Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
File:                     Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer (raw, json)
Hash identifier:          IlXEJmW86tQBVmvnZ4ATJYzyBE7y067306p1uACftdM=
Subject key identifier:   1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708B60DE06B991EEF593F8ADFA17566D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:34:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 146.19.40.0/24
                          IP: 2a12:4f00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8b:60:de:06:b9:91:ee:f5:93:f8:ad:fa:17:56:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:34:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:be:e3:9d:b0:79:9b:1e:e8:ee:8f:b7:5e:
                    08:d6:0a:4a:10:ad:1a:e6:f0:50:07:e0:25:8d:22:
                    2b:f8:b1:0b:34:1c:3a:46:ef:d2:01:f4:cc:5d:8c:
                    74:cb:f4:bb:d9:7e:ed:0a:42:89:a3:9c:6b:e1:b3:
                    72:40:9c:e0:7e:00:4b:8d:58:52:ba:de:04:da:96:
                    71:91:7b:64:11:7d:d9:fd:66:b1:ce:67:6d:c9:46:
                    82:19:de:72:ae:17:da:ee:c3:e0:63:47:a1:49:c6:
                    4f:95:32:ed:2d:04:79:fc:a8:85:2d:bd:72:8a:6c:
                    49:db:f4:8c:ae:95:06:74:ec:84:0a:e7:b0:f1:21:
                    81:2b:d3:5f:6f:fd:12:9b:f8:20:bf:5c:54:1a:30:
                    35:38:9e:da:30:6b:39:be:2c:3f:f9:27:8c:b9:16:
                    3e:69:9c:83:d2:ea:4a:2c:a3:41:48:93:e9:d4:84:
                    49:0b:e3:27:58:35:4b:00:fb:46:ee:3e:4f:43:dc:
                    de:8d:22:d9:d8:07:20:d4:24:3f:c3:de:09:7f:7a:
                    09:c0:70:b5:10:7f:4f:9a:30:a6:06:69:88:2e:8f:
                    54:a2:bc:49:9b:0e:eb:16:58:06:d9:ea:23:4c:11:
                    49:33:da:af:26:ba:4e:96:a3:f5:e6:88:1b:a2:5a:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.40.0/24
                IPv6:
                  2a12:4f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:55:d3:b9:6d:47:b3:70:78:c9:59:a3:a2:c1:68:3a:72:
         a6:14:f4:ff:97:34:91:d3:15:d0:09:d6:25:e3:37:86:24:f6:
         c8:ba:72:0e:bf:44:ff:e7:31:99:66:11:c4:7e:ff:f1:f3:b3:
         d7:1c:62:ca:ec:80:4c:74:df:85:f6:1d:0c:a3:ff:b1:31:a8:
         57:32:6c:44:35:1f:bf:52:6f:82:62:45:9f:7f:e7:a7:7f:0a:
         9e:0d:4f:27:8d:e1:29:86:e6:40:46:fe:a0:af:89:5d:dd:95:
         9a:92:29:22:2b:ec:82:1a:e6:bf:f4:1c:c8:93:42:4f:ad:e1:
         73:bc:eb:5e:64:45:41:18:32:79:7d:c3:de:25:db:50:aa:47:
         e7:a2:f8:1f:54:35:a1:06:db:70:2e:fc:eb:c2:6f:8c:a7:b0:
         27:4a:76:4a:95:9e:ee:9b:13:17:65:0e:c3:9f:6e:e6:33:51:
         a3:51:17:06:f9:88:c4:f0:ec:bc:6a:e1:25:83:e4:cd:2b:ab:
         38:48:4f:86:61:df:20:54:c9:bb:22:66:5b:b3:f1:76:c9:c4:
         fd:df:87:a0:7f:fa:0e:5a:c4:e3:78:7d:aa:95:79:be:ba:1f:
         f7:b7:94:f9:19:03:41:0a:74:08:64:bf:5b:4b:3b:cd:27:f7:
         d4:0b:82:68
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVwi2DeBrmR7vWT+K36F1ZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGRlOWM5MjZjYjNhN2I4ODYxZWFhYzcwMTQwYTU0OWYxZjQxNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweu+452weZse6O6Pt14I1gpKEK0a
5vBQB+AljSIr+LELNBw6Ru/SAfTMXYx0y/S72X7tCkKJo5xr4bNyQJzgfgBLjVhS
ut4E2pZxkXtkEX3Z/WaxzmdtyUaCGd5yrhfa7sPgY0ehScZPlTLtLQR5/KiFLb1y
imxJ2/SMrpUGdOyECuew8SGBK9Nfb/0Sm/ggv1xUGjA1OJ7aMGs5viw/+SeMuRY+
aZyD0upKLKNBSJPp1IRJC+MnWDVLAPtG7j5PQ9zejSLZ2Acg1CQ/w94Jf3oJwHC1
EH9PmjCmBmmILo9UorxJmw7rFlgG2eojTBFJM9qvJrpOlqP15ogbolrqDwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB3enJJss6e4hh6qxwFApUnx9BYQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzhhNzM0
YS01YmVmLTQyMGQtYWNmYy1jMDhmNTJmYTRkYmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvOGE3MzRh
LTViZWYtNDIwZC1hY2ZjLWMwOGY1MmZhNGRiZC8xL0hkNmNrbXl6cDdpR0hxckhB
VUNsU2ZIMEZoQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhMoMA0EAgACMAcDBQMqEk8AMA0GCSqGSIb3
DQEBCwUAA4IBAQCualXTuW1Hs3B4yVmjosFoOnKmFPT/lzSR0xXQCdYl4zeGJPbI
unIOv0T/5zGZZhHEfv/x87PXHGLK7IBMdN+F9h0Mo/+xMahXMmxENR+/Um+CYkWf
f+enfwqeDU8njeEphuZARv6gr4ld3ZWakikiK+yCGua/9BzIk0JPreFzvOteZEVB
GDJ5fcPeJdtQqkfnovgfVDWhBttwLvzrwm+Mp7AnSnZKlZ7umxMXZQ7Dn27mM1Gj
URcG+YjE8Oy8auElg+TNK6s4SE+GYd8gVMm7ImZbs/F2ycT934egf/oOWsTjeH2q
lXm+uh/3t5T5GQNBCnQIZL9bSzvNJ/fUC4Jo
-----END CERTIFICATE-----