Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qZB0hh762ZkELtqU-RAK8QeklA.cer
File:                     9qZB0hh762ZkELtqU-RAK8QeklA.cer (raw, json)
Hash identifier:          VSEZw/CGi9li3o4zGDP0fxyyS5F38IiZeZ0BYBFev74=
Subject key identifier:   F6:A6:41:D2:18:7B:EB:66:64:10:BB:6A:53:E4:40:2B:C4:1E:92:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8158E6A6D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/7e7cca-5266-420b-b8b0-0adc537c45f0/1/9qZB0hh762ZkELtqU-RAK8QeklA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/7e7cca-5266-420b-b8b0-0adc537c45f0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:22:26 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 208392
                          IP: 45.93.20.0/22
                          IP: 2a05:6640::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555542292184 (0x8158e6a6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:22:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f6a641d2187beb666410bb6a53e4402bc41e9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:6e:b5:49:cf:f7:50:9d:e1:e1:d3:e4:af:
                    f0:c8:9b:db:4b:a8:a6:f8:50:66:20:ee:75:57:be:
                    95:d8:e2:cb:b3:f9:9c:08:d4:4c:88:ac:66:ba:1f:
                    1e:10:7f:82:6b:3e:dd:4d:4d:8d:e1:fc:19:c8:15:
                    ed:b0:46:18:6d:3d:ba:bd:f5:9f:9e:00:5c:69:7b:
                    53:3a:1f:70:47:0c:2a:f8:b1:98:03:ad:8b:f2:49:
                    89:79:00:62:63:59:35:f2:b6:55:45:a7:f2:70:30:
                    a2:3b:48:bf:03:8b:c2:e5:9e:25:6e:b9:69:cc:61:
                    18:e8:84:96:af:e6:13:38:e7:30:b4:83:f8:54:07:
                    ca:9e:a1:5c:57:ab:e4:69:96:46:69:2a:5d:0a:57:
                    59:11:8e:1f:70:50:c7:2e:5a:2f:c6:56:a0:1e:e2:
                    19:2b:1a:7d:99:00:11:09:9e:47:0b:47:ca:63:6b:
                    74:b1:69:ed:66:1b:69:96:62:8a:ab:6e:bc:e2:41:
                    10:bb:30:75:32:57:9c:6d:99:78:76:fa:d5:43:53:
                    cf:80:61:d6:5d:4c:8e:94:0f:e1:c2:aa:68:e3:ef:
                    f7:0f:a4:81:a5:c2:21:d7:00:ac:fb:c0:08:7d:a7:
                    f3:a6:f4:60:9a:61:5d:fb:d0:7c:75:2e:61:94:6a:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:41:D2:18:7B:EB:66:64:10:BB:6A:53:E4:40:2B:C4:1E:92:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e7cca-5266-420b-b8b0-0adc537c45f0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e7cca-5266-420b-b8b0-0adc537c45f0/1/9qZB0hh762ZkELtqU-RAK8QeklA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.20.0/22
                IPv6:
                  2a05:6640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208392

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:a5:db:58:08:a6:9d:02:5b:4a:c3:e6:7e:e9:6b:a6:6c:
         88:ff:66:d6:da:2a:65:67:29:ef:87:7c:2e:98:65:f1:f9:a3:
         ec:47:eb:bb:77:87:dd:40:45:26:bf:74:11:ac:b3:fb:8f:1c:
         b0:c0:50:34:fe:58:ec:b6:df:eb:70:c9:06:b2:45:a5:ab:57:
         87:20:4b:b4:2a:2b:f2:36:35:33:2e:fe:61:85:f9:8f:aa:bc:
         fd:3b:56:96:83:5d:a5:e5:6e:ec:a5:1e:cc:ef:72:c2:34:bd:
         8c:ce:e3:89:c1:18:8d:f7:5a:87:04:be:ef:64:25:69:ab:80:
         4e:32:ed:c6:4d:72:0e:70:5f:a3:ca:c6:ca:e8:24:b8:b9:46:
         ae:d1:f7:0c:b2:16:3b:4d:84:97:c5:e3:41:14:89:5f:48:34:
         1b:5a:5c:79:c8:b5:4d:ef:25:18:2b:dc:e2:57:41:da:eb:99:
         61:0f:e4:66:1e:fc:ee:58:ed:ea:75:1e:5d:05:9d:7a:6c:0c:
         6c:20:2f:6b:a2:cc:84:98:15:62:e5:9f:b6:75:4a:7e:10:1a:
         bd:7b:0f:dc:aa:59:19:d3:37:0f:c2:f3:c1:63:4b:bb:a7:dd:
         c6:f3:87:b8:3e:a9:f4:6f:e7:aa:fb:b4:ec:2a:18:a9:25:6a:
         8c:5b:5e:1b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAIFY5qbYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUyMjI2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNmE2NDFkMjE4
N2JlYjY2NjQxMGJiNmE1M2U0NDAyYmM0MWU5MjUwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArq1utUnP91Cd4eHT5K/wyJvbS6im+FBmIO51V76V2OLL
s/mcCNRMiKxmuh8eEH+Caz7dTU2N4fwZyBXtsEYYbT26vfWfngBcaXtTOh9wRwwq
+LGYA62L8kmJeQBiY1k18rZVRafycDCiO0i/A4vC5Z4lbrlpzGEY6ISWr+YTOOcw
tIP4VAfKnqFcV6vkaZZGaSpdCldZEY4fcFDHLlovxlagHuIZKxp9mQARCZ5HC0fK
Y2t0sWntZhtplmKKq2684kEQuzB1MlecbZl4dvrVQ1PPgGHWXUyOlA/hwqpo4+/3
D6SBpcIh1wCs+8AIfafzpvRgmmFd+9B8dS5hlGoTZwIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFPamQdIYe+tmZBC7alPkQCvEHpJQMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzdlN2NjYS01MjY2LTQyMGIt
YjhiMC0wYWRjNTM3YzQ1ZjAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvN2U3Y2NhLTUyNjYtNDIwYi1i
OGIwLTBhZGM1MzdjNDVmMC8xLzlxWkIwaGg3NjJaa0VMdHFVLVJBSzhRZWtsQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLV0UMA0EAgACMAcDBQMqBWZAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMuCDANBgkqhkiG9w0BAQsFAAOCAQEAA6ul21gIpp0CW0rD5n7pa6ZsiP9m
1toqZWcp74d8Lphl8fmj7Efru3eH3UBFJr90Eayz+48csMBQNP5Y7Lbf63DJBrJF
patXhyBLtCor8jY1My7+YYX5j6q8/TtWloNdpeVu7KUezO9ywjS9jM7jicEYjfda
hwS+72QlaauATjLtxk1yDnBfo8rGyugkuLlGrtH3DLIWO02El8XjQRSJX0g0G1pc
eci1Te8lGCvc4ldB2uuZYQ/kZh787ljt6nUeXQWdemwMbCAva6LMhJgVYuWftnVK
fhAavXsP3KpZGdM3D8LzwWNLu6fdxvOHuD6p9G/nqvu07CoYqSVqjFteGw==
-----END CERTIFICATE-----