Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer
File:                     HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer (raw, json)
Hash identifier:          erPuAZGVGtJKrEo3LZpw4DIwPZZPWP4uAS/VOnxAmDo=
Subject key identifier:   1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187E1489CDE1C0C80E24772D7EF75E99B14
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 03 May 2023 11:04:05 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.96.0/24
                          IP: 2a11:e6c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:48:9c:de:1c:0c:80:e2:47:72:d7:ef:75:e9:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  3 11:04:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c3fc9be8ce46e3d6ce5c67ea33e2e199d409c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:52:0c:b4:02:78:96:c9:43:5a:ae:41:14:
                    38:86:27:8f:18:61:04:8c:18:a5:d6:28:e7:8a:01:
                    d1:8c:b9:8a:e3:b6:e9:fe:7e:7e:28:cb:8a:57:ff:
                    8e:74:70:2c:09:89:e5:35:57:db:78:5d:6f:4b:1e:
                    19:cd:f9:8f:2d:c4:25:d0:68:3b:c0:b3:f3:88:6a:
                    7b:c1:e9:16:63:fc:2b:3d:d6:22:a0:0c:5f:f6:b5:
                    dc:20:27:da:d4:f1:4d:37:36:e5:63:1b:51:b9:a9:
                    da:39:8a:d8:9a:80:97:93:57:e7:3d:f3:b6:20:a3:
                    93:73:bc:76:7a:7f:51:60:7a:06:a3:c3:13:e1:03:
                    2c:fd:da:75:6f:f3:4c:2a:e1:87:f7:5f:e6:28:9f:
                    2e:66:58:06:06:0e:0e:f7:75:b5:4b:99:bc:5d:7c:
                    b8:e4:7f:d6:dc:39:9d:6f:ed:51:44:c6:c3:58:7f:
                    91:22:bb:cd:60:9a:37:67:2c:8d:01:d9:3d:ca:2f:
                    03:c4:27:e3:2a:27:cf:b4:82:68:f8:69:9f:86:d7:
                    62:35:89:b8:f5:d9:60:ad:df:d2:de:30:1b:9e:45:
                    68:e0:6a:f5:68:7d:5b:95:15:46:0f:c3:31:a2:fb:
                    76:c2:a3:e4:74:45:d0:bd:c0:a1:d7:54:b2:1f:ac:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.96.0/24
                IPv6:
                  2a11:e6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:7f:5d:d6:b3:7c:3d:24:e2:a6:18:1c:1f:99:d2:aa:8d:
         b3:85:77:e6:7f:04:31:81:1e:40:23:da:10:6c:c4:18:31:c7:
         b5:35:92:7f:2a:3c:7a:46:94:6b:d6:7f:21:ea:1f:4d:6c:8d:
         d3:86:37:18:d1:c4:ac:17:e7:d8:69:f0:3c:8e:a2:e0:9f:e2:
         1e:e7:55:5a:88:4e:4a:05:d6:65:fe:43:52:2f:89:3e:8c:29:
         00:be:6f:fc:ef:10:97:2b:0c:9e:31:25:93:0c:1d:cc:44:f9:
         ff:52:78:01:f6:a6:32:78:5a:24:07:bd:b8:0e:0f:5c:21:20:
         e9:56:bd:01:9d:7e:10:01:19:c7:6c:7e:25:20:19:4e:6b:11:
         52:64:4e:c2:48:b6:e0:bc:b3:21:cb:37:e1:7c:75:e6:7d:bd:
         06:37:84:fe:84:bc:87:7b:8d:57:81:86:27:46:3e:9f:26:4e:
         f3:26:bd:eb:82:fd:52:0d:6d:40:b5:9c:f2:fe:fa:96:7e:98:
         2c:e8:8c:59:77:32:ea:6c:df:b6:fe:fb:07:b3:c9:4c:cd:86:
         ca:49:ec:b6:65:e6:f9:d6:1c:2e:51:55:a0:d1:a2:96:d7:3f:
         29:95:b7:50:ad:49:34:e3:c2:82:e2:04:63:68:98:6a:41:aa:
         14:b9:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----