Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8JyQ-LcoZeZREUpmvMl3SZ7sqmk.cer
File:                     8JyQ-LcoZeZREUpmvMl3SZ7sqmk.cer (raw, json)
Hash identifier:          xEpq1yOABFbGTdY4gj0dZWSvTI8iUHN6HPu5KebjeHY=
Subject key identifier:   F0:9C:90:F8:B7:28:65:E6:51:11:4A:66:BC:C9:77:49:9E:EC:AA:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       848B7EEF32
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/8JyQ-LcoZeZREUpmvMl3SZ7sqmk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:54:24 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.67.4.0/22
                          IP: 2a09:72c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569276034866 (0x848b7eef32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:54:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f09c90f8b72865e651114a66bcc977499eecaa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:c9:83:e6:61:75:19:fb:bd:60:59:26:70:
                    1d:6e:39:a6:d7:b9:15:12:b5:17:86:ff:44:bc:9f:
                    07:33:cf:a5:ee:18:cb:15:99:88:07:f9:13:d3:6b:
                    3a:03:4a:92:73:c7:01:12:22:6d:86:25:d2:cb:8e:
                    8e:ec:3c:b6:e4:0a:f3:14:fd:a0:8b:af:b1:af:e1:
                    64:f9:44:8a:ba:68:f2:e1:6c:f4:17:68:a8:74:7d:
                    a5:e9:b5:59:34:0b:7b:78:2e:b9:d1:4a:1c:08:e8:
                    33:e2:e6:c0:95:26:93:5f:98:2f:4d:e9:11:d5:8b:
                    1e:02:07:6e:35:8b:a7:0d:e1:eb:10:4d:3c:3f:a0:
                    f8:78:61:3d:98:76:18:fd:81:f5:94:91:33:bf:32:
                    5d:0f:0f:d1:a3:54:ed:70:57:22:2a:98:f3:59:f6:
                    53:81:1d:25:bd:3d:a3:9a:74:e2:83:75:d7:05:e1:
                    d7:47:2d:5a:39:39:65:e4:7e:c6:2a:a3:68:1f:26:
                    ff:35:c4:65:8a:e8:6a:e9:2b:44:e8:87:9c:dc:ac:
                    8d:c1:5f:3e:3d:dd:b2:e9:0d:fb:d8:56:49:b7:a2:
                    fe:71:c7:3f:3a:b5:59:2d:7d:28:6c:da:ad:3c:81:
                    15:1b:6e:ce:23:59:ad:d9:4a:85:6e:9e:e3:5c:9b:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:90:F8:B7:28:65:E6:51:11:4A:66:BC:C9:77:49:9E:EC:AA:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cbfbbe-050b-4815-879a-9f3153f2837c/1/8JyQ-LcoZeZREUpmvMl3SZ7sqmk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.4.0/22
                IPv6:
                  2a09:72c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:17:fb:68:41:50:34:4f:9b:d4:b9:54:a2:5e:8f:30:00:
         d0:5d:d6:a1:a9:38:3d:28:7d:6c:06:17:41:7f:5a:db:3d:9d:
         b0:b4:5c:36:3d:c6:08:cd:b6:06:37:41:33:92:41:57:5d:b4:
         07:c5:f5:8d:24:6a:d0:24:26:47:f2:d8:a1:c1:ad:ef:30:a3:
         e4:a5:a2:5c:15:91:30:b7:2c:2b:6b:1e:57:38:22:e2:d1:76:
         b6:68:36:76:f4:7e:6b:ba:06:2f:f2:d7:d6:2c:df:19:07:be:
         b8:8e:8b:0a:5b:f6:45:3b:34:d9:63:60:1e:97:ce:93:8b:58:
         79:04:fc:ed:3e:b7:d1:90:0f:ea:88:e9:c5:cf:b8:01:4a:b1:
         d2:c2:79:87:40:04:e4:19:ab:48:bc:65:51:a3:59:89:3c:21:
         c9:e4:74:37:b2:3e:cb:22:f7:9f:72:11:27:fb:72:14:08:e5:
         df:98:59:a4:6f:61:3f:ad:26:06:4e:c2:4c:af:b6:cb:4f:c7:
         0c:49:d4:dd:8d:4d:28:d7:ac:09:d3:cf:94:13:89:84:ed:c4:
         c3:41:00:22:ea:6b:3c:ed:f9:97:b2:87:fc:0c:2b:5d:25:63:
         2c:69:ec:c5:a4:6c:9e:1c:15:82:58:c8:d2:ab:fa:2b:49:39:
         2b:4c:20:36
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAISLfu8yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDc1NDI0WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmMDljOTBmOGI3
Mjg2NWU2NTExMTRhNjZiY2M5Nzc0OTllZWNhYTY5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA24nJg+ZhdRn7vWBZJnAdbjmm17kVErUXhv9EvJ8HM8+l
7hjLFZmIB/kT02s6A0qSc8cBEiJthiXSy46O7Dy25ArzFP2gi6+xr+Fk+USKumjy
4Wz0F2iodH2l6bVZNAt7eC650UocCOgz4ubAlSaTX5gvTekR1YseAgduNYunDeHr
EE08P6D4eGE9mHYY/YH1lJEzvzJdDw/Ro1TtcFciKpjzWfZTgR0lvT2jmnTig3XX
BeHXRy1aOTll5H7GKqNoHyb/NcRliuhq6StE6Iec3KyNwV8+Pd2y6Q372FZJt6L+
ccc/OrVZLX0obNqtPIEVG27OI1mt2UqFbp7jXJvjwwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFPCckPi3KGXmURFKZrzJd0me7KppMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2NiZmJiZS0wNTBiLTQ4MTUt
ODc5YS05ZjMxNTNmMjgzN2MvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvY2JmYmJlLTA1MGItNDgxNS04
NzlhLTlmMzE1M2YyODM3Yy8xLzhKeVEtTGNvWmVaUkVVcG12TWwzU1o3c3Ftay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLUMEMA0EAgACMAcDBQMqCXLAMA0GCSqGSIb3DQEBCwUAA4IBAQBO
+xf7aEFQNE+b1LlUol6PMADQXdahqTg9KH1sBhdBf1rbPZ2wtFw2PcYIzbYGN0Ez
kkFXXbQHxfWNJGrQJCZH8tihwa3vMKPkpaJcFZEwtywrax5XOCLi0Xa2aDZ29H5r
ugYv8tfWLN8ZB764josKW/ZFOzTZY2Ael86Ti1h5BPztPrfRkA/qiOnFz7gBSrHS
wnmHQATkGatIvGVRo1mJPCHJ5HQ3sj7LIvefchEn+3IUCOXfmFmkb2E/rSYGTsJM
r7bLT8cMSdTdjU0o16wJ08+UE4mE7cTDQQAi6ms87fmXsof8DCtdJWMsaezFpGye
HBWCWMjSq/orSTkrTCA2
-----END CERTIFICATE-----