Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
File:                     28lQCYQ2KBzuVCoedFRlUeHlUoM.cer (raw, json)
Hash identifier:          KLj2krI59r6VgDNwcjIgZXXUNLtDpr/t3aWyLu+24pw=
Subject key identifier:   DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427487EA88A1DE8C32D47B164B82F418D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.116.72.0/22
                          IP: 2a0d:5040::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:7e:a8:8a:1d:e8:c3:2d:47:b1:64:b8:2f:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbc950098436281cee542a1e74546551e1e55283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:fa:62:15:f8:be:ff:e6:a6:70:2d:9a:8a:
                    b4:84:f4:6a:46:90:0b:a6:61:96:10:f8:72:c8:97:
                    ca:04:2f:ba:5c:f4:83:40:bb:78:4d:97:72:13:76:
                    33:c1:e0:f4:56:bb:76:d7:da:5d:e1:50:3b:44:b2:
                    67:84:4c:39:cd:1c:d6:8d:50:1c:6a:f1:99:76:6c:
                    13:5a:af:9a:7d:17:0f:89:31:44:41:7e:d0:fc:7c:
                    7f:b1:ef:e5:e0:9d:1e:f7:e4:ed:4d:74:a8:af:2c:
                    3b:1f:a5:6a:e4:f8:bc:48:80:39:ae:93:8e:03:d8:
                    8d:13:7d:a5:37:f1:77:1e:3c:ec:e2:5f:95:a8:48:
                    5f:86:77:87:2c:ac:5f:f9:10:b8:9d:b5:bb:6a:e1:
                    47:10:09:e8:c0:3a:99:3b:90:77:f8:2b:8b:4f:f1:
                    c4:ae:ab:a7:64:9f:14:8c:32:27:39:a1:79:fc:76:
                    6f:68:ff:64:42:07:d4:26:9e:d2:45:1e:8e:87:e9:
                    51:d7:58:2f:15:67:9a:fc:ca:25:88:f9:42:a8:61:
                    df:e5:ce:f2:44:57:cd:7c:d8:0f:1a:23:e7:2b:95:
                    1d:30:50:1e:d3:9a:dd:bd:4d:c0:58:dc:20:7d:dd:
                    0d:cf:4f:5f:0e:55:0f:6a:5b:bf:44:75:80:21:6e:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.72.0/22
                IPv6:
                  2a0d:5040::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:33:ee:8c:a8:8b:50:aa:b0:c1:27:37:41:1e:31:32:6c:
         82:d2:ed:91:c1:92:ef:e0:4d:87:73:9b:0e:81:bc:cc:24:00:
         d7:0c:0c:43:06:96:9d:0c:66:92:46:34:96:5a:6e:cc:9b:d1:
         06:12:c3:fb:65:57:a9:5a:b1:57:dc:f0:df:0f:96:b7:9d:0e:
         48:66:09:7a:65:20:26:9b:9e:da:53:a5:b7:67:9d:21:0c:af:
         02:85:f8:74:4e:43:35:e6:3c:34:82:97:9a:b4:e7:ff:f8:c4:
         33:91:2f:07:29:dd:c1:2d:2f:e2:e5:ce:d4:0d:42:ac:58:39:
         fc:a4:a7:86:fb:f5:f5:3c:64:d8:12:9b:d3:9d:e8:f3:94:67:
         b3:f9:3c:c9:66:42:19:e2:f9:23:48:08:0a:ce:1f:fe:8b:d6:
         c5:70:43:3c:24:5e:4c:fc:5e:30:5a:30:61:12:7b:1e:82:c0:
         79:bf:30:d0:13:cc:2c:8d:ef:5a:ff:09:ca:2e:72:65:35:25:
         74:89:20:79:82:e0:58:75:b8:99:36:28:2a:79:0f:81:85:8b:
         26:47:71:db:91:dd:1e:7a:6d:c9:24:c8:0c:f0:85:a7:65:fd:
         39:35:ac:3d:14:ec:2e:2a:ff:6c:f2:35:1d:78:42:e1:1c:c9:
         d6:34:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----