Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer
File:                     ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer (raw, json)
Hash identifier:          uqfuqoYa3N5GJLLYMpzam881T1fKOD3q+YP8ZDE7DPk=
Subject key identifier:   64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0DA4C2DF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/ZDAVJa4IUHBB2n2o86PdEYl5-0c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:02:10 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 208183
                          IP: 45.152.228.0/22
                          IP: 2a0f:6500::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690857192951 (0xa0da4c2df7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64301525ae08507041da7da8f3a3dd118979fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:fd:0d:29:0f:fd:ad:f7:94:48:bf:5e:cf:
                    09:31:3f:b8:70:57:6c:18:d0:0b:68:e8:a4:3b:27:
                    78:f7:68:3a:22:10:02:e6:81:e2:cc:e4:ac:41:18:
                    87:65:b7:de:fe:03:28:b8:34:36:ff:69:a3:00:cd:
                    4a:f9:7b:74:e5:01:66:ac:f1:ef:23:41:1b:13:4c:
                    32:2b:42:dc:d8:47:37:0e:48:43:96:de:32:30:e3:
                    20:4a:d9:17:a5:22:fa:07:7a:9c:a8:bf:ae:7e:38:
                    7f:a8:22:55:6a:fc:52:b9:b6:0d:e5:b3:4a:56:19:
                    78:1e:37:c4:1a:50:e2:00:8d:4c:7f:be:0f:99:71:
                    42:16:ce:5d:2d:cc:8b:50:49:d8:d0:1c:48:71:60:
                    ac:96:60:47:f2:ac:67:99:7c:ac:0a:9f:1a:69:0e:
                    e5:f5:86:1f:c2:9e:e7:56:f2:78:ec:01:5d:db:2b:
                    13:f3:1d:59:80:53:ec:e2:88:dd:1e:25:02:64:6b:
                    26:0e:0d:01:3b:13:15:43:59:9a:96:19:ec:d5:0d:
                    6c:fd:77:6f:12:78:18:8b:f4:40:c8:49:df:34:c4:
                    f6:34:af:f0:83:26:e4:d3:2e:2e:93:05:06:55:c3:
                    4f:d3:c7:23:8e:6c:e0:fc:a8:b9:82:81:0e:4a:cf:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/ZDAVJa4IUHBB2n2o86PdEYl5-0c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.228.0/22
                IPv6:
                  2a0f:6500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208183

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:57:6a:76:94:9f:ab:20:d2:e5:7b:01:d9:31:0b:4d:e9:
         90:87:67:63:f8:b1:39:b1:a2:a9:2e:5a:05:88:b0:63:e1:58:
         3f:dd:85:d9:59:2d:7c:63:0b:77:5a:ea:be:11:50:b3:e5:39:
         02:8e:d5:78:04:e7:8e:7b:6e:11:5e:bf:ea:29:4a:3b:fe:1b:
         f3:30:c4:c7:99:53:79:d8:aa:50:5b:26:59:bb:2f:83:46:af:
         00:32:04:6c:61:8d:6f:e4:ee:b5:c5:0a:55:c3:ac:7e:28:47:
         28:ac:24:7b:ef:c9:64:c1:97:36:12:f9:4f:de:59:40:d4:d7:
         cc:1d:10:13:91:14:3f:29:ca:dd:73:2a:22:60:b1:b3:ca:d4:
         ca:c5:b0:08:c0:57:b2:5d:23:01:64:ff:c5:b9:e4:71:eb:a3:
         a8:6e:9a:bc:0d:d5:77:60:ab:25:86:7a:e2:a8:b7:c3:71:19:
         7e:73:6c:c3:7d:0c:bc:6e:1a:67:f0:4a:b6:91:cf:5a:bf:ae:
         58:6b:82:8e:95:6a:52:c2:31:67:7f:93:e3:1d:f8:22:e8:f4:
         c7:c9:8a:96:81:6e:70:68:e2:d9:16:9e:ee:b9:bd:b1:46:29:
         4e:f9:2d:bb:a3:49:a5:ea:41:6d:a4:46:33:21:10:89:ac:36:
         1a:59:0e:fc
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKDaTC33MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDcwMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NDMwMTUyNWFl
MDg1MDcwNDFkYTdkYThmM2EzZGQxMTg5NzlmYjQ3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA59n9DSkP/a33lEi/Xs8JMT+4cFdsGNALaOikOyd492g6
IhAC5oHizOSsQRiHZbfe/gMouDQ2/2mjAM1K+Xt05QFmrPHvI0EbE0wyK0Lc2Ec3
DkhDlt4yMOMgStkXpSL6B3qcqL+ufjh/qCJVavxSubYN5bNKVhl4HjfEGlDiAI1M
f74PmXFCFs5dLcyLUEnY0BxIcWCslmBH8qxnmXysCp8aaQ7l9YYfwp7nVvJ47AFd
2ysT8x1ZgFPs4ojdHiUCZGsmDg0BOxMVQ1malhns1Q1s/XdvEngYi/RAyEnfNMT2
NK/wgybk0y4ukwUGVcNP08cjjmzg/Ki5goEOSs9kqQIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFGQwFSWuCFBwQdp9qPOj3RGJeftHMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2M2OGQ4ZC00ODRhLTQ0Y2It
YTQzMy03OWZiMWRkMTRmNjIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYzY4ZDhkLTQ4NGEtNDRjYi1h
NDMzLTc5ZmIxZGQxNGY2Mi8xL1pEQVZKYTRJVUhCQjJuMm84NlBkRVlsNS0wYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLZjkMA0EAgACMAcDBQMqD2UAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMtNzANBgkqhkiG9w0BAQsFAAOCAQEAaI1XanaUn6sg0uV7AdkxC03pkIdn
Y/ixObGiqS5aBYiwY+FYP92F2VktfGMLd1rqvhFQs+U5Ao7VeATnjntuEV6/6ilK
O/4b8zDEx5lTediqUFsmWbsvg0avADIEbGGNb+TutcUKVcOsfihHKKwke+/JZMGX
NhL5T95ZQNTXzB0QE5EUPynK3XMqImCxs8rUysWwCMBXsl0jAWT/xbnkceujqG6a
vA3Vd2CrJYZ64qi3w3EZfnNsw30MvG4aZ/BKtpHPWr+uWGuCjpVqUsIxZ3+T4x34
Iuj0x8mKloFucGji2Rae7rm9sUYpTvktu6NJpepBbaRGMyEQiaw2GlkO/A==
-----END CERTIFICATE-----