Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P98s-GWSBtjm-Cwk7G-dnm1nPgc.cer
File:                     P98s-GWSBtjm-Cwk7G-dnm1nPgc.cer (raw, json)
Hash identifier:          WmDF0LJ4AqjzgOQCnDbWNbgDrGiJJBBYWecklxBcSXg=
Subject key identifier:   3F:DF:2C:F8:65:92:06:D8:E6:F8:2C:24:EC:6F:9D:9E:6D:67:3E:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED1D36C1A55017F00764525F14BC4E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/P98s-GWSBtjm-Cwk7G-dnm1nPgc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:32:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 91.198.200.0/24
                          IP: 2a11:1300::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d1:d3:6c:1a:55:01:7f:00:76:45:25:f1:4b:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:32:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3fdf2cf8659206d8e6f82c24ec6f9d9e6d673e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:49:cb:fe:64:09:ef:eb:e6:ee:5e:49:41:
                    b0:16:57:69:80:c5:31:cf:8c:e9:59:d7:f1:68:87:
                    f8:38:b6:5c:c5:84:ce:d4:05:23:ed:95:2b:16:16:
                    e1:32:b3:9b:99:92:ca:e7:a3:26:d5:cb:b4:c9:71:
                    75:84:bf:3f:ca:15:44:55:5d:41:f4:86:af:da:8d:
                    67:ef:55:94:ac:88:41:a4:40:c7:26:ac:2a:d3:c3:
                    14:c0:8d:61:78:e0:d8:a2:23:6f:62:19:5a:99:1b:
                    a0:93:a2:98:e5:c8:01:b1:b4:aa:24:dd:1a:43:02:
                    40:fa:7f:e6:61:b7:65:75:a0:39:b2:b5:a3:d8:48:
                    cd:f6:c4:96:71:80:58:31:d9:fc:21:76:b8:99:7b:
                    b4:af:c8:96:4e:a1:a4:4f:83:09:25:76:76:37:2b:
                    9b:b2:e5:0b:9e:c8:dd:7a:2f:97:8c:76:a1:bb:b2:
                    96:ca:f4:a9:b7:29:13:21:e2:8f:22:6d:a9:8e:b5:
                    ef:4a:d0:95:9b:4a:6c:36:ae:2a:c9:85:34:76:a5:
                    42:62:33:d1:13:c8:ef:e3:84:53:0f:63:b1:da:61:
                    fd:f1:ef:b3:41:2e:ab:16:f4:a2:b1:62:60:4e:e3:
                    db:d6:91:03:dd:f3:08:06:75:81:f8:71:38:52:38:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DF:2C:F8:65:92:06:D8:E6:F8:2C:24:EC:6F:9D:9E:6D:67:3E:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/P98s-GWSBtjm-Cwk7G-dnm1nPgc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.200.0/24
                IPv6:
                  2a11:1300::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:4d:d2:2b:b2:ad:b1:0b:1d:fc:5a:ed:a9:d2:6d:4c:4a:
         48:b6:d1:8d:f4:ce:9f:5a:bf:a6:47:f7:59:a8:cd:78:a1:a6:
         fe:ea:39:94:6c:9c:ab:87:5a:40:58:c4:11:8b:9d:51:c4:a7:
         80:60:91:0f:67:6c:02:5d:72:59:b1:44:3e:c6:c4:ea:f1:52:
         42:eb:de:df:d0:18:68:41:cf:f8:2f:c3:ed:00:8c:94:26:57:
         55:6f:c6:dd:9b:4b:97:02:8d:84:67:27:4e:99:d2:de:2f:3d:
         02:ad:02:6b:37:39:f3:fb:d0:a3:6b:9e:44:f1:03:28:08:e7:
         af:e1:10:60:48:f0:1f:c7:97:14:49:77:83:c1:7c:e8:7d:e7:
         40:d4:6a:36:62:b2:27:a0:f0:37:11:55:bd:dd:47:e5:9f:02:
         ef:2f:f7:21:29:cc:79:6b:35:fa:bd:96:81:79:72:43:8a:aa:
         1b:3a:85:bf:dc:64:2c:70:01:e4:bb:7f:eb:05:40:9a:6d:81:
         05:35:98:e1:3e:8a:14:71:f3:59:db:d8:cf:26:db:2b:ba:09:
         1a:f1:71:a2:ca:47:c7:c0:38:4b:01:d3:4f:a4:e4:7d:cd:6a:
         17:b8:ef:cf:85:a9:eb:ce:67:84:1d:04:3a:d9:d5:a4:19:a5:
         44:66:c9:63
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu0dNsGlUBfwB2RSXxS8TkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmRmMmNmODY1OTIwNmQ4ZTZmODJjMjRlYzZmOWQ5ZTZkNjczZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UNJy/5kCe/r5u5eSUGwFldpgMUx
z4zpWdfxaIf4OLZcxYTO1AUj7ZUrFhbhMrObmZLK56Mm1cu0yXF1hL8/yhVEVV1B
9Iav2o1n71WUrIhBpEDHJqwq08MUwI1heODYoiNvYhlamRugk6KY5cgBsbSqJN0a
QwJA+n/mYbdldaA5srWj2EjN9sSWcYBYMdn8IXa4mXu0r8iWTqGkT4MJJXZ2Nyub
suULnsjdei+XjHahu7KWyvSptykTIeKPIm2pjrXvStCVm0psNq4qyYU0dqVCYjPR
E8jv44RTD2Ox2mH98e+zQS6rFvSisWJgTuPb1pED3fMIBnWB+HE4UjggNwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD/fLPhlkgbY5vgsJOxvnZ5tZz4HMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzYzZWZj
OS01ZTFjLTQ3NzMtOTRhMi1lNjBkZTU1NWE4YmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjNlZmM5
LTVlMWMtNDc3My05NGEyLWU2MGRlNTU1YThiZS8xL1A5OHMtR1dTQnRqbS1Dd2s3
Ry1kbm0xblBnYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW8bIMA0EAgACMAcDBQMqERMAMA0GCSqGSIb3
DQEBCwUAA4IBAQASjk3SK7KtsQsd/FrtqdJtTEpIttGN9M6fWr+mR/dZqM14oab+
6jmUbJyrh1pAWMQRi51RxKeAYJEPZ2wCXXJZsUQ+xsTq8VJC697f0BhoQc/4L8Pt
AIyUJldVb8bdm0uXAo2EZydOmdLeLz0CrQJrNznz+9Cja55E8QMoCOev4RBgSPAf
x5cUSXeDwXzofedA1Go2YrInoPA3EVW93UflnwLvL/chKcx5azX6vZaBeXJDiqob
OoW/3GQscAHku3/rBUCabYEFNZjhPooUcfNZ29jPJtsrugka8XGiykfHwDhLAdNP
pOR9zWoXuO/PhanrzmeEHQQ62dWkGaVEZslj
-----END CERTIFICATE-----