Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L1ya4Orz3BRkZpYcybIuY6ZbXP4.cer
File:                     L1ya4Orz3BRkZpYcybIuY6ZbXP4.cer (raw, json)
Hash identifier:          +O1kctG/x2Cc93dllAYNtz9RONNzNmDRLToDrWaiuOI=
Subject key identifier:   2F:5C:9A:E0:EA:F3:DC:14:64:66:96:1C:C9:B2:2E:63:A6:5B:5C:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856FB009AEF7A8FB9A34164B97F66223C6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/c41abb-4d8b-4f2b-bca2-a3a7d67270ec/1/L1ya4Orz3BRkZpYcybIuY6ZbXP4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/c41abb-4d8b-4f2b-bca2-a3a7d67270ec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 23:34:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.163.199.0/24
                          IP: 2a11:52c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b0:09:ae:f7:a8:fb:9a:34:16:4b:97:f6:62:23:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f5c9ae0eaf3dc146466961cc9b22e63a65b5cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:e9:62:23:e5:b1:6a:c6:2e:08:8f:00:62:
                    d4:af:e5:62:b7:47:b9:d7:c6:e3:82:45:0e:0e:79:
                    86:74:4d:b1:76:c7:0b:3a:6c:55:3c:2d:97:c6:29:
                    68:4d:54:66:b0:c4:7a:0a:46:1c:99:22:c0:32:14:
                    94:6f:75:4f:cb:5e:58:60:8d:dd:1d:52:07:a1:d8:
                    fe:3a:5c:66:b6:d3:1e:45:d2:0a:86:12:eb:90:a2:
                    8c:ab:d8:e2:87:40:9f:ca:12:51:5f:28:01:fb:39:
                    d6:4c:f5:40:90:d7:14:d0:b8:ba:5f:b5:5c:5c:24:
                    8c:a9:e0:68:df:4b:2d:cf:5a:53:7c:9e:b1:3b:e3:
                    b3:86:85:03:a4:bd:34:a7:24:d2:1f:69:dd:b0:24:
                    ef:21:25:cb:6c:6d:a2:84:90:83:9b:21:3a:22:e6:
                    e2:ba:3d:c7:40:f0:ed:b2:09:85:66:14:ee:75:aa:
                    34:24:1c:ae:67:b7:69:e6:dc:ee:bd:99:16:bf:37:
                    f9:cb:04:ca:64:c3:a2:06:51:c8:42:07:77:00:84:
                    4e:49:97:f6:b0:e4:b8:c2:1a:43:75:3c:53:01:13:
                    20:53:99:8a:3e:89:51:d6:3e:08:80:73:92:d1:11:
                    bf:3c:78:c8:dd:be:26:81:26:fe:ab:07:e2:a9:cc:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5C:9A:E0:EA:F3:DC:14:64:66:96:1C:C9:B2:2E:63:A6:5B:5C:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c41abb-4d8b-4f2b-bca2-a3a7d67270ec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c41abb-4d8b-4f2b-bca2-a3a7d67270ec/1/L1ya4Orz3BRkZpYcybIuY6ZbXP4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.199.0/24
                IPv6:
                  2a11:52c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:99:8d:78:66:12:8c:73:c9:b8:37:50:ab:40:3c:13:19:
         26:bf:5c:8a:df:d7:51:93:c2:b2:ac:04:08:23:12:02:8e:4c:
         93:de:b6:3e:34:9a:56:f2:b8:9d:ed:f3:b6:33:fe:3c:d9:70:
         d2:60:75:f1:e1:88:3d:49:6f:9b:62:89:66:9c:f5:04:57:e0:
         fc:20:60:96:fa:09:77:12:2f:2b:aa:12:75:6f:c9:fd:7e:c4:
         73:cf:37:50:fa:d6:d0:8d:a9:25:c3:01:5f:7c:8e:b2:99:a7:
         2e:a9:c9:a3:72:11:e2:38:73:fd:1a:fb:ca:07:f8:5c:7c:3b:
         a3:b7:a7:44:f8:00:21:b9:85:e6:92:b8:94:87:20:74:02:49:
         76:10:82:f3:6b:8d:21:da:53:d8:37:d8:d7:29:98:3c:de:3e:
         d2:e0:60:20:79:ef:a5:2c:0b:14:3f:cb:e2:1c:1f:2e:0b:9d:
         b4:36:cd:cb:7e:97:0e:3a:3f:88:b0:c2:51:f6:bc:f7:bb:ef:
         6a:de:79:e3:b5:86:98:e7:25:b6:95:3a:c6:23:82:10:8a:5b:
         db:04:27:44:78:9f:db:fc:2a:73:9b:aa:d9:e3:7c:04:77:1b:
         f2:1d:82:9d:16:29:01:35:88:da:f9:ca:8e:8b:df:c5:21:0a:
         81:e0:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----