Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
File:                     1NHzJb-K5pShnyj9QHzVu1AOGz4.cer (raw, json)
Hash identifier:          TQSOkVup1yC2mPOAny3WgsTIrSKJA/GhgF11tJYFh4E=
Subject key identifier:   D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B2065E6B61388AE93887882646A733
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.1.116.0/24
                          IP: 2001:7f8:c7::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:06:5e:6b:61:38:8a:e9:38:87:88:26:46:a7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:0a:7f:2b:2f:0d:c5:c1:96:97:16:31:a5:
                    22:0a:7b:7e:86:bf:bd:d4:e4:90:0f:eb:f9:99:7c:
                    ac:55:e6:a8:ab:a3:77:94:5e:e5:ef:39:d7:4b:c0:
                    93:eb:2c:bc:32:fc:9e:e3:bd:f2:20:ac:ed:af:a3:
                    c8:69:c1:2a:53:d5:2d:a8:0b:e2:37:7a:ca:f6:db:
                    64:ab:02:b0:36:66:5e:34:a2:ca:df:aa:73:c4:0a:
                    d0:d6:93:15:6c:4e:65:53:b1:a2:a2:a1:5f:6c:1f:
                    0d:2f:c9:5f:8a:b6:00:58:c7:70:a2:3d:b7:8b:d4:
                    ca:9b:73:7c:86:74:04:fa:ea:e0:81:73:e0:9f:f6:
                    9a:c9:c8:44:3a:73:5c:ad:44:92:7e:d3:ce:ec:75:
                    2f:e8:27:6a:69:44:2d:04:39:79:ea:f4:f3:7d:f2:
                    c4:73:06:7f:cb:d5:8f:e3:62:10:3d:02:4a:b2:1d:
                    a8:0f:6d:18:3c:1b:37:0d:46:d1:94:db:d2:b7:be:
                    be:08:ea:14:84:cc:3b:39:a8:d8:f2:56:8a:cf:a5:
                    3e:c8:47:37:19:c6:4d:b0:b2:24:e2:a1:01:12:a5:
                    1c:ab:4f:c0:ce:f1:7b:d9:2d:a5:e1:48:45:e4:e2:
                    17:da:b3:af:8e:60:2b:e6:f6:a5:4c:73:92:82:b3:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.116.0/24
                IPv6:
                  2001:7f8:c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:02:d9:64:b9:73:3e:20:4c:38:95:c8:ee:1f:ca:69:96:
         ed:c4:7f:0c:75:2f:f6:bb:bd:7c:c0:4f:1c:21:4f:3c:28:f4:
         4e:ba:05:c3:7c:45:cb:fe:e0:5d:8d:5a:b7:e9:65:1e:0c:cc:
         ee:3d:57:f0:69:ee:7a:17:79:f5:c8:86:c4:33:15:c3:0e:92:
         9c:aa:2e:48:d2:67:f0:47:3d:1e:16:bf:3c:aa:ff:46:78:e0:
         a1:2f:91:db:cc:7c:11:2b:97:e5:46:ed:da:ab:42:ec:92:b9:
         68:6a:35:b8:ab:47:ac:5c:49:6b:3d:74:73:ad:8a:06:d4:45:
         1b:2e:d9:6f:b1:60:f9:9d:28:35:42:89:74:da:fe:2f:3b:af:
         8f:e7:6d:2b:60:9e:e2:42:7c:e3:12:cb:6b:9a:8c:4a:8d:f3:
         2d:fe:df:8b:75:0d:2f:1f:07:bf:fa:e2:d5:55:ba:ce:45:02:
         ad:52:05:c5:03:70:40:4f:40:c7:ba:ee:ac:6c:3b:fb:7d:51:
         8e:1c:9f:7b:da:8d:64:42:e1:d4:08:b4:73:7f:2b:ef:14:09:
         f0:23:de:d6:3e:8b:67:42:71:62:e5:23:2d:53:17:e0:87:ae:
         b4:bd:f3:47:0c:36:a5:a7:76:64:d4:5e:5c:50:42:d5:58:9e:
         f8:93:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----