Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fPM86fe07BF_kDFTw0aJ8L6F4M.cer
File:                     8fPM86fe07BF_kDFTw0aJ8L6F4M.cer (raw, json)
Hash identifier:          KFbUUad9bQg5L70CMCO5bc5wrdG+c62ckbmnXdtRMxc=
Subject key identifier:   F1:F3:CC:F3:A7:DE:D3:B0:45:FE:40:C5:4F:0D:1A:27:C2:FA:17:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7DF9E97D1C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/8fPM86fe07BF_kDFTw0aJ8L6F4M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:40:06 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 62020
                          IP: 45.159.12.0/22
                          IP: 185.9.0.0/22
                          IP: 2a03:4440::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541063740700 (0x7df9e97d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:40:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f1f3ccf3a7ded3b045fe40c54f0d1a27c2fa1783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:e9:ba:e1:6c:91:0a:4e:ad:58:cd:7e:61:
                    d1:76:6d:b3:73:74:b2:64:7c:b9:3a:b1:50:c1:94:
                    66:0e:93:10:ac:ca:4d:14:f4:8b:62:fa:a2:60:f2:
                    ee:56:5d:60:df:de:51:3f:fe:17:99:c3:13:28:d7:
                    ae:22:b2:65:3e:8f:c8:db:08:be:e2:5a:2d:a4:83:
                    89:20:f4:ab:90:48:25:f4:82:7a:b5:6c:35:ad:07:
                    42:6d:75:8a:22:ce:bc:6d:d8:ff:d8:17:17:57:c4:
                    f9:12:eb:e7:03:ef:26:92:76:de:af:85:a7:d7:06:
                    80:70:0e:c5:4a:3b:c5:78:17:12:9f:02:c2:26:a2:
                    64:db:b3:b2:11:02:51:2a:32:a5:12:cf:ec:a3:19:
                    ac:fb:f7:07:24:b8:3c:3d:65:28:f4:47:c9:7c:15:
                    36:17:8c:1d:93:b9:f4:ec:f2:8b:15:a2:23:cb:79:
                    89:eb:61:f1:b8:af:ae:be:e8:a2:fd:9f:17:d6:77:
                    bd:03:a8:d4:d2:c6:a3:10:3c:94:10:6c:e0:6a:fb:
                    0f:5a:32:f1:b9:e3:07:3a:d0:65:9b:b6:75:4d:9f:
                    4a:3c:39:38:41:5f:96:7b:51:0c:1a:ae:dc:b5:c4:
                    75:b7:fc:27:47:48:61:40:b7:de:d9:74:07:67:a9:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:CC:F3:A7:DE:D3:B0:45:FE:40:C5:4F:0D:1A:27:C2:FA:17:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/cd701f-77ac-4e97-95b0-d5ff17635187/1/8fPM86fe07BF_kDFTw0aJ8L6F4M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.12.0/22
                  185.9.0.0/22
                IPv6:
                  2a03:4440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62020

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:e3:f7:a3:ba:df:3b:b1:48:d9:ef:50:ba:ef:63:2c:49:
         e2:d7:e7:46:fa:35:a9:fe:20:94:07:92:cf:a9:c5:0b:a7:c3:
         1f:36:50:6a:82:41:62:e1:81:1d:b7:f7:40:cf:17:3c:be:bb:
         77:6b:7b:a8:9d:7e:98:33:96:df:06:23:d7:4a:dc:5a:60:e3:
         93:f9:eb:41:19:c1:a7:46:0e:a8:ca:d1:68:a6:3e:05:fe:5d:
         83:a5:f9:82:c5:a5:c0:32:4b:94:f1:ae:a0:d5:12:7e:68:6a:
         ab:ba:fb:d6:40:0f:aa:71:80:22:30:1e:b7:29:a5:73:1b:2e:
         f9:47:43:f1:64:d3:89:86:99:0b:72:3e:b3:81:14:cf:e3:d1:
         c9:6f:8a:7a:1e:c8:0d:96:58:cf:22:8f:42:ca:1f:9b:e0:5e:
         d3:7f:dc:5d:41:b9:b1:2a:3b:81:b8:aa:fc:30:37:7d:69:bc:
         db:28:7e:c7:cd:b6:78:cb:8d:4a:b3:7b:0f:44:ac:f1:a5:15:
         39:eb:5c:96:a5:ce:8f:31:04:22:f2:61:92:d0:1e:20:a0:37:
         d4:48:7b:19:96:d4:21:68:17:63:ca:94:94:ed:f5:8c:2f:47:
         aa:17:d4:a8:6b:19:18:b5:e0:1c:69:30:e5:0d:fc:ff:d3:d3:
         6b:a7:ec:ed
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIFffnpfRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzQwMDZaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGYxZjNjY2YzYTdk
ZWQzYjA0NWZlNDBjNTRmMGQxYTI3YzJmYTE3ODMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeoem64WyRCk6tWM1+YdF2bbNzdLJkfLk6sVDBlGYOkxCs
yk0U9Iti+qJg8u5WXWDf3lE//heZwxMo164ismU+j8jbCL7iWi2kg4kg9KuQSCX0
gnq1bDWtB0JtdYoizrxt2P/YFxdXxPkS6+cD7yaSdt6vhafXBoBwDsVKO8V4FxKf
AsImomTbs7IRAlEqMqUSz+yjGaz79wckuDw9ZSj0R8l8FTYXjB2TufTs8osVoiPL
eYnrYfG4r66+6KL9nxfWd70DqNTSxqMQPJQQbOBq+w9aMvG54wc60GWbtnVNn0o8
OThBX5Z7UQwarty1xHW3/CdHSGFAt97ZdAdnqbn1AgMBAAGjggK1MIICsTAdBgNV
HQ4EFgQU8fPM86fe07BF/kDFTw0aJ8L6F4MwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvY2Q3MDFmLTc3YWMtNGU5Ny05
NWIwLWQ1ZmYxNzYzNTE4Ny8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jZDcwMWYtNzdhYy00ZTk3LTk1
YjAtZDVmZjE3NjM1MTg3LzEvOGZQTTg2ZmUwN0JGX2tERlR3MGFKOEw2RjRNLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIE
AgABMAwDBAItnwwDBAK5CQAwDQQCAAIwBwMFAyoDREAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDAPJEMA0GCSqGSIb3DQEBCwUAA4IBAQARC+P3o7rfO7FI2e9Quu9j
LEni1+dG+jWp/iCUB5LPqcULp8MfNlBqgkFi4YEdt/dAzxc8vrt3a3uonX6YM5bf
BiPXStxaYOOT+etBGcGnRg6oytFopj4F/l2DpfmCxaXAMkuU8a6g1RJ+aGqruvvW
QA+qcYAiMB63KaVzGy75R0PxZNOJhpkLcj6zgRTP49HJb4p6HsgNlljPIo9Cyh+b
4F7Tf9xdQbmxKjuBuKr8MDd9abzbKH7HzbZ4y41Ks3sPRKzxpRU561yWpc6PMQQi
8mGS0B4goDfUSHsZltQhaBdjypSU7fWML0eqF9SoaxkYteAcaTDlDfz/09Nrp+zt
-----END CERTIFICATE-----