Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
File:                     1-4VWosC7PR7Ng8dU97lo9xNANT8.cer (raw, json)
Hash identifier:          Z1DdEwpzs0I/azgAIJLeoABzLxA1k5MDsLPaKxEYXkk=
Subject key identifier:   FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D1B48A84BD1E3C0EC168DFC099C185D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 11:33:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 212548
                          IP: 2001:678:e88::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1b:48:a8:4b:d1:e3:c0:ec:16:8d:fc:09:9c:18:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:33:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:74:01:b0:71:c5:d4:d7:44:5b:f8:3a:ad:
                    c9:1a:f8:90:8a:48:6e:39:b5:be:62:1b:b2:bb:95:
                    ce:03:96:3f:e7:ef:69:30:12:28:e3:6a:d8:e6:de:
                    34:dc:73:8d:c2:76:6f:7f:1d:c1:d1:08:98:91:b5:
                    8f:96:14:e1:50:21:94:36:08:53:01:36:43:59:61:
                    ff:06:f5:c8:ef:fa:70:05:0d:94:ad:c3:86:84:72:
                    b7:20:8b:76:4c:a6:58:c2:2a:9e:e6:ef:31:58:13:
                    04:0b:3b:74:88:a4:aa:be:03:ad:9f:67:32:d5:76:
                    b8:d6:07:2f:71:81:f7:e1:76:81:6d:bf:16:3e:33:
                    24:06:63:da:e5:f2:f8:03:18:8f:b1:d0:78:5b:b8:
                    88:5a:51:11:d3:42:d3:0c:49:3c:44:97:8f:79:77:
                    04:b0:08:12:33:f0:eb:75:b5:9c:ee:b9:f7:6b:22:
                    02:c8:80:8d:d7:5d:d0:df:b9:86:01:d9:fa:b3:eb:
                    61:7f:8e:2f:22:30:5b:39:86:f3:5c:2a:38:1a:1e:
                    65:05:a3:de:6b:5d:1f:f3:a1:4e:99:28:cc:6f:a3:
                    8b:bd:0a:2e:b0:56:fe:e9:37:d9:a4:75:f7:11:8b:
                    a3:28:8c:fe:d6:af:ac:e4:05:3e:71:56:99:2f:d1:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:e88::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212548

    Signature Algorithm: sha256WithRSAEncryption
         02:08:a2:51:01:c4:ea:59:ec:fa:ed:59:f3:6f:47:55:f7:4d:
         87:95:f6:08:51:70:1e:c7:10:e7:a5:c9:b0:6a:7c:49:ff:8c:
         bc:03:be:d6:83:95:ae:51:c3:9e:7b:0c:48:62:b1:1d:ce:78:
         2a:b1:21:21:26:76:38:d4:59:7c:24:ab:fb:15:7f:20:a0:bc:
         9c:c9:f5:72:e1:21:a4:08:b5:89:61:80:9d:c5:72:14:0e:c8:
         67:af:81:b0:88:f5:2b:7a:1c:0b:cb:3f:b9:fc:e7:85:1f:19:
         4f:c5:4e:6d:c9:35:87:8b:44:95:65:2a:ca:01:a3:93:31:86:
         2c:d5:d8:e1:1b:0a:e4:fb:79:67:c4:f0:24:21:33:0a:57:24:
         26:c1:97:cb:a2:31:f3:10:9b:e8:3d:25:d5:76:fa:af:a3:fc:
         41:77:88:38:3b:51:a1:8c:3d:a3:16:e5:df:c8:83:90:e9:87:
         f9:d1:19:a4:c6:94:b1:7c:f9:55:8a:5f:c3:44:ae:df:18:39:
         38:2e:e3:59:27:34:c6:6e:3c:90:26:34:22:7f:16:1f:00:c3:
         60:07:f5:e7:f5:5f:f0:33:bc:e3:75:9a:eb:c1:2f:96:c3:d3:
         f2:d7:c0:0a:cc:c8:88:e0:6b:80:06:9f:46:dc:60:b4:56:1f:
         12:27:b6:ef
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYVtG0ioS9HjwOwWjfwJnBhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjg1NTZhMmMwYmIzZDFlY2Q4M2M3NTRmN2I5NjhmNzEzNDAzNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr010AbBxxdTXRFv4Oq3JGviQikhu
ObW+Yhuyu5XOA5Y/5+9pMBIo42rY5t403HONwnZvfx3B0QiYkbWPlhThUCGUNghT
ATZDWWH/BvXI7/pwBQ2UrcOGhHK3IIt2TKZYwiqe5u8xWBMECzt0iKSqvgOtn2cy
1Xa41gcvcYH34XaBbb8WPjMkBmPa5fL4AxiPsdB4W7iIWlER00LTDEk8RJePeXcE
sAgSM/DrdbWc7rn3ayICyICN113Q37mGAdn6s+thf44vIjBbOYbzXCo4Gh5lBaPe
a10f86FOmSjMb6OLvQousFb+6TfZpHX3EYujKIz+1q+s5AU+cVaZL9H/6wIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFPuFVqLAuz0ezYPHVPe5aPcTQDU/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzM4ZmQ1
Zi1kNDEwLTQ0ZDMtYTczNy05YmEyZWU3NDY1OGIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMzhmZDVm
LWQ0MTAtNDRkMy1hNzM3LTliYTJlZTc0NjU4Yi8xLzEtNFZXb3NDN1BSN05nOGRV
OTdsbzl4TkFOVDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngOiDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMDPkQwDQYJKoZIhvcNAQELBQADggEBAAIIolEBxOpZ7PrtWfNvR1X3TYeV
9ghRcB7HEOelybBqfEn/jLwDvtaDla5Rw557DEhisR3OeCqxISEmdjjUWXwkq/sV
fyCgvJzJ9XLhIaQItYlhgJ3FchQOyGevgbCI9St6HAvLP7n854UfGU/FTm3JNYeL
RJVlKsoBo5MxhizV2OEbCuT7eWfE8CQhMwpXJCbBl8uiMfMQm+g9JdV2+q+j/EF3
iDg7UaGMPaMW5d/Ig5Dph/nRGaTGlLF8+VWKX8NErt8YOTgu41knNMZuPJAmNCJ/
Fh8Aw2AH9ef1X/AzvON1muvBL5bD0/LXwArMyIjga4AGn0bcYLRWHxIntu8=
-----END CERTIFICATE-----