f3:95:80:c5:9f:ed:94:f4:c6:62:
                    19:7d:72:a0:50:fc:73:db:2b:ec:19:7a:3d:a7:83:
                    6d:26:40:31:ae:36:95:ae:cf:99:b5:29:92:46:54:
                    e4:0f:ad:cd:fc:b5:c0:17:27:57:5f:91:53:bd:a1:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:36:7D:DC:5F:3F:31:14:7F:86:35:33:67:54:97:64:EE:FB:52:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7b5f4e-6c97-4ac4-9a43-9c6f39363e70/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7b5f4e-6c97-4ac4-9a43-9c6f39363e70/1/7zZ93F8_MRR_hjUzZ1SXZO77Umg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.80.0/22
                IPv6:
                  2a0a:c380::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:81:b7:b9:84:63:fb:5a:32:97:51:d4:59:19:cf:ca:98:
         72:1a:07:11:4d:16:60:d8:24:03:13:3a:40:9f:69:31:a0:fc:
         6a:51:54:9d:95:d4:63:21:ca:fc:10:16:59:f3:31:e3:b5:99:
         74:df:50:b5:9a:f5:b0:ff:cc:96:d7:db:56:d8:b5:71:e6:8f:
         0f:88:7e:52:32:a4:7d:cc:c3:5f:6b:8c:05:f0:ab:1f:31:8f:
         bc:92:83:11:fc:89:d7:87:62:cc:32:77:98:e7:e6:b8:d8:50:
         43:a1:27:77:fd:72:a3:96:b8:3d:ee:23:bf:99:92:f4:b1:05:
         16:f2:ec:7f:2c:f6:fb:73:5c:61:fb:03:6d:e8:66:e3:ca:6c:
         af:23:c1:1c:28:4c:f5:f0:48:ec:17:6a:f4:9d:ae:48:4f:00:
         20:27:d6:73:bd:97:04:22:4d:4a:a0:5b:0b:89:00:e3:46:b5:
         5c:ab:75:17:b4:c8:9a:e6:a0:6b:2c:53:0b:ee:aa:4e:e8:5a:
         e8:46:7d:90:56:79:92:d1:50:24:d0:2e:4e:f8:7f:1d:b7:f2:
         11:9e:9e:3f:6a:a8:b7:ae:cb:6e:5d:bf:ce:9c:2e:78:71:88:
         ff:3b:c1:aa:eb:96:c8:94:09:79:20:5f:b8:77:99:81:ac:aa:
         30:4f:f0:8f
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFd8UnpVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDU4MTFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVmMzY3ZGRjNWYz
ZjMxMTQ3Zjg2MzUzMzY3NTQ5NzY0ZWVmYjUyNjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD6RsbW2eJSznpc1hha4IHLC422wMLYSlPPdY+irenjjTGj
V5kWOj4iUXkNnuQRgffPgsZVnVvhYB0ZPagM4nrlxuzXRptsV52OJAnbhZJVicBY
FkRqXqD8mC6kkcW5W9BxI2aQoI9d8bKgEQ9eJmX1H+UdSAmlPtBGdjuP+Cjf8rfV
QKftDTNLCILK19LTA3HxirarbWD2YA4OJSeDpCpCl8rSMCoJ0pNefcw2Fgb9kaM/
TWdlb17jbvZ+rOM96C6qaF0oZ+NU85WAxZ/tlPTGYhl9cqBQ/HPbK+wZej2ng20m
QDGuNpWuz5m1KZJGVOQPrc38tcAXJ1dfkVO9oUK7AgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU7zZ93F8/MRR/hjUzZ1SXZO77UmgwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvN2I1ZjRlLTZjOTctNGFjNC05
YTQzLTljNmYzOTM2M2U3MC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83YjVmNGUtNmM5Ny00YWM0LTlh
NDMtOWM2ZjM5MzYzZTcwLzEvN3paOTNGOF9NUlJfaGpVeloxU1haTzc3VW1nLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAItXVAwDQQCAAIwBwMFAyoKw4AwDQYJKoZIhvcNAQELBQADggEBAA6w
gbe5hGP7WjKXUdRZGc/KmHIaBxFNFmDYJAMTOkCfaTGg/GpRVJ2V1GMhyvwQFlnz
MeO1mXTfULWa9bD/zJbX21bYtXHmjw+IflIypH3Mw19rjAXwqx8xj7ySgxH8ideH
Yswyd5jn5rjYUEOhJ3f9cqOWuD3uI7+ZkvSxBRby7H8s9vtzXGH7A23oZuPKbK8j
wRwoTPXwSOwXavSdrkhPACAn1nO9lwQiTUqgWwuJAONGtVyrdRe0yJrmoGssUwvu
qk7oWuhGfZBWeZLRUCTQLk74fx238hGenj9qqLeuy25dv86cLnhxiP87warrlsiU
CXkgX7h3mYGsqjBP8I8=
-----END CERTIFICATE-----