Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.cer
File:                     oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.cer (raw, json)
Hash identifier:          HTdYqTybZpkMoGJODPZCc/vMPoEt9soNK1Tptzhqvlc=
Subject key identifier:   A2:3E:E2:97:3F:59:72:E2:28:38:DA:BE:17:33:0A:19:9F:B1:4F:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01896474D58CB25262C12C44AB5411855FE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 15:25:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 93.93.206.0/24
                          IP: 2a11:6d80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:74:d5:8c:b2:52:62:c1:2c:44:ab:54:11:85:5f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 17 15:25:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a23ee2973f5972e22838dabe17330a199fb14f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:2c:c5:54:75:e8:26:fd:48:77:b7:f0:86:
                    50:be:c0:6b:d6:e7:5f:cf:f3:f6:74:cc:8b:a0:fa:
                    a5:0d:8e:08:ba:d2:18:e1:6e:fc:b4:f2:ef:a5:24:
                    f4:02:cf:50:ee:0e:83:96:3a:31:6c:a2:43:0e:cc:
                    09:26:b3:9b:fd:06:f3:57:8e:65:7f:37:86:82:6f:
                    24:9f:83:94:bd:2c:34:cc:50:b3:f1:a2:cc:10:ae:
                    6f:00:3f:99:dd:40:1e:11:1f:d2:01:3f:9c:59:f4:
                    20:cd:7c:36:53:8f:4b:a8:6d:fc:86:8e:42:40:48:
                    66:29:cc:77:22:1d:3b:f3:78:c3:54:bc:25:88:49:
                    09:93:20:a2:69:b9:10:b9:f5:49:22:28:b2:a2:a5:
                    42:f7:30:bf:54:59:41:20:f0:01:be:f1:76:76:42:
                    6c:2c:d4:8b:71:47:ef:aa:2c:4b:0c:f5:72:80:7f:
                    9f:dd:5d:6c:1f:3c:a5:fa:ab:21:74:2d:5e:4c:05:
                    f2:c9:9e:3a:b7:cd:15:03:00:48:73:5e:46:6f:5a:
                    9d:a9:42:84:bc:53:11:10:a5:e4:e9:33:b5:8c:db:
                    b0:4f:24:a3:98:c9:c3:93:64:11:ca:8f:8d:9d:cd:
                    ff:10:a4:8c:44:3a:4e:7e:30:55:0a:27:5e:36:89:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3E:E2:97:3F:59:72:E2:28:38:DA:BE:17:33:0A:19:9F:B1:4F:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/19f57d-2354-4ea6-9d20-d933de8e2a76/1/oj7ilz9ZcuIoONq-FzMKGZ-xT4Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.206.0/24
                IPv6:
                  2a11:6d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:24:15:11:7d:cd:03:57:07:8d:d0:12:64:33:13:f1:f5:c5:
         cf:58:fb:0d:f2:ab:81:7b:26:e2:79:65:d5:8b:cd:96:bf:08:
         a9:97:b3:bf:d7:5a:c2:48:9f:15:18:b8:d8:86:c4:29:38:3d:
         bd:b1:0e:73:2d:76:d0:5a:9f:c1:dd:b0:53:67:ac:79:bf:d9:
         70:16:b2:5e:36:30:15:35:26:d9:2d:bb:7f:5a:26:10:a9:a5:
         b1:64:98:54:fa:d5:c8:e3:61:c0:c9:10:af:9a:8f:49:5e:b7:
         8d:65:e0:78:b8:63:15:48:d9:65:f1:2f:18:0a:e9:33:42:e6:
         62:ab:79:4b:e7:7d:ea:4a:d6:0b:46:1b:ff:32:d0:63:0f:4e:
         b3:ab:bb:b0:bc:47:48:96:1f:5f:fb:25:b6:0e:b1:09:4d:e2:
         7a:67:7c:53:cf:78:92:2a:eb:5a:89:bd:e3:25:67:c3:47:aa:
         3e:dd:8a:5a:54:99:1d:9c:80:f5:e8:74:c6:4e:e4:9b:69:2a:
         5d:28:c6:88:d0:d4:9d:b0:72:6b:7b:20:d9:42:0a:3f:96:bc:
         e7:ea:e3:fa:7d:9c:78:2f:29:b9:58:2d:35:bc:9e:39:bb:0f:
         6d:1d:ae:b0:61:3a:b6:b7:b2:cd:dc:e0:3f:f1:dc:a5:77:0e:
         31:22:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----