Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.cer
File:                     Q0_Jk4hJL3sgRIYa7yIyKg6txM4.cer (raw, json)
Hash identifier:          TYi/hPxNXBF0m89+Kp6WeOVUGhqNLQTL0d8LyuOMuyI=
Subject key identifier:   43:4F:C9:93:88:49:2F:7B:20:44:86:1A:EF:22:32:2A:0E:AD:C4:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F227BE2AD12F6AAE2A293529735DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 37.72.140.0/24
                          IP: 2a11:31c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:22:7b:e2:ad:12:f6:aa:e2:a2:93:52:97:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=434fc99388492f7b2044861aef22322a0eadc4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:52:51:01:cd:77:a0:6b:d3:da:52:c1:bd:
                    bd:bb:05:d2:19:2f:9e:44:67:1c:a2:78:dc:9c:b4:
                    c3:f3:db:29:2f:e0:81:a7:c2:4d:31:0e:04:b7:e6:
                    95:88:d7:67:4a:a1:8c:71:1f:54:7f:0b:d5:32:b1:
                    b0:07:7d:61:e1:f6:c7:2d:5f:55:2e:b0:67:77:2b:
                    84:dd:0a:43:3c:dd:73:47:35:c2:23:7c:10:40:63:
                    a1:6b:2f:2e:d2:e3:79:30:28:f7:6a:bc:99:4a:1d:
                    97:07:44:8a:cd:78:eb:75:06:2f:78:16:a0:de:f2:
                    9a:19:4b:7c:7d:7c:8d:04:7a:6e:7c:bd:b2:e4:0c:
                    b0:00:e3:4d:52:db:55:64:5e:12:0d:ac:99:e8:7f:
                    d0:a8:a0:7e:7d:54:e8:c2:a6:cf:3b:0b:7d:18:9b:
                    da:23:c1:6d:ee:89:84:34:31:14:70:bd:b4:84:e8:
                    8c:13:db:70:4b:e4:4b:41:e1:e1:2c:c2:1a:09:a5:
                    d2:14:2f:32:44:b1:6d:df:30:76:5b:57:f8:2a:80:
                    e8:26:96:9f:5a:bb:30:e4:71:5b:12:c0:89:9a:5f:
                    5d:26:f9:00:c5:2e:ab:4a:b1:68:a8:24:5a:2a:b0:
                    69:47:d8:90:0a:67:76:65:4b:0f:38:b3:e0:f0:c8:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4F:C9:93:88:49:2F:7B:20:44:86:1A:EF:22:32:2A:0E:AD:C4:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.140.0/24
                IPv6:
                  2a11:31c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:de:ea:c9:67:b0:40:6d:eb:29:83:c9:ab:d0:e6:ae:00:e4:
         b9:a6:9e:81:e0:fd:84:09:9d:d9:38:bb:75:c7:d7:ec:c2:5a:
         d0:d3:7d:8f:12:43:37:95:6b:57:d3:70:de:b2:eb:d4:bb:a4:
         b1:0b:8c:93:4c:d7:0a:91:3d:d7:b1:b0:79:4c:6f:28:fc:24:
         82:55:2f:51:66:35:49:5f:34:02:ee:3c:fd:6f:14:94:2f:66:
         16:2f:e3:8c:35:3e:f2:7e:bb:18:d6:a2:b6:9c:fa:1a:96:04:
         78:76:98:4b:6f:a7:39:99:bc:2d:7a:11:cf:b6:b6:f6:ef:18:
         e1:4a:63:e5:76:48:0a:e6:44:7f:64:e7:a2:f5:9d:a0:e5:bc:
         f1:0d:99:52:ef:e9:d7:ff:dd:67:5d:8c:18:9f:56:25:ee:69:
         e1:c2:7d:1f:5d:d4:57:99:69:c0:d5:02:aa:d2:13:98:e4:ce:
         21:c6:87:f7:5b:4d:4f:06:2d:20:3a:2b:97:82:d4:df:86:59:
         0f:b1:60:c5:43:f9:a9:34:24:21:3b:82:25:c4:53:e5:00:a2:
         bf:89:3e:af:bf:74:82:10:c9:81:24:b7:30:9c:0b:72:d2:41:
         60:2c:f5:da:60:2e:8b:b2:2a:2b:b5:b1:5c:03:78:c3:01:e7:
         15:79:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----