Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PNFXasIrdA2mqvMlN_4xl8-ALB8.cer
File:                     PNFXasIrdA2mqvMlN_4xl8-ALB8.cer (raw, json)
Hash identifier:          Gb5agY2CoZe/63uzZagvs4FKGFGAPnOMGyQur9cuZE4=
Subject key identifier:   3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B2E9A96FD2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 08 Jun 2022 09:01:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 208105
                          IP: 2a0f:8d80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768424374226 (0xb2e9a96fd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  8 09:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cd1576ac22b740da6aaf32537fe3197cf802c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:07:3c:8d:4e:dd:36:dd:42:50:af:df:7d:
                    65:49:a7:6d:a2:9d:8f:fa:8a:64:3e:02:f6:97:34:
                    4f:e9:99:49:5e:35:36:3e:3c:a8:04:dc:71:f2:b3:
                    1b:f1:08:e2:77:bf:39:f7:d1:c6:6b:78:42:b7:f5:
                    b9:b6:e2:03:58:46:1f:53:46:d9:cc:41:64:d4:9f:
                    7c:19:a1:5e:b5:95:96:5e:9f:7d:a4:35:93:be:c2:
                    9f:1c:1d:a6:38:8c:4b:94:e6:1e:3e:78:a4:e0:5d:
                    a3:40:ba:01:45:19:f8:72:2d:5f:00:87:e5:28:4f:
                    e5:75:8f:35:b8:1a:d5:c7:d2:67:04:e3:3a:c6:77:
                    68:e2:11:bc:0e:52:22:e8:ef:bc:2b:6f:fc:71:ef:
                    59:80:68:7f:29:c1:8c:fc:e4:88:ea:38:46:f3:25:
                    4b:9a:b2:67:87:47:ec:d1:45:97:dc:b7:74:88:fc:
                    57:35:3d:1c:ef:fb:c3:5b:89:34:6c:3b:0e:9e:68:
                    7a:11:fd:e7:d8:62:71:0a:4f:52:83:c9:37:3d:7e:
                    c5:be:c5:59:68:b1:a7:2d:ea:f9:e1:6d:57:eb:d3:
                    a0:08:a7:db:26:0e:fc:b3:cf:6e:f7:08:0a:e9:b6:
                    02:68:ca:eb:e2:6c:1c:96:ec:74:78:39:ff:15:aa:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:8d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208105

    Signature Algorithm: sha256WithRSAEncryption
         38:af:23:2d:c6:fa:9f:f6:3c:8a:b3:87:46:92:66:f9:8d:8f:
         d4:90:04:5b:23:5e:21:f2:42:42:49:6b:ac:76:47:e9:d6:36:
         f0:7c:4f:1c:62:64:07:1c:fb:b8:b2:a6:c6:91:37:97:ed:fa:
         33:69:27:28:42:b2:75:2c:c5:df:24:ea:4c:9a:ab:7b:cd:3e:
         19:61:09:21:f6:88:d3:1a:ee:0b:07:a8:44:1c:63:d1:38:69:
         63:81:e1:cc:1c:42:f6:ea:57:ca:9a:72:53:54:ec:de:23:2c:
         36:49:73:37:c2:7d:13:63:7f:22:2b:80:42:9f:6f:4c:fa:81:
         44:8e:77:da:36:16:85:d9:e0:27:d5:d9:3a:20:cd:77:9c:f7:
         81:42:cc:49:91:bd:66:2e:30:7e:74:c8:f3:18:4f:5f:d3:22:
         dd:21:0e:c7:ac:41:63:45:de:f7:b3:b9:b0:0f:46:58:e3:e3:
         7a:24:6f:6f:39:30:63:ad:43:31:ce:53:f7:21:67:26:a3:8f:
         42:aa:31:88:e0:10:41:1d:21:de:ea:0b:79:7c:b8:85:48:4b:
         9e:87:ca:54:c9:6b:67:13:0e:2f:1c:d7:bd:51:30:ce:e8:f7:
         50:21:02:50:36:92:27:09:33:fc:fd:78:e3:30:f7:0b:5c:46:
         ea:0d:f9:0f
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIGALLpqW/SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjA4MDkwMTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzY2QxNTc2YWMy
MmI3NDBkYTZhYWYzMjUzN2ZlMzE5N2NmODAyYzFmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlqUHPI1O3TbdQlCv331lSadtop2P+opkPgL2lzRP6ZlJ
XjU2PjyoBNxx8rMb8Qjid78599HGa3hCt/W5tuIDWEYfU0bZzEFk1J98GaFetZWW
Xp99pDWTvsKfHB2mOIxLlOYePnik4F2jQLoBRRn4ci1fAIflKE/ldY81uBrVx9Jn
BOM6xndo4hG8DlIi6O+8K2/8ce9ZgGh/KcGM/OSI6jhG8yVLmrJnh0fs0UWX3Ld0
iPxXNT0c7/vDW4k0bDsOnmh6Ef3n2GJxCk9Sg8k3PX7FvsVZaLGnLer54W1X69Og
CKfbJg78s89u9wgK6bYCaMrr4mwclux0eDn/FaoHnQIDAQABo4ICoTCCAp0wHQYD
VR0OBBYEFDzRV2rCK3QNpqrzJTf+MZfPgCwfMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzk3NWJlZS1kMWM2LTQxOTIt
OTc2Mi0zMzU1OTcxODc2YmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvOTc1YmVlLWQxYzYtNDE5Mi05
NzYyLTMzNTU5NzE4NzZiZS8xL1BORlhhc0lyZEEybXF2TWxOXzR4bDgtQUxCOC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKg+NgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLOkwDQYJKoZI
hvcNAQELBQADggEBADivIy3G+p/2PIqzh0aSZvmNj9SQBFsjXiHyQkJJa6x2R+nW
NvB8TxxiZAcc+7iypsaRN5ft+jNpJyhCsnUsxd8k6kyaq3vNPhlhCSH2iNMa7gsH
qEQcY9E4aWOB4cwcQvbqV8qaclNU7N4jLDZJczfCfRNjfyIrgEKfb0z6gUSOd9o2
FoXZ4CfV2TogzXec94FCzEmRvWYuMH50yPMYT1/TIt0hDsesQWNF3vezubAPRljj
43okb285MGOtQzHOU/chZyajj0KqMYjgEEEdId7qC3l8uIVIS56HylTJa2cTDi8c
171RMM7o91AhAlA2kicJM/z9eOMw9wtcRuoN+Q8=
-----END CERTIFICATE-----