Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.cer
File:                     Jbc-hv1Jbt-qOy_qcVq2gywlDGk.cer (raw, json)
Hash identifier:          T+Hgwb0p8TycyMb4LUy4wC5S8IEK1AVT8WlmDlM6sDQ=
Subject key identifier:   25:B7:3E:86:FD:49:6E:DF:AA:3B:2F:EA:71:5A:B6:83:2C:25:0C:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA7E8632F3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:56:11 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 207374
                          IP: 62.133.57.0/24
                          IP: 2a10:3f00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732267164403 (0xaa7e8632f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:56:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=25b73e86fd496edfaa3b2fea715ab6832c250c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:cf:bb:23:35:73:40:96:2d:48:1b:c7:1a:
                    e4:c6:25:c9:8c:36:f7:42:8c:0e:b5:72:4f:b3:c2:
                    20:b5:ff:03:e4:4e:1f:07:07:60:a6:cc:8b:94:70:
                    6e:21:39:f3:55:3c:c6:58:b8:f1:38:7f:cb:d6:38:
                    8c:ce:0f:9b:ba:7d:88:93:8c:fc:8f:e4:a8:da:cb:
                    e3:27:5c:92:7f:d4:15:3e:98:da:7e:7f:f8:a4:ec:
                    9a:1f:ca:6d:80:d3:1e:77:63:2b:3d:81:df:bd:08:
                    1b:1b:ad:2c:f2:6d:ca:a7:b1:b8:30:e2:f8:64:a2:
                    93:7e:e1:4f:07:34:e3:0b:55:95:eb:98:b4:0b:0c:
                    5f:82:5e:77:40:e7:a3:4a:56:f1:0c:83:9f:44:cf:
                    cf:cf:f2:51:c9:e2:60:51:ad:71:20:29:3b:be:11:
                    4c:32:5a:d8:c7:fa:62:c6:bd:9c:bb:33:c9:d3:4d:
                    01:2f:26:c5:f1:08:33:ae:7b:b6:38:8e:ec:f4:fe:
                    fb:ec:d8:1d:2d:3e:92:41:45:bb:17:40:6d:4e:03:
                    28:78:02:54:5e:2b:84:3c:da:05:19:54:dd:7f:e7:
                    8e:68:a0:ae:d4:ff:57:46:f1:86:63:6a:64:3b:97:
                    aa:df:c4:9d:b4:3a:03:6a:f2:9b:17:90:73:a5:35:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:3E:86:FD:49:6E:DF:AA:3B:2F:EA:71:5A:B6:83:2C:25:0C:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.133.57.0/24
                IPv6:
                  2a10:3f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207374

    Signature Algorithm: sha256WithRSAEncryption
         90:85:bc:00:f8:9f:a7:78:d8:60:17:ba:e9:be:e8:c1:c3:ae:
         2a:60:82:74:27:9b:40:2d:5b:7e:92:28:0b:3e:86:d0:ea:a7:
         80:4b:b2:91:98:3b:09:58:cd:8c:9c:22:d9:74:be:4d:8f:b7:
         40:98:f3:90:e4:7e:2d:38:bc:75:69:6e:86:ad:b3:01:23:96:
         41:fa:06:1f:ad:51:1c:d2:9e:be:10:6b:0d:df:1f:e1:6a:f4:
         74:44:2f:0f:ad:a9:ab:2b:88:c8:5c:7f:b9:cd:73:f9:80:8e:
         93:b1:2b:b1:cd:37:26:9f:5a:66:6a:f0:b6:64:3e:38:7d:d2:
         5d:a4:33:60:85:73:a0:cc:b6:89:14:d4:84:61:61:e9:6c:e2:
         8e:87:32:ee:ad:06:1b:3d:76:5b:b9:18:c8:72:cc:36:81:84:
         81:3e:d3:c0:cf:84:75:76:4f:fb:cd:1c:e7:1b:02:08:7c:ad:
         35:ff:a8:6c:aa:b3:a3:32:f3:4f:3b:81:bb:35:f8:67:2c:0e:
         e2:85:a9:0f:3c:62:20:fe:a8:af:c2:70:1d:f5:c4:de:af:24:
         af:11:fd:33:e1:67:98:92:c0:de:16:1a:c2:87:b9:b0:ca:c0:
         d1:f5:4a:6f:92:b7:94:fc:4f:1b:d4:1f:7e:df:dd:ff:35:35:
         eb:9c:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----