Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dUW3TLD14K4IBx00SD4WoH6LD10.cer
File:                     dUW3TLD14K4IBx00SD4WoH6LD10.cer (raw, json)
Hash identifier:          8vTgPHmtJUDPudpLdZPreCwXesS+YE1L1H9AcFWhxLM=
Subject key identifier:   75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018709294103897E00E56981AEF7F562F464
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/dUW3TLD14K4IBx00SD4WoH6LD10.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 22 Mar 2023 11:51:51 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 176.97.221.0/24
                          IP: 2a13:d280::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:29:41:03:89:7e:00:e5:69:81:ae:f7:f5:62:f4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 22 11:51:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7545b74cb0f5e0ae08071d34483e16a07e8b0f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:88:76:4a:0d:ef:df:b6:41:3e:d3:1f:b0:
                    f4:9d:3f:e1:66:22:c6:04:a9:64:23:42:64:cd:e3:
                    52:a1:19:e5:31:e0:32:b7:f4:a5:45:1f:0a:4b:1f:
                    bc:20:8d:f3:39:e8:5b:10:11:07:0c:a5:25:11:d0:
                    0e:fe:2d:b5:8c:25:c4:4b:b3:ac:bb:c1:5e:59:45:
                    d0:a2:73:4a:89:69:45:a9:01:ef:16:e5:6a:de:25:
                    a1:d3:78:f5:54:f1:93:95:b4:10:eb:4c:b7:e3:e3:
                    1e:60:8c:24:17:67:9c:a6:71:16:19:fc:6d:e1:7d:
                    d2:2c:42:81:a1:a5:c5:cf:2d:46:ca:8f:6d:56:34:
                    70:14:c0:fe:3e:98:4b:16:47:42:68:fb:d7:b7:d7:
                    2a:a6:d9:f5:e8:96:05:0b:93:7a:ec:50:22:16:61:
                    8c:8b:e7:94:2c:40:21:4f:d0:69:9b:82:55:41:c4:
                    05:b7:8d:10:87:a5:94:04:51:40:d0:13:8a:9a:9b:
                    fa:62:63:c1:7f:8f:1e:ab:14:0a:d6:82:21:70:0c:
                    05:40:9b:8a:ce:5f:39:eb:bb:a7:ae:11:09:65:3b:
                    e6:8a:07:37:d6:0f:bb:25:d9:c8:61:15:cb:b1:39:
                    7c:a2:66:df:50:19:ed:d0:8a:7b:e9:76:ad:24:ab:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/dUW3TLD14K4IBx00SD4WoH6LD10.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.221.0/24
                IPv6:
                  2a13:d280::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:ee:33:cc:4e:f9:62:d7:c8:53:28:a4:6e:8c:57:b5:a2:
         e1:50:6a:ae:19:e7:2e:51:af:b6:4f:3c:1c:b8:f1:e1:88:b6:
         dc:fb:fd:5d:c7:fe:48:3b:97:15:4d:11:7d:3f:3d:a1:d5:35:
         2e:e8:cd:43:09:84:d6:b1:c7:02:fc:dd:09:9a:f4:39:40:cf:
         5a:c5:e4:ca:c5:c4:5e:f2:be:8c:bf:57:3e:02:b5:cc:8a:72:
         54:a2:03:be:1d:1d:32:d9:2b:3b:cd:86:df:82:58:45:86:02:
         e5:06:e5:0f:99:36:e3:ba:bd:b7:12:63:ca:c3:58:81:15:fe:
         50:9c:3b:e2:9a:b9:40:77:da:ee:f1:45:89:74:e9:5d:ae:7e:
         c8:c8:a3:8c:52:a9:80:b1:60:b7:65:ee:8d:74:c1:dc:1d:28:
         63:44:e5:11:26:ca:8d:62:0f:f4:25:9a:63:d5:93:2e:2b:bb:
         c4:c2:65:8a:a4:f5:3e:61:54:a2:5c:15:f5:f7:bd:a0:fa:4a:
         31:71:a1:46:51:cd:16:54:db:d7:ef:99:26:a4:e6:16:fb:d6:
         a3:87:7a:2c:be:47:74:87:f4:dc:3f:2b:d0:ef:f0:b9:50:ae:
         fb:b2:37:05:52:b8:99:d7:14:31:f1:97:8d:d4:b8:da:1d:c1:
         3e:80:9b:84
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYcJKUEDiX4A5WmBrvf1YvRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzIyMTE1MTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTQ1Yjc0Y2IwZjVlMGFlMDgwNzFkMzQ0ODNlMTZhMDdlOGIwZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrOIdkoN79+2QT7TH7D0nT/hZiLG
BKlkI0JkzeNSoRnlMeAyt/SlRR8KSx+8II3zOehbEBEHDKUlEdAO/i21jCXES7Os
u8FeWUXQonNKiWlFqQHvFuVq3iWh03j1VPGTlbQQ60y34+MeYIwkF2ecpnEWGfxt
4X3SLEKBoaXFzy1Gyo9tVjRwFMD+PphLFkdCaPvXt9cqptn16JYFC5N67FAiFmGM
i+eULEAhT9Bpm4JVQcQFt40Qh6WUBFFA0BOKmpv6YmPBf48eqxQK1oIhcAwFQJuK
zl8567unrhEJZTvmigc31g+7JdnIYRXLsTl8ombfUBnt0Ip76XatJKtMBwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHVFt0yw9eCuCAcdNEg+FqB+iw9dMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2VjYmJl
YS05YmM0LTRiY2QtOTUyMi0xMDA4MjA0YmE2ZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZWNiYmVh
LTliYzQtNGJjZC05NTIyLTEwMDgyMDRiYTZmZC8xL2RVVzNUTEQxNEs0SUJ4MDBT
RDRXb0g2TEQxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsGHdMA0EAgACMAcDBQMqE9KAMA0GCSqGSIb3
DQEBCwUAA4IBAQCbsu4zzE75YtfIUyikboxXtaLhUGquGecuUa+2TzwcuPHhiLbc
+/1dx/5IO5cVTRF9Pz2h1TUu6M1DCYTWsccC/N0JmvQ5QM9axeTKxcRe8r6Mv1c+
ArXMinJUogO+HR0y2Ss7zYbfglhFhgLlBuUPmTbjur23EmPKw1iBFf5QnDvimrlA
d9ru8UWJdOldrn7IyKOMUqmAsWC3Ze6NdMHcHShjROURJsqNYg/0JZpj1ZMuK7vE
wmWKpPU+YVSiXBX1972g+koxcaFGUc0WVNvX75kmpOYW+9ajh3osvkd0h/TcPyvQ
7/C5UK77sjcFUriZ1xQx8ZeN1LjaHcE+gJuE
-----END CERTIFICATE-----