Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
File:                     MsAbG4QPOM4GcfccO0cn6B9porc.cer (raw, json)
Hash identifier:          QKtocFCFP+o9r/xs9txsZ/VVvqq5Sq4/AIf5/z2WUN4=
Subject key identifier:   32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A25AFC8A37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 08:54:01 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.157.168.0/22

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697311201847 (0xa25afc8a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 08:54:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:97:35:33:8a:8a:ac:3b:03:10:0e:4e:40:
                    4e:0c:f6:d4:6a:77:f1:40:77:eb:70:60:a8:ed:66:
                    28:05:ff:2c:7b:d9:80:2e:e3:a2:ac:35:44:8e:99:
                    25:93:22:3c:ba:f6:b2:26:e7:44:5d:95:24:4b:b4:
                    7e:57:e1:e3:54:9d:93:1e:1d:9b:bf:7a:a2:4b:4c:
                    a6:14:2f:36:37:fe:85:13:da:34:1e:fa:e2:ab:d6:
                    f1:91:ed:9e:bd:e4:f3:bc:55:92:00:93:77:fd:d8:
                    a2:10:ba:d1:ac:bf:62:22:fa:3b:f7:b3:26:54:db:
                    bf:8c:cb:70:5e:37:31:1c:2a:30:4f:af:5a:a0:ff:
                    d8:4a:68:56:f6:c2:91:d2:21:fe:bf:ca:49:59:f5:
                    92:80:2d:e3:93:03:f5:f5:56:d5:4e:af:54:fa:6e:
                    d6:75:ff:92:28:37:f7:47:15:16:06:2d:b3:3b:2b:
                    b7:b9:b9:b9:1d:8c:fb:3a:bc:8e:c4:9c:10:1a:5d:
                    be:aa:04:34:4e:62:1e:13:9e:f9:55:1d:cb:ed:12:
                    61:ac:4e:4a:fb:ca:ac:0b:a4:70:e1:b1:60:5e:87:
                    0f:69:e4:2c:ab:5b:8e:16:87:64:44:8a:a0:a4:8f:
                    34:ed:4e:4e:6a:f0:b9:be:26:42:fe:5b:b7:2d:23:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:a3:d0:75:21:91:1a:c3:16:54:eb:ba:f3:06:ae:93:27:
         ff:33:b4:22:69:aa:ff:72:75:dd:df:6a:05:f4:20:25:97:b2:
         f7:a9:62:07:8b:59:6c:da:c1:d0:8b:e3:75:e1:d6:1d:bd:36:
         8e:e2:02:35:21:b6:7e:67:91:39:ce:61:aa:d3:ad:68:8d:d8:
         48:a7:09:7d:96:b9:b9:8b:a7:bc:43:08:3f:98:e1:7d:f2:03:
         4f:64:d0:c5:7a:69:70:b6:ba:5c:e5:ed:10:d0:ee:94:cd:02:
         7e:f0:f2:31:cf:9f:01:d3:2d:49:6d:44:e9:98:6e:a2:22:23:
         ef:fd:12:4d:09:67:fc:79:f6:35:d6:cb:b3:e6:a0:75:b1:63:
         a4:c6:fb:ea:b3:c9:1d:fb:9b:bc:12:ca:1d:0d:0f:6f:2b:d8:
         96:7b:53:20:fe:2c:d5:04:07:4f:a1:dc:04:92:ef:3b:25:c4:
         27:2a:e2:9d:b1:1a:77:ca:f4:5f:63:5d:da:f4:bb:2d:f5:a6:
         3d:ca:8d:d9:51:1d:88:bc:97:11:31:26:fd:2f:d3:57:17:4c:
         ef:91:17:61:dd:9b:c0:d3:a6:94:ad:b7:2f:e8:9e:07:78:9f:
         22:43:a1:a0:e6:12:ab:5f:59:b8:98:fa:4a:ad:83:5f:61:6d:
         e3:46:6d:58
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKJa/Io3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDg1NDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMmMwMWIxYjg0
MGYzOGNlMDY3MWY3MWMzYjQ3MjdlODFmNjlhMmI3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAq8aXNTOKiqw7AxAOTkBODPbUanfxQHfrcGCo7WYoBf8s
e9mALuOirDVEjpklkyI8uvayJudEXZUkS7R+V+HjVJ2THh2bv3qiS0ymFC82N/6F
E9o0Hvriq9bxke2eveTzvFWSAJN3/diiELrRrL9iIvo797MmVNu/jMtwXjcxHCow
T69aoP/YSmhW9sKR0iH+v8pJWfWSgC3jkwP19VbVTq9U+m7Wdf+SKDf3RxUWBi2z
Oyu3ubm5HYz7OryOxJwQGl2+qgQ0TmIeE575VR3L7RJhrE5K+8qsC6Rw4bFgXocP
aeQsq1uOFodkRIqgpI807U5OavC5viZC/lu3LSPkvQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDLAGxuEDzjOBnH3HDtHJ+gfaaK3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzJmYzQxZS05OGNlLTQwNWYt
OGIzMC0xNzNjYTA3M2UzNzEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMmZjNDFlLTk4Y2UtNDA1Zi04
YjMwLTE3M2NhMDczZTM3MS8xL01zQWJHNFFQT000R2NmY2NPMGNuNkI5cG9yYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQAIvaPQdSGRGsMWVOu68wau
kyf/M7Qiaar/cnXd32oF9CAll7L3qWIHi1ls2sHQi+N14dYdvTaO4gI1IbZ+Z5E5
zmGq061ojdhIpwl9lrm5i6e8Qwg/mOF98gNPZNDFemlwtrpc5e0Q0O6UzQJ+8PIx
z58B0y1JbUTpmG6iIiPv/RJNCWf8efY11suz5qB1sWOkxvvqs8kd+5u8EsodDQ9v
K9iWe1Mg/izVBAdPodwEku87JcQnKuKdsRp3yvRfY13a9Lst9aY9yo3ZUR2IvJcR
MSb9L9NXF0zvkRdh3ZvA06aUrbcv6J4HeJ8iQ6Gg5hKrX1m4mPpKrYNfYW3jRm1Y
-----END CERTIFICATE-----