Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93sIhY0Ci_HS0YEaOKPIHhHeMq4.cer
File:                     93sIhY0Ci_HS0YEaOKPIHhHeMq4.cer (raw, json)
Hash identifier:          SxFcCbj1ho1KLiFkrBmN9JoGzOeLpG0eEb38Q+743CE=
Subject key identifier:   F7:7B:08:85:8D:02:8B:F1:D2:D1:81:1A:38:A3:C8:1E:11:DE:32:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A1581DBD8F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/93sIhY0Ci_HS0YEaOKPIHhHeMq4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:55:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 213.155.224.0/19
                          IP: 2a0a:cac0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692968078735 (0xa1581dbd8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:55:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f77b08858d028bf1d2d1811a38a3c81e11de32ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:3e:99:95:ae:f6:f3:26:27:3e:eb:43:d1:
                    bb:6b:3c:55:33:8f:92:e3:76:f5:8e:52:3e:e3:e0:
                    53:cf:4f:8e:20:07:2e:85:c6:62:8f:12:d9:65:c7:
                    35:9f:0e:f6:ce:14:e4:9f:14:12:a1:13:b4:3a:e9:
                    23:da:5d:b1:29:6c:f9:4e:67:ae:5b:7a:51:a5:d4:
                    61:de:d8:6c:1c:0a:d0:4d:49:ad:2f:29:db:bd:d9:
                    34:a2:d8:5b:a0:b7:5f:11:91:95:4a:e8:2a:aa:19:
                    6a:cc:da:cf:81:6a:25:cc:a6:93:ca:e2:40:31:36:
                    1d:45:af:85:94:7b:0e:e1:5c:2b:7a:44:31:9a:df:
                    c9:ab:f1:d1:01:bf:ca:28:fd:f9:32:b5:df:a9:0e:
                    d0:89:0c:f1:e8:6c:46:47:0d:57:85:9c:28:f7:39:
                    6f:cf:c7:ab:1d:bf:58:c2:ff:fa:12:f0:22:6b:9e:
                    9b:a1:6e:26:e9:01:85:84:9a:84:86:49:6d:56:83:
                    07:79:4e:34:8d:87:47:06:21:f3:4b:61:d7:5d:ea:
                    a8:ea:ef:4a:90:79:9a:f8:c7:e1:49:06:6d:60:16:
                    9e:8b:3b:eb:84:d3:c8:8a:c5:1f:f6:dd:a3:91:83:
                    b7:0e:59:37:99:63:da:21:74:71:79:87:5a:69:f8:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:08:85:8D:02:8B:F1:D2:D1:81:1A:38:A3:C8:1E:11:DE:32:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cf6c47-791e-4656-8533-54d0fec5b8be/1/93sIhY0Ci_HS0YEaOKPIHhHeMq4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.155.224.0/19
                IPv6:
                  2a0a:cac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:45:1c:4f:21:80:d3:d1:27:e4:4b:b3:01:9b:25:c2:77:
         57:a8:c6:fc:63:2e:b9:78:22:27:94:ac:f1:d0:4b:25:57:28:
         7a:01:b6:c5:9b:91:91:ba:e8:56:a6:70:f1:8f:50:38:77:a6:
         a8:9c:aa:25:1f:22:d1:cb:9e:24:fc:a7:e2:e7:fb:f9:bd:18:
         25:97:bc:8b:f5:54:ea:f2:71:80:66:7f:3b:a4:1e:2e:03:17:
         d7:47:59:86:bf:df:73:9c:61:0f:52:25:4f:9e:61:65:95:3d:
         12:7d:0e:f2:fd:ab:d2:d3:c3:33:fe:64:82:0f:91:0f:ec:a5:
         a8:c9:b1:bb:4d:d8:34:c0:ec:0f:0c:d1:e2:aa:89:26:85:07:
         72:d8:77:4f:e3:18:9a:c5:a3:5b:fb:cb:ba:21:8c:3d:f6:4f:
         11:5f:b7:b7:cc:1e:de:8f:73:0c:2e:ef:96:e4:d1:d6:5f:2a:
         c8:fc:e9:73:3a:d8:4b:2c:f6:5b:2a:8c:49:68:43:33:c4:3d:
         eb:56:db:f9:2a:68:8c:54:ab:e2:3f:47:99:c0:92:3b:ed:ee:
         82:f0:79:38:8c:3b:79:c5:75:0c:6e:0a:de:09:9e:f4:24:3d:
         26:d9:b9:7d:1b:90:44:48:e4:24:38:0c:a3:a9:64:1b:c3:b7:
         71:b5:1e:d1
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKFYHb2PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDc1NTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNzdiMDg4NThk
MDI4YmYxZDJkMTgxMWEzOGEzYzgxZTExZGUzMmFlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvJo+mZWu9vMmJz7rQ9G7azxVM4+S43b1jlI+4+BTz0+O
IAcuhcZijxLZZcc1nw72zhTknxQSoRO0Oukj2l2xKWz5TmeuW3pRpdRh3thsHArQ
TUmtLynbvdk0othboLdfEZGVSugqqhlqzNrPgWolzKaTyuJAMTYdRa+FlHsO4Vwr
ekQxmt/Jq/HRAb/KKP35MrXfqQ7QiQzx6GxGRw1XhZwo9zlvz8erHb9Ywv/6EvAi
a56boW4m6QGFhJqEhkltVoMHeU40jYdHBiHzS2HXXeqo6u9KkHma+MfhSQZtYBae
izvrhNPIisUf9t2jkYO3Dlk3mWPaIXRxeYdaafiMdwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFPd7CIWNAovx0tGBGjijyB4R3jKuMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2NmNmM0Ny03OTFlLTQ2NTYt
ODUzMy01NGQwZmVjNWI4YmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvY2Y2YzQ3LTc5MWUtNDY1Ni04
NTMzLTU0ZDBmZWM1YjhiZS8xLzkzc0loWTBDaV9IUzBZRWFPS1BJSGhIZU1xNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQF1ZvgMA0EAgACMAcDBQMqCsrAMA0GCSqGSIb3DQEBCwUAA4IBAQCr
jEUcTyGA09En5EuzAZslwndXqMb8Yy65eCInlKzx0EslVyh6AbbFm5GRuuhWpnDx
j1A4d6aonKolHyLRy54k/Kfi5/v5vRgll7yL9VTq8nGAZn87pB4uAxfXR1mGv99z
nGEPUiVPnmFllT0SfQ7y/avS08Mz/mSCD5EP7KWoybG7Tdg0wOwPDNHiqokmhQdy
2HdP4xiaxaNb+8u6IYw99k8RX7e3zB7ej3MMLu+W5NHWXyrI/OlzOthLLPZbKoxJ
aEMzxD3rVtv5KmiMVKviP0eZwJI77e6C8Hk4jDt5xXUMbgreCZ70JD0m2bl9G5BE
SOQkOAyjqWQbw7dxtR7R
-----END CERTIFICATE-----