Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer (raw, json)
Hash identifier:          /KPV/sL8HsLEFuaBN0f5TSBZWONnwwN6ZnxYfkQZ9N8=
Subject key identifier:   D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961F112AFBB0F2A6AC87DC1CD6CB086819
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 09:39:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.17.8.0/21
                          IP: 2a02:2870::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:11:2a:fb:b0:f2:a6:ac:87:dc:1c:d6:cb:08:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 09:39:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:66:1b:51:a4:6c:fc:d8:63:fb:b6:85:dc:
                    14:fe:8b:8d:75:45:49:f1:f5:8e:fd:4b:05:f3:23:
                    b9:2b:03:d2:35:e4:25:61:e7:d7:19:e8:f7:56:c1:
                    0e:a2:05:32:56:bb:1b:5a:f0:7d:ae:2f:d9:5e:d7:
                    9a:c9:a7:f3:ad:eb:15:d3:25:73:1d:13:d7:b6:d8:
                    dc:d9:fa:fe:1b:ce:45:2c:80:d3:c6:d4:2a:fe:93:
                    20:f7:0e:08:5d:7b:94:ea:de:38:ba:cb:20:f3:b1:
                    c4:b4:d5:0f:ed:b0:c1:04:63:ed:4c:4e:d8:b9:0d:
                    ba:9b:66:93:84:5f:c0:25:ab:83:f6:5e:37:3c:87:
                    14:88:7a:59:ac:37:61:41:b4:41:70:b0:98:36:3f:
                    28:9f:9c:18:17:de:1b:c0:77:bf:c7:83:3b:6b:3a:
                    e8:6c:af:4e:19:d1:71:50:96:70:96:5e:67:88:c7:
                    f8:74:78:1e:ff:5f:a5:7a:20:27:e9:e0:3e:6d:54:
                    e4:9d:62:14:93:c7:53:59:f7:08:5d:2d:25:8b:94:
                    89:77:22:7f:7e:cc:06:b9:be:8a:f6:a8:83:42:f5:
                    b5:7e:9b:0a:55:43:5c:c1:28:82:de:28:76:11:13:
                    76:90:7a:2f:75:e5:86:c3:89:aa:ee:49:e0:df:08:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.8.0/21
                IPv6:
                  2a02:2870::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:15:6a:ef:85:3c:c2:75:00:d9:cf:77:71:e0:d7:0e:44:
         2a:89:04:95:e7:72:26:00:98:ab:c1:85:40:b5:85:13:aa:cb:
         3d:39:b2:db:ee:23:0f:87:60:d8:b4:2b:03:59:be:cc:a6:a3:
         bd:43:9c:5e:02:8f:8d:51:bc:e5:5c:d5:90:ca:b9:cf:d6:4a:
         41:ea:7f:4f:48:e6:4f:e3:a1:43:1e:4c:5e:15:b7:6f:36:2e:
         35:62:59:27:a4:5c:07:09:bd:43:57:77:a8:e5:a2:4f:f0:f3:
         ee:92:75:e0:80:93:4d:5e:c0:01:d3:22:78:c4:7f:5b:36:ee:
         76:04:21:75:f7:10:fa:9f:c4:a0:54:0a:ec:fe:36:d8:91:4d:
         93:ec:a9:32:87:c0:d7:e7:30:83:1e:9a:d4:c5:b7:2b:34:94:
         53:a0:87:6f:18:12:60:83:aa:16:32:a8:79:bd:ef:6b:10:12:
         4e:19:ea:3f:ea:21:58:7b:d8:29:5f:17:da:ce:93:ae:19:1c:
         6b:3a:dd:db:e7:f4:1c:41:62:ce:4b:bc:c6:ce:4d:ab:93:92:
         87:72:15:9d:94:e2:1c:a4:4e:0f:9c:99:57:93:0e:4a:12:f5:
         de:13:8e:a3:dd:ce:2b:f5:71:5d:d2:84:81:6d:40:f5:41:3f:
         a7:cd:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----