Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer
File:                     bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer (raw, json)
Hash identifier:          hVKE2gmepWKCrhFYK64ZhggMrWg7vLARdHRBQrU2frY=
Subject key identifier:   6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187E148983D4105D25A67CAA793775ABEAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 03 May 2023 11:04:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.126.112.0/24
                          IP: 2a11:edc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:48:98:3d:41:05:d2:5a:67:ca:a7:93:77:5a:be:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  3 11:04:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e8e848a1d90b7b52924b8ac70d2c02bf8a9ca2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:c1:5a:f0:56:63:89:f9:75:2e:74:af:97:
                    19:cb:16:a2:72:82:69:28:85:85:8c:c0:3b:f4:f1:
                    cc:ed:76:68:fd:7e:8f:3e:52:54:9e:77:ca:63:01:
                    7b:72:67:2e:42:37:91:0b:66:da:8c:46:5a:33:d0:
                    11:3d:fc:63:2b:9d:da:8f:a7:ad:49:a4:6f:83:c4:
                    fc:bd:2a:9d:37:bc:a9:bf:d9:60:35:c3:85:b8:c8:
                    a9:8e:f9:80:91:11:6d:20:9e:0b:2d:33:48:94:7b:
                    39:c9:20:d3:2f:a5:19:e3:11:08:92:5e:60:6f:c4:
                    66:f1:0b:b1:81:d5:23:bd:67:fd:fe:07:2b:2b:3d:
                    d2:82:69:a0:81:cb:85:e3:00:f1:e7:12:2b:dd:41:
                    e6:ab:73:60:79:94:ff:e4:63:51:b9:01:c7:26:c5:
                    83:65:89:c4:1c:91:37:df:ba:c8:8d:2b:4d:63:fd:
                    4e:f8:31:65:a0:73:44:dd:9a:b9:a6:0f:8f:00:7c:
                    d0:0a:96:fa:0e:e8:ea:4b:20:3e:b3:09:5d:91:f4:
                    50:99:6f:35:6e:ef:78:f9:fc:74:be:cb:07:f8:30:
                    5a:46:0a:bc:3b:c5:df:eb:a4:da:25:5f:4b:f9:60:
                    ba:9e:6d:81:dd:85:3c:36:f4:5d:35:6a:4d:71:fc:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.112.0/24
                IPv6:
                  2a11:edc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:15:25:aa:81:da:64:38:e1:38:74:16:cf:c2:74:be:e2:92:
         72:30:1d:cb:f4:5d:97:3c:80:a5:6a:18:77:38:36:87:22:41:
         01:d3:9c:c7:d6:cd:0e:b5:9e:5c:1b:2e:6b:0e:1e:ca:10:43:
         42:9e:dd:c7:0c:09:f8:0d:d0:0d:d3:f6:6d:0a:24:56:02:f8:
         4e:82:71:de:24:66:13:00:57:b2:81:cf:d9:76:ce:37:e0:7d:
         b2:49:ab:90:f4:bc:bd:39:c2:eb:bb:fb:09:ef:5f:b1:f9:2b:
         28:a3:6d:95:0e:e8:ba:43:af:1b:4c:31:62:28:6d:a4:84:da:
         c7:c5:9f:1e:e6:d6:86:3b:18:4f:fc:78:e4:ca:ed:fe:a8:0a:
         df:d7:51:b2:ff:7f:02:75:ff:ce:27:bc:02:44:5f:3c:1f:b1:
         d9:7c:e4:93:05:46:99:12:8d:60:f0:08:4f:6d:2f:c4:e1:c0:
         3b:81:f7:73:af:83:9e:71:81:9b:b2:5a:34:cf:23:a3:d7:c7:
         e5:5b:01:95:96:bc:86:e8:c8:24:3a:9a:40:7f:d3:00:ba:e2:
         c5:17:a5:7f:fd:f9:1f:92:c1:19:0e:a7:dc:1b:2a:28:22:b7:
         8c:b8:de:22:db:fb:c1:1b:53:1b:e4:ca:43:cf:e2:17:49:95:
         41:61:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----