Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.cer (raw, json)
Hash identifier:          vSSjgUJVvqrdJVwFV22aQ06mh8Dt9eDj7SQjjLbosqc=
Subject key identifier:   D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D41B7D787EA02BDA35E7B99DE927EF33
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 26 Mar 2025 20:18:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.183.164.0/22
                          IP: 2a0b:1680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d4:1b:7d:78:7e:a0:2b:da:35:e7:b9:9d:e9:27:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 26 20:18:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:b7:7e:e7:5a:63:25:61:73:90:3e:66:75:
                    45:98:9d:21:11:ba:76:4c:5d:39:45:be:0f:6e:55:
                    0d:d8:13:2b:aa:15:03:ce:c7:ad:09:d8:34:4f:97:
                    e9:4b:bf:67:c5:7c:81:ac:3e:40:34:4d:09:2a:b6:
                    e5:73:9c:fc:13:fb:8b:dc:b5:61:57:92:ee:c4:1a:
                    b4:ee:a2:ef:a9:5e:85:82:58:4c:e0:ca:0b:7d:60:
                    58:3d:40:62:61:0f:c7:c8:b9:f6:95:c6:96:64:3a:
                    cb:f5:6a:af:c6:e7:4e:0f:98:50:fb:e8:a6:b5:d1:
                    a4:0a:8a:73:69:0d:47:21:06:b0:8b:b0:24:45:a5:
                    a4:50:59:ce:03:1e:94:e4:f7:8e:97:05:a1:46:3e:
                    55:d5:e1:ce:02:04:56:05:78:17:5d:6f:85:6e:1f:
                    af:5c:6a:7d:5c:14:23:07:76:dc:01:2d:cf:9b:00:
                    3e:b9:f1:b8:aa:64:cd:a9:db:7a:39:81:ef:0a:a0:
                    81:8e:4c:0b:9c:b8:d6:2c:9e:64:52:68:4e:94:57:
                    a1:13:77:6e:eb:fd:39:3e:d4:41:c7:12:1a:b2:d0:
                    5f:28:a8:cd:08:7a:ac:49:a0:1d:7e:63:6a:6b:49:
                    3d:e9:2b:33:05:d4:d8:f5:4a:69:c6:06:6b:49:7a:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.164.0/22
                IPv6:
                  2a0b:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:13:63:c7:1a:f9:17:fa:0f:c1:72:3c:b2:ec:aa:f3:a1:6d:
         0b:ec:75:7f:95:15:32:63:de:73:8e:bc:f3:e9:16:a3:2b:03:
         15:61:ad:83:9b:f4:e4:c9:18:f2:b9:8d:f1:46:7f:6d:13:a9:
         b7:44:47:a0:17:c2:aa:3b:b3:ed:77:34:a8:26:2d:d9:1d:40:
         e3:01:42:90:ed:7b:e5:50:b0:e8:b6:48:39:59:16:b9:7a:10:
         00:60:18:8f:a0:13:1b:63:09:8e:4b:53:e9:3d:f9:37:f4:d2:
         39:31:df:6c:31:24:16:26:a7:7c:c4:bc:05:b3:b8:8f:d8:ee:
         52:8b:14:f4:5e:dd:fa:fc:b2:83:6d:6b:72:4c:c2:9a:32:c0:
         cc:65:02:32:9b:35:93:2c:b9:25:d1:99:30:03:2d:21:6a:1b:
         60:dc:3f:90:1a:2d:30:21:91:11:39:03:c8:27:23:72:b0:2c:
         74:cd:37:57:ed:f3:fd:a3:cb:ce:52:7c:7f:a5:65:9b:60:10:
         77:bf:70:5b:a8:9b:25:09:63:c4:60:ae:f1:b8:5d:f6:63:37:
         29:9b:5b:15:83:fb:49:9d:e6:8b:43:cf:f7:82:46:6c:88:ac:
         52:b6:fe:ae:30:2a:10:41:3a:e9:da:b6:02:85:e8:e0:18:fb:
         a3:36:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----