Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer
File:                     SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer (raw, json)
Hash identifier:          bF1JWszqx1RGlRFYFQMHOE6spq+smkL2mZ2ckLxTAws=
Subject key identifier:   48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9D98C7ED22
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:51:41 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 24896
                          IP: 2a00:1ae0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676873104674 (0x9d98c7ed22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:51:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48709d9a59a50c983b65916d3bc6cd1716cf1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:c3:29:1a:6b:20:6c:e1:4b:2b:50:f6:e2:
                    51:c7:db:71:31:b9:93:f9:81:75:d1:c8:7b:a1:47:
                    43:3d:41:ab:55:f8:a9:a9:f5:9b:3e:6c:d7:2a:11:
                    a5:58:84:52:18:0f:4c:f0:9e:67:28:99:21:49:62:
                    0d:81:a5:1f:61:e2:f4:97:40:2a:41:74:d1:90:64:
                    15:11:4d:a6:84:2d:30:b7:19:9c:ea:ec:a4:0f:dc:
                    24:9e:e1:e2:fb:c0:82:14:83:cf:39:83:30:24:7d:
                    cb:4c:03:58:b3:4d:cf:ee:fe:e2:c4:08:b9:d7:eb:
                    9d:27:32:10:d4:9b:14:d6:b6:21:6e:96:c8:0a:5d:
                    da:47:b6:b1:93:b3:38:85:65:72:ca:f4:06:17:13:
                    d4:04:61:cd:22:73:d6:77:20:1a:98:12:e1:0b:c8:
                    1d:c9:fd:8b:2d:25:00:6b:b5:47:29:dd:aa:69:40:
                    8f:55:ff:94:a6:1c:77:74:b7:b6:f5:6a:a2:2a:56:
                    cf:5b:3f:08:45:e9:84:d7:fb:0a:27:93:a1:17:fb:
                    6f:ae:ac:30:b0:4a:c4:5d:84:92:ef:b5:cd:71:c7:
                    86:55:17:4b:d0:ce:75:e6:d1:ed:67:68:4c:f5:5a:
                    ab:5a:7b:81:39:6f:a6:61:57:68:3f:f2:8e:51:88:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24896

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:1e:78:1b:69:3a:94:90:76:e1:56:ca:d0:6e:cd:06:9c:
         a6:c8:77:a7:b6:5f:a6:16:8c:85:bf:07:3c:47:1c:3e:e7:30:
         12:5d:6c:15:3f:fd:60:a5:11:42:33:73:ce:34:b0:a9:7b:2e:
         6f:47:d8:35:1d:6b:b4:af:89:94:91:97:8f:33:da:e3:6c:9e:
         b5:7c:60:f6:e2:c4:77:41:95:da:23:10:58:c0:f3:4d:7d:a6:
         25:30:ca:d4:fc:ec:49:20:5b:7a:22:66:a4:32:48:73:11:ea:
         ac:8b:fa:0c:06:89:a2:41:6c:ed:5a:9c:dd:31:cc:d1:69:8a:
         27:49:d9:70:b7:ec:ef:f7:5c:01:56:cf:c0:4f:96:14:13:29:
         12:de:8c:0c:c0:3b:be:c8:df:3e:ce:ee:b6:f0:37:9f:61:87:
         cc:eb:1e:62:05:f7:f8:66:14:a4:aa:09:a3:07:1f:86:ee:3a:
         3a:ca:a4:39:44:42:9d:79:95:9c:7f:ad:84:d6:75:0c:2a:05:
         98:66:5e:af:7f:42:af:89:31:99:3a:59:bc:f5:a5:e3:f2:c9:
         34:dc:4e:6a:e0:22:b0:3d:4a:72:34:a3:5f:66:48:f1:c8:21:
         b9:53:53:57:da:0e:38:7b:ce:66:91:b0:c7:1e:3a:08:b1:7f:
         b4:35:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----