Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer
File:                     WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer (raw, json)
Hash identifier:          jrlaO7NrcL1hmqOOfzvsz7L73UpTBGlGY1E3WWRhzNI=
Subject key identifier:   5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018964785D5B20B34421E742E931E3175C75
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 15:29:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 77.246.244.0/24
                          IP: 2a11:1380::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:5d:5b:20:b3:44:21:e7:42:e9:31:e3:17:5c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 15:29:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a0161461fffe43e9f8af1a7d16c11809f301d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:da:59:c3:7c:21:79:1b:ec:fa:ab:b0:a8:
                    ce:bf:d4:79:31:ca:1b:da:82:17:6c:f4:3d:5e:48:
                    14:7c:3b:dc:72:a7:e6:95:ff:63:e7:e5:fa:50:ad:
                    cb:ff:9d:3d:40:a7:a1:c3:be:bb:23:77:cb:9f:e8:
                    fb:a4:d3:25:dc:ba:8c:bf:78:ab:ff:dd:eb:eb:2e:
                    4e:74:3b:04:45:ec:b4:68:35:1c:b6:d7:e3:ef:d9:
                    10:62:c3:6c:63:6c:6c:18:e4:0f:2c:2d:37:19:30:
                    fd:3e:84:8e:20:af:78:d3:3b:68:96:74:50:46:0c:
                    a0:1f:29:c2:25:06:b4:a0:3c:fb:3f:da:58:91:29:
                    69:58:35:e0:74:8b:a5:a9:64:51:0b:28:30:ad:b7:
                    a7:49:a3:78:50:ff:35:8a:5f:47:ae:7e:5f:a2:9b:
                    10:e6:f3:1a:cd:d7:00:97:d6:ed:57:b7:b2:53:f2:
                    58:fa:29:9f:9c:19:fe:64:63:2a:52:be:0a:30:b7:
                    19:3f:5c:fe:77:4d:b9:40:9b:10:25:11:dd:1c:88:
                    c0:7d:12:a4:a9:45:51:a0:a4:01:de:61:b1:97:dd:
                    b0:5d:46:5a:83:fc:42:19:78:33:8c:31:68:a1:83:
                    03:74:3c:2f:a3:d8:f7:f6:2e:94:78:1f:ec:aa:fd:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.244.0/24
                IPv6:
                  2a11:1380::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:2f:63:da:ca:10:d4:e7:08:68:84:fb:78:af:d2:16:1d:
         52:56:d5:25:9d:e9:45:7c:14:61:fe:e1:29:c2:0a:bd:aa:c6:
         e1:0e:f4:3a:f0:9d:7a:f9:0f:e8:23:b3:2d:3a:07:2c:e2:63:
         6f:fd:6f:ee:cd:5e:d5:a3:0c:f5:61:9e:ea:22:13:66:8b:93:
         dd:71:11:0f:cd:43:34:20:02:82:51:ff:cb:60:d8:ae:ae:d8:
         a7:93:62:5a:98:4b:6b:27:49:db:9c:c9:72:11:e3:ef:77:2b:
         dc:29:70:73:2e:d2:7f:9b:3f:3d:de:c5:29:89:9e:5a:ad:58:
         73:8f:82:23:96:80:72:32:14:c9:ee:14:a4:81:9b:b3:a6:7f:
         58:97:b6:04:d1:64:92:bf:75:45:91:ee:a1:c0:31:73:c8:84:
         94:80:e1:75:e6:f6:89:37:cb:5d:9f:47:22:66:e2:40:ec:93:
         a0:76:5d:32:13:e0:53:10:60:32:a7:52:71:9c:8a:af:9f:45:
         ce:1d:14:82:da:47:e8:ae:2b:4d:04:ef:d3:6b:13:5c:84:1c:
         ac:ed:a3:aa:e9:cd:dd:12:1e:52:ae:48:ca:e4:c8:0c:53:7f:
         c2:ba:ec:2d:5b:54:e5:2c:60:51:aa:ec:71:82:2b:39:b6:d3:
         8c:05:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----