Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/473J_X9S4edet-3m4lrQePuQv7Q.cer
File:                     473J_X9S4edet-3m4lrQePuQv7Q.cer (raw, json)
Hash identifier:          j/WXLOrR81vNrdzdvAthGI0/weH0ITty0PNoNILlEs4=
Subject key identifier:   E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856DF70B638CBE18C089CF786714985A1D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 15:33:04 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.102.0/24
                          IP: 2a11:e8c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:f7:0b:63:8c:be:18:c0:89:cf:78:67:14:98:5a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:33:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3bdc9fd7f52e1e75eb7ede6e25ad078fb90bfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:69:20:3d:66:8d:7a:d5:77:10:58:d3:88:
                    43:4b:1b:71:5d:38:2f:56:e7:15:b7:89:fb:f1:fb:
                    c5:a8:56:23:28:92:e9:f5:d6:a0:83:18:dc:b0:6c:
                    05:8b:a3:a5:72:ed:f8:17:9c:95:88:c6:9e:85:e6:
                    63:94:18:96:e0:b4:a6:64:97:c9:59:1d:ed:2f:72:
                    4a:3c:48:ca:ac:25:19:23:db:e8:93:3e:42:a7:05:
                    3c:8f:b7:14:76:a0:7f:78:d6:ac:76:44:40:a3:1a:
                    e1:b0:40:57:73:ca:73:1a:3d:15:01:45:ca:2d:72:
                    cf:81:41:0d:c9:ad:ff:ad:89:8a:d1:ed:06:96:78:
                    b3:f4:43:b7:07:f7:6e:2c:16:30:2c:9e:6b:2a:2c:
                    13:96:8e:c2:23:d3:00:f8:7f:76:25:d3:2d:19:04:
                    62:2e:9a:93:fb:a4:c2:ea:0c:3a:d9:28:01:1d:1a:
                    6c:f0:64:3d:f0:df:4b:ab:63:1a:27:dd:4a:fe:da:
                    b7:2d:5f:37:84:0a:a0:86:b6:13:ac:1b:72:e3:64:
                    24:66:16:51:bf:cb:43:e7:b2:ff:75:91:25:98:29:
                    90:17:b6:81:ec:af:b7:b0:58:8d:84:fd:99:ec:09:
                    c7:ac:1b:b8:b8:a0:9a:f0:83:4e:a4:5d:69:2f:aa:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.102.0/24
                IPv6:
                  2a11:e8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:c0:f0:7b:54:6e:f4:d3:ce:d3:d4:41:63:96:b7:b2:f0:
         60:6b:06:da:14:4b:ec:ab:bf:a3:77:a2:f8:f6:97:fd:c9:f0:
         cb:30:0d:56:0b:17:f1:80:2e:6f:bd:da:48:6d:4e:f3:1d:df:
         d4:09:de:d4:0b:21:75:0c:a0:75:ad:64:46:f1:ab:8a:0b:55:
         40:89:fa:d3:c6:22:ff:32:3a:0e:7d:b3:96:e6:31:36:4a:38:
         12:da:5d:fc:ef:b0:70:cd:02:06:2e:05:18:ab:1d:5b:bc:5c:
         09:25:21:b3:47:7f:d2:56:8c:7a:f5:9c:0b:44:39:ef:e8:6d:
         e4:9f:17:53:40:d2:e0:e9:34:42:f9:c7:93:f5:1a:28:26:8d:
         be:bc:f2:13:15:72:f2:4f:1d:84:ff:85:29:7e:03:0a:e8:d5:
         5c:ba:a3:81:26:a5:dc:f9:8f:9f:94:24:7e:5a:7e:a7:07:b8:
         26:f9:98:7f:7e:66:3f:9b:da:03:ea:1f:c2:13:1c:18:a8:5e:
         2d:1f:68:f4:05:4b:5f:a4:cf:0f:10:29:5f:9d:28:46:81:6e:
         4c:6c:80:98:01:16:a9:52:dc:15:8e:ba:a6:9d:3b:a5:26:7e:
         08:e1:b4:82:cc:ab:62:e4:1e:b3:28:1f:70:80:92:15:70:00:
         ce:37:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----