Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer (raw, json)
Hash identifier:          YNl1tC/XKKKiM/qFX4v/W4MtS82mc2cFPzh0RnAX7RQ=
Subject key identifier:   D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444C756F75122A5C1FF84469B8AA98D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.89.84.0/22
                          IP: 2a05:d600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:c7:56:f7:51:22:a5:c1:ff:84:46:9b:8a:a9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:a6:22:ca:8e:88:aa:29:5c:4c:9c:c3:4f:
                    ae:9d:e7:4e:39:66:75:df:57:cd:b8:3f:27:40:f5:
                    ac:75:f1:5e:43:a0:b3:fd:f5:b9:0b:e1:63:0f:aa:
                    a6:4e:6c:55:9f:db:15:5d:d9:54:52:69:c2:8d:36:
                    79:8d:34:46:1e:0f:92:3e:d4:eb:ff:5e:f7:0b:2e:
                    17:3c:0e:b6:ac:ca:e4:24:87:40:99:31:f6:43:70:
                    50:e6:8e:b4:04:10:29:0d:a7:81:98:10:fc:08:c9:
                    85:69:38:73:c3:a8:0d:c0:85:33:aa:ec:6d:df:cb:
                    3f:bb:f2:24:31:e2:ff:f7:87:0a:20:c6:34:07:4e:
                    15:e9:d0:23:ec:c8:36:fd:c7:7d:88:a8:2b:9a:23:
                    73:8b:f3:a9:f7:e2:2f:e2:3c:83:1a:e6:10:5d:ca:
                    6c:3d:d8:82:2d:20:60:91:f4:2a:02:b6:20:17:c9:
                    6d:b1:8b:37:3d:28:6f:5d:a2:7e:07:51:3b:ca:28:
                    22:72:bd:d3:72:56:84:bb:a3:87:92:c7:e8:13:98:
                    ae:77:1d:ef:d8:01:82:6c:a7:cb:ba:6b:04:69:42:
                    df:21:80:6a:3e:26:37:b7:64:9e:a1:c0:24:7a:53:
                    3a:5c:fd:09:54:22:44:17:c3:37:55:76:d5:18:7c:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.84.0/22
                IPv6:
                  2a05:d600::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:be:56:76:7c:4a:49:d7:bf:9d:00:bb:40:30:b3:41:89:83:
         fe:00:3c:fc:6b:6c:df:91:da:6f:83:e5:a4:e7:4f:5d:5a:f7:
         82:31:6b:1e:9e:9b:a8:34:14:09:92:a2:2b:fe:49:98:70:1f:
         9c:cb:ec:6e:88:dd:17:48:77:fc:1a:76:6d:6b:16:fa:6a:66:
         a3:6b:7c:97:71:df:24:69:42:6b:ca:11:65:60:cf:19:fa:c5:
         41:c7:2c:e6:a6:a3:09:94:81:68:57:fd:80:7c:c3:05:55:a5:
         90:de:bb:98:de:29:0c:9e:1f:fd:77:31:b4:fb:13:11:c8:ed:
         85:a6:81:05:5d:d2:58:e2:76:e8:f1:d9:b5:54:ea:e6:bc:f9:
         86:ab:a0:5f:96:46:08:70:52:95:8d:42:f1:28:fa:bc:c3:87:
         6d:2e:52:a3:19:92:9c:63:7e:d2:be:47:6a:1a:38:bb:b2:26:
         47:28:f8:d2:39:bf:7c:3a:78:10:a7:be:db:e3:3c:d2:81:53:
         f6:19:44:79:07:1d:31:39:70:c5:9e:8b:6f:10:34:0c:29:e1:
         21:10:4b:79:de:34:e8:bd:26:05:f8:50:ee:aa:e8:dd:75:b7:
         ed:41:9a:69:55:c4:fa:bf:80:df:10:65:d2:00:26:e4:71:44:
         bb:c7:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----