Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer
File:                     oYLiSkUkwY6Rbn1ja-LRHI5JfGc.cer (raw, json)
Hash identifier:          Ts4x6+ofXz9RXDv/LnZV7PBQfMpq7KKy3Y1NtCeAUAA=
Subject key identifier:   A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF7CDA08CA0A67DBF4A3534B24CFF67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:54 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 185.252.152.0/22
                          IP: 2a0c:28c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:cd:a0:8c:a0:a6:7d:bf:4a:35:34:b2:4c:ff:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a182e24a4524c18e916e7d636be2d11c8e497c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:26:28:1c:57:10:02:49:39:42:ad:f9:38:
                    a8:b4:26:fd:07:60:ed:48:4f:60:d9:f7:6f:d6:7f:
                    86:3f:9b:00:16:5a:6a:ed:a9:25:fb:fc:a9:64:b7:
                    c5:27:62:63:89:9b:15:a2:48:d5:bf:b7:42:74:cb:
                    de:06:bd:65:9b:10:f7:b8:c4:ac:0e:6e:e9:24:3c:
                    bc:62:d6:e4:b6:09:67:2c:80:e3:6e:f3:bf:bc:fc:
                    61:67:6d:72:17:2f:f8:a9:74:8d:4d:f3:ba:2c:d7:
                    cf:41:5f:70:0a:5f:b1:b1:82:bf:2a:14:3b:71:61:
                    02:77:0e:af:d7:42:1c:b7:e4:f8:f0:31:d4:25:77:
                    bc:87:ee:70:fa:51:df:82:cf:2c:5f:d3:99:82:10:
                    23:83:08:cb:2a:c0:6b:57:1f:86:c8:4a:0e:30:63:
                    c9:66:aa:92:53:95:3a:3d:31:dd:d6:45:ab:45:6b:
                    20:be:5a:e4:3a:7b:c5:e2:d2:cd:04:67:ae:b1:3c:
                    92:f9:b8:25:ab:3d:03:9d:ef:5d:77:0a:43:19:07:
                    0a:4c:3f:26:72:0f:aa:fd:7e:19:f2:f0:71:9e:9b:
                    92:11:78:4e:61:b5:39:1d:5f:bc:cd:f3:35:88:f6:
                    f3:a7:32:5d:cc:ca:49:ef:f8:3e:b2:ef:3d:56:b0:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:E2:4A:45:24:C1:8E:91:6E:7D:63:6B:E2:D1:1C:8E:49:7C:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/3c4bb6-6641-4073-93fa-7c6327e37b30/1/oYLiSkUkwY6Rbn1ja-LRHI5JfGc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.152.0/22
                IPv6:
                  2a0c:28c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:75:f7:c3:27:e8:a6:cb:32:de:fd:fc:c8:01:f0:3c:af:
         b2:93:98:05:75:55:25:51:12:8a:76:9f:f2:e0:65:f2:3d:9d:
         8f:40:a0:52:ab:d2:4c:a6:f1:80:0c:9f:ae:2d:a7:7f:fb:72:
         c4:7c:e2:a9:41:1b:99:71:fa:80:b6:80:d5:9a:1f:8d:72:0f:
         2f:d1:73:5f:df:99:b2:cc:1b:66:e8:c6:34:fc:be:ef:c0:68:
         29:fc:24:6f:fd:5e:b1:f6:17:f1:7a:0f:3f:d7:1e:44:61:78:
         f1:56:07:46:70:c8:fa:74:5e:4a:02:2e:8c:d7:a1:7d:14:27:
         ca:26:32:9a:ec:75:4b:5e:2b:74:9e:33:77:db:55:83:ec:68:
         c6:82:a5:29:83:b9:43:82:61:79:d1:12:92:c5:cd:aa:db:71:
         26:da:bc:ba:fd:f1:35:1b:01:71:16:60:28:3c:62:85:fa:24:
         e2:ff:68:42:c3:a3:ce:64:40:22:90:41:29:5e:8c:43:89:db:
         df:37:4e:3d:08:c7:a1:d5:ee:a0:82:d1:fe:79:2f:5a:9a:a0:
         3f:60:9f:54:b3:5f:93:fc:de:37:83:fb:8b:73:49:85:4a:82:
         15:43:6d:c2:e0:eb:61:92:36:73:7a:73:cc:b9:1a:05:d5:31:
         5f:8b:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----