Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FK9C8d9PM_DlYYW1Ht2osUkGoBg.cer
File:                     FK9C8d9PM_DlYYW1Ht2osUkGoBg.cer (raw, json)
Hash identifier:          SDHAI9oJnomrdxKGc0HEGtelyYOqzOzZKNiTDguz7RQ=
Subject key identifier:   14:AF:42:F1:DF:4F:33:F0:E5:61:85:B5:1E:DD:A8:B1:49:06:A0:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018805F5C29D83C3AD5250C425FB14212FEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/FK9C8d9PM_DlYYW1Ht2osUkGoBg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 10 May 2023 13:59:32 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198893
                          IP: 91.195.228.0/23
                          IP: 2001:67c:ca4::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:f5:c2:9d:83:c3:ad:52:50:c4:25:fb:14:21:2f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 10 13:59:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14af42f1df4f33f0e56185b51edda8b14906a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:74:80:69:53:8e:21:21:63:4d:e4:0a:09:
                    74:4c:4c:3d:6e:0f:52:be:c3:74:44:f1:d9:01:56:
                    eb:e6:3f:5f:53:24:67:96:6d:a5:4f:9e:e6:26:e2:
                    b2:82:1f:7d:89:4f:8f:fc:cf:9d:94:f0:fc:b4:f9:
                    2c:6a:83:78:b2:1f:2d:67:38:a1:ab:7c:ac:04:05:
                    71:40:eb:d1:b1:07:93:6a:46:13:5f:fe:a3:34:ba:
                    e7:c6:48:4d:66:df:35:e0:61:2a:cc:22:6e:15:b4:
                    3d:dd:ab:74:a7:b2:26:d7:32:29:71:10:32:b1:9d:
                    b3:de:4b:7f:c0:c0:a4:d6:8a:88:7b:66:b6:d4:eb:
                    5d:37:06:5a:5c:11:da:62:a6:c2:e1:84:ff:91:14:
                    89:fc:05:be:bf:62:ae:55:28:79:24:25:b2:e3:8e:
                    c9:8d:11:e1:5a:a4:bf:52:6e:c8:65:b9:ff:c6:b3:
                    7d:f6:77:6f:39:a7:77:11:8c:dc:74:a5:89:1a:a7:
                    66:99:0e:ce:49:74:77:3b:39:c9:4a:71:67:3e:93:
                    bd:e6:aa:eb:11:c0:98:cf:e4:95:92:7a:b8:85:36:
                    47:65:88:31:7f:5a:f8:98:8b:58:72:ed:8b:76:6a:
                    d4:f9:7c:52:58:9d:74:aa:55:ab:06:8e:64:5b:dc:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:42:F1:DF:4F:33:F0:E5:61:85:B5:1E:DD:A8:B1:49:06:A0:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/FK9C8d9PM_DlYYW1Ht2osUkGoBg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.228.0/23
                IPv6:
                  2001:67c:ca4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198893

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:7a:64:03:5a:0e:de:6e:be:f7:e9:2a:be:7a:72:df:6c:
         b8:b0:f4:3b:d3:aa:34:3b:43:72:9f:e7:ba:39:d7:c5:cd:04:
         e0:de:14:b5:ce:c4:52:c3:47:6c:76:ba:66:a5:bc:52:c3:17:
         d3:25:c3:75:2a:50:0c:84:01:cd:40:39:62:2d:cc:a1:f3:fc:
         fe:9a:3d:c3:06:f8:d6:e6:73:1b:85:7e:c2:6a:e7:10:c5:c3:
         21:ef:71:74:0d:86:da:32:fb:8d:b7:c4:c2:35:41:55:01:0e:
         a8:0d:ff:26:1f:34:af:8b:db:91:16:ff:41:98:b8:52:8d:77:
         79:de:b2:26:c4:af:70:67:e1:ae:1f:8f:8f:37:ff:36:ca:2c:
         d4:84:65:ad:ef:94:cc:26:31:2f:55:d4:bf:e6:79:e4:da:12:
         f4:37:99:79:f0:cc:11:f9:f1:5e:3d:e8:dd:9a:73:52:ce:fb:
         9a:2a:6d:ab:40:77:59:3b:77:f1:ca:06:51:0e:43:8e:45:40:
         06:44:06:51:6b:70:43:e8:9c:68:5a:a6:7b:de:19:38:14:21:
         c1:9e:f8:07:a4:d3:3b:8a:fc:95:de:25:1b:b4:06:27:e8:7d:
         57:5a:76:d6:70:df:0f:ea:da:d6:dc:20:0f:70:a0:87:b3:e7:
         fd:61:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----