Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjuv6uuoGy19F6ILjtmH4GmMZDA.cer
File:                     zjuv6uuoGy19F6ILjtmH4GmMZDA.cer (raw, json)
Hash identifier:          N9U+CbK+I+Vi4E0skSphH3AN0L4j9ISD5o4CU0iZIyI=
Subject key identifier:   CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9C6436DB42
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:51:23 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 204897
                          IP: 185.236.144.0/22
                          IP: 2a0d:b100::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671696214850 (0x9c6436db42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:51:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce3bafeaeba81b2d7d17a20b8ed987e0698c6430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:ae:3f:36:23:d6:08:53:3a:04:ce:18:7d:
                    90:39:09:90:5e:07:13:4f:82:25:01:1f:86:01:3c:
                    0b:b7:ae:c8:fb:cd:67:fb:bc:2e:90:a7:fc:7e:73:
                    ea:37:08:ad:ea:ee:39:15:67:7c:b8:52:e8:b1:e5:
                    ab:45:98:b5:ea:58:72:5d:e7:80:d3:ed:82:bb:aa:
                    21:09:67:30:8b:76:09:a8:66:cf:5d:aa:4a:7d:9b:
                    4b:c2:ad:5a:e0:db:f5:36:4d:90:6a:60:af:06:c2:
                    fe:4b:cb:f5:1e:4e:b5:dc:9e:b7:37:bf:fc:61:01:
                    75:60:7f:c1:86:ce:61:33:62:27:bf:58:64:c1:bd:
                    b9:8f:63:c9:a7:ad:bb:34:42:72:51:69:61:6f:52:
                    27:2c:4a:a3:5b:36:94:b8:8f:85:46:56:fb:73:ad:
                    9a:6c:94:f0:36:77:8e:62:25:e8:f6:5f:9f:a0:a0:
                    3e:bf:39:cc:bd:79:2a:79:da:08:b6:68:40:ee:28:
                    d4:2b:03:f0:4c:2b:8a:5d:5a:ab:64:a6:62:cd:c1:
                    2f:03:1b:b4:53:40:78:d8:7d:37:b5:fc:55:34:71:
                    7e:1c:9b:06:89:f1:89:60:7b:2c:a1:96:20:8f:01:
                    1c:98:c9:09:56:2a:54:b8:22:2a:6a:fa:ea:ab:27:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.144.0/22
                IPv6:
                  2a0d:b100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204897

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:90:05:5a:af:f8:74:af:cf:6e:36:29:bc:89:c5:14:29:
         c7:60:41:c8:41:e9:01:d8:e6:c1:f2:6f:ee:59:18:4a:05:f7:
         3f:e8:5f:87:db:7d:70:be:a6:a8:d6:04:3f:19:17:f5:7a:51:
         8d:f5:3c:22:e0:b9:d9:13:df:20:35:09:d1:78:33:be:d6:5d:
         75:57:ce:a1:ca:a2:6f:64:04:78:44:17:9a:64:fd:32:18:7d:
         59:67:80:a3:63:84:78:f2:99:fe:ab:20:c5:5b:07:33:0b:a4:
         a7:04:83:29:82:65:47:d7:da:1e:47:23:78:7b:2e:f5:bd:85:
         a7:9c:ca:d0:70:3c:29:1a:1b:2a:11:72:93:97:b7:11:8c:06:
         d5:7d:56:48:d6:c3:3f:7e:92:7a:c4:92:d7:19:a4:c1:38:c6:
         4d:2c:ec:94:5d:8d:85:0f:7c:0f:ca:01:fc:a4:f3:f1:b3:dc:
         38:78:df:c3:38:1b:9a:b4:70:62:40:c8:b9:79:a9:ee:d0:e3:
         1e:6f:4e:c1:99:24:67:9b:34:84:88:d6:12:99:29:53:50:53:
         ea:1b:06:6e:50:fe:2a:57:7d:f4:ba:35:33:90:0e:a9:a0:01:
         df:26:ff:9e:a9:27:33:04:af:f7:dc:17:9b:23:a4:56:af:13:
         a4:7c:d5:be
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAJxkNttCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1MTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZTNiYWZlYWVi
YTgxYjJkN2QxN2EyMGI4ZWQ5ODdlMDY5OGM2NDMwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwMCuPzYj1ghTOgTOGH2QOQmQXgcTT4IlAR+GATwLt67I
+81n+7wukKf8fnPqNwit6u45FWd8uFLoseWrRZi16lhyXeeA0+2Cu6ohCWcwi3YJ
qGbPXapKfZtLwq1a4Nv1Nk2QamCvBsL+S8v1Hk613J63N7/8YQF1YH/Bhs5hM2In
v1hkwb25j2PJp627NEJyUWlhb1InLEqjWzaUuI+FRlb7c62abJTwNneOYiXo9l+f
oKA+vznMvXkqedoItmhA7ijUKwPwTCuKXVqrZKZizcEvAxu0U0B42H03tfxVNHF+
HJsGifGJYHssoZYgjwEcmMkJVipUuCIqavrqqycy1QIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFM47r+rrqBstfReiC47Zh+BpjGQwMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzU0MjZmNC0zNzU5LTRkOGUt
YWVhNC0wYTU2MWI3ZTg0YzkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNTQyNmY0LTM3NTktNGQ4ZS1h
ZWE0LTBhNTYxYjdlODRjOS8xL3pqdXY2dXVvR3kxOUY2SUxqdG1INEdtTVpEQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCueyQMA0EAgACMAcDBQMqDbEAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMgYTANBgkqhkiG9w0BAQsFAAOCAQEAnraQBVqv+HSvz242KbyJxRQpx2BB
yEHpAdjmwfJv7lkYSgX3P+hfh9t9cL6mqNYEPxkX9XpRjfU8IuC52RPfIDUJ0Xgz
vtZddVfOocqib2QEeEQXmmT9Mhh9WWeAo2OEePKZ/qsgxVsHMwukpwSDKYJlR9fa
HkcjeHsu9b2Fp5zK0HA8KRobKhFyk5e3EYwG1X1WSNbDP36SesSS1xmkwTjGTSzs
lF2NhQ98D8oB/KTz8bPcOHjfwzgbmrRwYkDIuXmp7tDjHm9OwZkkZ5s0hIjWEpkp
U1BT6hsGblD+Kld99Lo1M5AOqaAB3yb/nqknMwSv99wXmyOkVq8TpHzVvg==
-----END CERTIFICATE-----