Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
File:                     1-muQgEgTpldoh5it3nvb0ObQ5T4.cer (raw, json)
Hash identifier:          HYqIjaw0tAapZV0aK046Ii3Dq+sEJb4Fze1v5SoDzqs=
Subject key identifier:   FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA7E6EDFE1789E8046627B389F2E6F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 195.130.210.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:7e:6e:df:e1:78:9e:80:46:62:7b:38:9f:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:fb:ce:c1:e4:26:6d:15:cf:5f:db:8a:2d:
                    24:72:b6:ee:eb:a0:73:e8:1f:b5:27:ec:fa:84:8b:
                    92:ec:b9:20:79:70:95:ff:5a:6d:3c:f1:16:34:0a:
                    5b:e6:5d:55:53:07:64:95:f9:3f:4d:fb:be:bd:ab:
                    73:cb:32:b3:ba:78:64:7f:be:58:39:12:97:56:0b:
                    c6:f8:0e:42:c2:fc:41:a7:f7:2a:4a:10:c0:c7:c1:
                    51:02:27:03:5c:e5:41:44:c5:96:8c:aa:42:29:ff:
                    3f:bf:68:8d:c5:d8:3a:bb:0e:1f:0a:9b:68:0e:d3:
                    79:d9:90:fc:a8:62:88:bc:ac:58:e8:f5:8d:12:5f:
                    f7:f5:7f:3c:9a:a9:e1:99:9f:7b:25:48:bb:d6:3c:
                    c0:7f:32:bf:01:ca:16:42:bc:40:64:2e:aa:57:c4:
                    a8:c8:2a:17:40:e7:60:1c:46:8f:87:6b:dd:9e:3a:
                    27:a8:4c:2d:ad:71:12:41:7f:88:72:82:a8:a4:58:
                    9f:71:d6:d3:0a:f4:3d:23:0b:13:47:de:30:91:91:
                    6a:15:d8:2e:1c:b0:af:6a:b3:b3:a9:86:c3:1f:7f:
                    df:7b:d5:ec:21:66:ac:4c:ca:8f:e6:84:7b:98:f9:
                    ba:f7:4f:7c:0b:43:76:69:7f:1a:8c:f5:fb:0b:8e:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:73:57:5e:9f:91:8d:f6:d7:e5:23:c9:f8:e4:33:cd:72:8d:
         ab:68:10:67:3a:b6:e8:e7:9b:e4:68:d9:8f:d6:ba:2c:c9:08:
         d5:ee:0f:34:29:ef:35:62:c3:59:19:79:cb:a2:e4:f4:82:3d:
         e9:d4:ec:8e:1b:9c:b3:39:0e:f2:7e:35:86:19:91:99:05:e0:
         c6:95:b0:9c:ff:1d:25:82:d6:03:5b:4a:d1:cd:cc:06:e4:1c:
         58:94:16:b4:90:48:06:d8:c2:46:0b:77:13:d9:ac:50:38:ce:
         7e:e5:07:01:3a:2c:de:80:0f:9d:1e:0a:4c:79:12:f6:a2:ea:
         08:ed:b9:8a:84:64:50:ce:41:3c:95:a4:f8:30:0d:3b:b4:ba:
         a6:e5:0e:dd:67:e7:0c:bf:03:98:56:4d:c7:30:20:ff:36:ae:
         79:6d:c0:6c:46:95:b2:34:a2:0e:c8:59:c5:5a:55:9c:98:48:
         64:c9:c8:8f:5b:31:2f:3e:d4:3f:29:0e:2c:73:44:16:59:a5:
         8d:76:e5:3f:56:1d:b9:a6:a2:a9:bb:55:55:c7:d7:66:32:95:
         3b:5f:d8:c1:c1:9e:84:e8:b7:b6:bb:cb:66:43:dd:2d:da:7c:
         0a:a2:af:1c:f5:29:3f:ce:67:80:56:79:99:38:91:e3:1b:a3:
         00:46:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----