Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z3d9Wg3an6HzCrjg15XsfAMFiD8.cer
File:                     Z3d9Wg3an6HzCrjg15XsfAMFiD8.cer (raw, json)
Hash identifier:          JFpjinXEDqXQTm0VY7GCpbWS6jUXHRnOfavBS+9Q9M4=
Subject key identifier:   67:77:7D:5A:0D:DA:9F:A1:F3:0A:B8:E0:D7:95:EC:7C:03:05:88:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856EFBC2174D1C2D2A7B630201AAD62933
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 20:17:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 194.26.135.0/24
                          IP: 2a11:5640::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:fb:c2:17:4d:1c:2d:2a:7b:63:02:01:aa:d6:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 20:17:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67777d5a0dda9fa1f30ab8e0d795ec7c0305883f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:ae:5d:a0:a1:d4:a7:b5:9a:86:8c:d3:06:
                    73:ec:f3:e8:e7:5b:6d:c5:e0:44:93:5f:66:83:a0:
                    7a:78:39:50:2d:c6:6f:dc:c5:cf:76:11:1a:cd:33:
                    ac:85:fa:55:cb:75:c7:d6:21:8c:fd:04:57:59:af:
                    b8:67:6d:a8:3d:e9:c2:ad:7b:06:a5:6d:2e:ca:56:
                    d6:2a:c2:4b:b2:c0:99:b2:0c:f0:55:fe:63:22:38:
                    bd:81:19:00:4d:e6:1a:61:aa:e9:7c:fa:d1:a9:70:
                    31:b5:08:76:51:97:12:d9:82:09:8e:81:64:fb:db:
                    41:88:aa:21:87:13:6e:65:ae:c6:19:dc:7e:89:ae:
                    7b:96:9c:1a:ff:76:c9:86:2b:b4:34:bc:dd:7d:7d:
                    95:69:6d:a5:b2:39:40:3a:d5:30:fe:df:b5:6b:7b:
                    b3:63:b1:16:c4:f8:cc:ce:ea:6c:ae:73:1d:e9:fd:
                    db:87:36:e4:43:68:42:86:68:fa:13:90:0e:91:1f:
                    44:c2:53:12:71:27:3e:98:49:71:af:05:bb:f7:86:
                    11:d7:ce:7f:a8:d0:5f:39:36:c7:62:b3:96:2c:2d:
                    4a:65:c5:44:68:4a:a8:91:4c:30:81:c1:a5:9b:21:
                    20:5b:5c:0a:0f:fb:d1:73:1e:30:1b:9a:60:f2:57:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:7D:5A:0D:DA:9F:A1:F3:0A:B8:E0:D7:95:EC:7C:03:05:88:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.135.0/24
                IPv6:
                  2a11:5640::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:7d:b0:a6:44:8e:31:4e:66:f1:b1:74:ff:3d:30:b4:37:
         9f:9d:53:73:fc:b9:56:28:92:70:c8:5f:f2:74:fd:91:c2:cf:
         31:3f:58:dd:2f:e8:a4:e0:0e:a7:08:00:f8:52:4a:9c:25:f9:
         ea:af:3d:68:99:31:b2:8a:c4:7a:de:3e:42:28:65:c6:67:62:
         06:b1:02:cf:aa:8e:ca:f2:6e:b5:ca:8f:81:70:51:7f:b7:b1:
         89:42:55:4d:61:ad:0c:39:9c:a6:d4:c7:f4:49:d0:67:3e:df:
         81:f9:7e:4f:ef:a2:db:4d:0d:39:0a:bc:53:ed:c9:c0:a7:55:
         81:cb:78:0e:b3:d2:b7:f1:d9:26:18:d9:e0:d4:64:9f:4d:a3:
         af:26:91:bb:d1:5f:8f:64:54:19:98:f9:6c:d6:1d:0a:8e:4f:
         e4:5f:04:72:85:7d:69:1e:55:35:fb:75:9f:bb:6b:01:5d:88:
         ec:b3:41:a8:83:3c:aa:ca:24:c4:1b:50:9b:d5:f3:08:c0:72:
         7e:e8:75:7a:fb:12:d5:db:3c:bb:8e:06:70:40:8c:1c:de:12:
         cf:a7:e8:a7:1a:a4:66:b2:19:9d:37:85:49:e5:55:21:d4:ee:
         e6:63:02:69:47:97:ad:43:e7:22:a8:87:65:eb:61:29:d4:a1:
         06:48:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----