Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
File:                     2qFwhybTI0m_uyoSD1jaog0dLMo.cer (raw, json)
Hash identifier:          1Qh9Y0adj6U8uNgOftuxIY6nKDEegkqiO3hOlTuzGvI=
Subject key identifier:   DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC56E07C3417C13DB554B0C7960983D20
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 14:29:31 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 185.155.103.0/24
                          IP: 2a12:6f80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:07:c3:41:7c:13:db:55:4b:0c:79:60:98:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 14:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:44:a5:70:3c:b6:0f:0a:a7:88:cd:d2:60:
                    ce:f3:0a:c2:d4:7f:88:6d:5f:a8:78:5d:fb:ae:cc:
                    b1:62:01:75:ff:76:f9:bd:e3:a6:83:21:04:a2:8b:
                    96:b0:15:5d:15:72:5e:f1:8d:cd:db:5b:dc:f3:4e:
                    f6:60:bf:d6:68:d6:77:3e:98:ee:b0:95:67:ca:b8:
                    fb:d0:35:92:7a:4c:c7:b5:28:06:01:18:42:96:9a:
                    17:91:b2:ef:12:5b:45:d5:fb:b5:0b:65:16:12:f0:
                    20:53:f1:2e:bb:a0:bc:ab:4f:5f:a7:f5:be:97:fb:
                    7d:ea:ed:b5:f5:04:cf:b9:21:b7:00:57:00:e9:fc:
                    93:41:a9:0e:8f:00:19:0f:a7:85:29:8f:3b:4d:63:
                    08:24:78:da:e1:4e:b0:6c:22:d8:08:ed:74:be:ba:
                    5a:3b:13:ce:e4:ac:ae:86:16:2e:c1:fa:07:33:f5:
                    ca:a3:8f:3f:b4:a5:69:ab:fa:61:bf:0b:62:d9:e6:
                    88:18:d3:0c:5a:b8:57:ad:0d:4c:99:ec:81:6c:7c:
                    26:3d:25:2e:45:8a:dc:6c:0e:22:b5:de:8b:62:70:
                    39:36:bc:ec:54:d0:97:63:db:20:20:0a:ba:ae:7f:
                    a8:01:ae:73:f3:f8:82:2d:1e:0d:d6:c7:ee:35:3b:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.103.0/24
                IPv6:
                  2a12:6f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:8c:4c:e7:2b:c5:70:2c:fa:c9:33:47:35:6f:d0:7a:19:
         d3:eb:55:63:7e:ff:04:2a:ae:6b:2a:b8:cf:1e:24:42:49:00:
         f3:60:f4:16:35:a4:cc:d9:fb:f8:9e:14:21:bc:96:41:c7:62:
         65:a2:ad:ca:56:e6:52:3f:f1:cc:65:34:49:9a:47:6c:72:60:
         64:f1:c4:20:a7:e7:3e:a1:a9:92:70:97:d9:3a:89:36:6e:ac:
         6d:ff:b4:22:af:8a:6f:8f:ee:64:46:0d:13:b9:37:1c:31:82:
         fd:c5:9c:e4:43:65:ad:e4:fe:a1:dd:32:f6:f8:b6:3a:e1:0e:
         46:42:27:7e:0e:b2:cc:e1:1f:f8:b7:d6:1d:1b:45:45:57:fc:
         3c:a9:1a:5c:b6:dc:7e:fb:8a:51:01:9d:37:8d:df:84:b2:a2:
         62:99:01:19:67:15:3f:2c:f3:a1:4d:73:3a:b8:53:b1:2d:dc:
         d4:69:41:b7:22:97:c6:f7:46:22:40:a0:a4:b0:2a:ce:e5:82:
         14:1a:98:63:a4:da:61:d7:e2:99:a2:de:6d:64:d9:8d:a6:69:
         b3:a5:ef:06:7c:71:7a:38:17:b9:20:3c:a6:e1:06:88:d6:48:
         1f:fa:7c:9b:19:4c:1f:e9:20:df:78:48:a9:f2:4a:9a:68:82:
         b8:f7:c8:18
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFbgfDQXwT21VLDHlgmD0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWExNzA4NzI2ZDMyMzQ5YmZiYjJhMTIwZjU4ZGFhMjBkMWQyY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJJEpXA8tg8Kp4jN0mDO8wrC1H+I
bV+oeF37rsyxYgF1/3b5veOmgyEEoouWsBVdFXJe8Y3N21vc8072YL/WaNZ3Ppju
sJVnyrj70DWSekzHtSgGARhClpoXkbLvEltF1fu1C2UWEvAgU/Euu6C8q09fp/W+
l/t96u219QTPuSG3AFcA6fyTQakOjwAZD6eFKY87TWMIJHja4U6wbCLYCO10vrpa
OxPO5KyuhhYuwfoHM/XKo48/tKVpq/phvwti2eaIGNMMWrhXrQ1MmeyBbHwmPSUu
RYrcbA4itd6LYnA5NrzsVNCXY9sgIAq6rn+oAa5z8/iCLR4N1sfuNTusVwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNqhcIcm0yNJv7sqEg9Y2qINHSzKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2ZlOWMx
YS1lMjdkLTQyNzctYjc1Yy1jMjA3NjdiZjU4YTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvZmU5YzFh
LWUyN2QtNDI3Ny1iNzVjLWMyMDc2N2JmNThhNS8xLzJxRndoeWJUSTBtX3V5b1NE
MWphb2cwZExNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuZtnMA0EAgACMAcDBQMqEm+AMA0GCSqGSIb3
DQEBCwUAA4IBAQBcQoxM5yvFcCz6yTNHNW/QehnT61Vjfv8EKq5rKrjPHiRCSQDz
YPQWNaTM2fv4nhQhvJZBx2Jloq3KVuZSP/HMZTRJmkdscmBk8cQgp+c+oamScJfZ
Ook2bqxt/7Qir4pvj+5kRg0TuTccMYL9xZzkQ2Wt5P6h3TL2+LY64Q5GQid+DrLM
4R/4t9YdG0VFV/w8qRpcttx++4pRAZ03jd+EsqJimQEZZxU/LPOhTXM6uFOxLdzU
aUG3IpfG90YiQKCksCrO5YIUGphjpNph1+KZot5tZNmNpmmzpe8GfHF6OBe5IDym
4QaI1kgf+nybGUwf6SDfeEip8kqaaIK498gY
-----END CERTIFICATE-----