Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
File:                     dmmUMWXVnyUmX7l8t3psfL-LUHc.cer (raw, json)
Hash identifier:          OOBar9LDBKS55qSDc0n0ijZ6VWso0YatbYFhzfmyd/I=
Subject key identifier:   76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D89AC3FBD231C630D3AE1D97991C2A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.72.135.0/24
                          IP: 2a11:2dc0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:ac:3f:bd:23:1c:63:0d:3a:e1:d9:79:91:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:ac:ae:14:43:98:bd:f7:0f:42:03:1a:d8:
                    bd:76:2f:f9:48:3d:7d:bb:37:e4:5c:96:a2:89:13:
                    b9:c4:b9:34:2e:c3:e9:bf:67:92:49:83:a6:0e:93:
                    43:53:0e:9e:b4:58:22:df:ae:5b:60:bf:2d:d3:c5:
                    18:a8:f4:82:ef:a2:51:15:33:3a:76:55:01:6a:b6:
                    a9:af:24:a9:07:2f:83:7e:74:97:68:99:10:f9:67:
                    32:4d:ff:f9:e5:68:8a:93:75:be:4b:83:6f:07:7f:
                    a2:40:17:76:55:9e:fd:08:6a:80:78:be:a7:ed:cd:
                    97:d3:83:44:74:81:c2:2e:d2:57:71:80:2f:df:d3:
                    00:29:46:91:b7:55:4b:00:7f:b8:ac:a7:c4:69:7d:
                    79:3f:ba:e9:dc:75:7e:83:a4:c4:62:b4:a3:50:4b:
                    d9:78:3a:b2:38:9e:8b:d0:66:27:fd:44:5c:84:b5:
                    dc:5e:b4:77:de:64:9a:44:2a:17:39:6b:2a:07:67:
                    2b:ac:f2:8f:da:fd:79:97:72:5c:da:c9:7f:14:1a:
                    d0:84:a3:8b:21:3e:c2:fc:d7:df:32:a3:bd:cc:3a:
                    a1:9e:88:60:8e:07:cd:ad:21:02:e6:2b:2e:1b:17:
                    54:11:01:09:7c:b9:a3:4f:39:93:c5:65:94:41:92:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.135.0/24
                IPv6:
                  2a11:2dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:e2:94:57:59:d7:27:e7:b2:c7:54:d1:e0:b4:f0:67:ef:
         01:ef:df:5d:70:7d:8a:29:2e:7d:d7:31:4b:6a:14:5a:41:d7:
         3e:73:8d:bd:05:d5:d0:95:69:04:a8:d9:a2:52:a3:d0:0d:0a:
         d8:95:11:d9:c3:23:d0:ec:d2:b7:69:f6:7e:8a:a6:48:25:4a:
         24:eb:6e:16:a3:04:93:94:82:7c:bd:6d:be:bb:22:2b:cb:a5:
         34:05:91:e2:77:6f:9f:9c:99:a5:44:2a:96:d0:1e:a0:60:86:
         74:0a:d3:2f:da:49:31:59:d5:b0:10:92:cd:68:79:39:65:d3:
         55:8c:82:92:83:38:06:77:07:c7:ea:08:95:e2:c9:7e:7e:c9:
         c9:53:ea:b7:2d:59:c9:a7:9f:b9:51:fa:3f:c1:ac:b2:88:a9:
         50:bf:3e:a4:bb:9f:39:02:2b:08:13:90:85:5f:de:84:35:86:
         e8:23:57:bf:15:79:6f:7d:58:29:74:e5:9e:bb:0e:44:a8:31:
         29:3b:4f:57:ec:02:76:94:78:36:72:7d:a5:8a:68:34:ae:0e:
         05:06:02:e2:dc:58:f1:ca:cc:db:00:6d:ce:8a:a4:78:95:b1:
         00:ff:5c:b3:dc:8e:3b:47:4a:14:d1:63:c7:93:db:bb:0f:30:
         9f:c2:cf:ca
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtiaw/vSMcYw064dl5kcKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjY5OTQzMTY1ZDU5ZjI1MjY1ZmI5N2NiNzdhNmM3Y2JmOGI1MDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lCsrhRDmL33D0IDGti9di/5SD19
uzfkXJaiiRO5xLk0LsPpv2eSSYOmDpNDUw6etFgi365bYL8t08UYqPSC76JRFTM6
dlUBaraprySpBy+DfnSXaJkQ+WcyTf/55WiKk3W+S4NvB3+iQBd2VZ79CGqAeL6n
7c2X04NEdIHCLtJXcYAv39MAKUaRt1VLAH+4rKfEaX15P7rp3HV+g6TEYrSjUEvZ
eDqyOJ6L0GYn/URchLXcXrR33mSaRCoXOWsqB2crrPKP2v15l3Jc2sl/FBrQhKOL
IT7C/NffMqO9zDqhnohgjgfNrSEC5isuGxdUEQEJfLmjTzmTxWWUQZK4QwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHZplDFl1Z8lJl+5fLd6bHy/i1B3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzdjZWY5
Yy03YWZmLTQ3MjctYWZhNy1jNDhlYTg1YTc1YmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvN2NlZjlj
LTdhZmYtNDcyNy1hZmE3LWM0OGVhODVhNzViYy8xL2RtbVVNV1hWbnlVbVg3bDh0
M3BzZkwtTFVIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAJUiHMA0EAgACMAcDBQMqES3AMA0GCSqGSIb3
DQEBCwUAA4IBAQBCneKUV1nXJ+eyx1TR4LTwZ+8B799dcH2KKS591zFLahRaQdc+
c429BdXQlWkEqNmiUqPQDQrYlRHZwyPQ7NK3afZ+iqZIJUok624WowSTlIJ8vW2+
uyIry6U0BZHid2+fnJmlRCqW0B6gYIZ0CtMv2kkxWdWwEJLNaHk5ZdNVjIKSgzgG
dwfH6giV4sl+fsnJU+q3LVnJp5+5Ufo/wayyiKlQvz6ku585AisIE5CFX96ENYbo
I1e/FXlvfVgpdOWeuw5EqDEpO09X7AJ2lHg2cn2limg0rg4FBgLi3FjxyszbAG3O
iqR4lbEA/1yz3I47R0oU0WPHk9u7DzCfws/K
-----END CERTIFICATE-----