Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
File:                     2JVh1yxrmEdwA-5iKJ_sVwweFng.cer (raw, json)
Hash identifier:          0oYc6cma4LtSBrbEoqM/Pe+TCg+DX0Pmdtg6LwowMAE=
Subject key identifier:   D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DD5FA50D99F00070CB1A674D4D243
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2d60::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:d5:fa:50:d9:9f:00:07:0c:b1:a6:74:d4:d2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d89561d72c6b98477003ee62289fec570c1e1678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:f9:31:3b:be:a4:32:35:15:42:e0:80:90:
                    2b:0a:2e:d8:05:b4:a1:8b:13:26:b5:fe:d0:4e:80:
                    5c:f3:da:70:2f:68:ac:84:6d:b3:1c:17:7a:bb:22:
                    27:9d:f4:f1:95:ca:23:5c:b3:93:20:6e:57:3c:8d:
                    6b:8e:d4:ce:7e:cb:86:9b:48:f6:a0:07:72:8e:5a:
                    3e:04:6c:5c:4f:c7:ac:d3:04:49:51:02:d3:b1:34:
                    f7:5f:d8:84:ea:7e:15:d0:5c:37:e4:0a:0d:0a:c3:
                    ac:32:50:ed:1a:29:e0:d9:2c:9e:5b:6b:a4:9b:4c:
                    4c:e9:a2:32:79:f7:34:d2:6f:fd:dc:4f:47:ca:cc:
                    56:74:5e:45:cf:4a:c5:d4:64:ba:05:b5:a8:29:1f:
                    bc:3e:53:1b:41:04:68:95:aa:c0:8d:8e:3d:15:89:
                    78:48:d0:ca:10:fd:30:ee:00:61:e6:d0:6c:43:9e:
                    37:ae:ac:fe:8f:4d:89:a3:09:95:ce:62:f5:e6:76:
                    17:9a:34:c0:4f:c8:34:cc:8a:b1:61:2d:35:10:5d:
                    61:d9:81:30:25:ce:b2:14:18:72:af:7d:56:89:c8:
                    43:5b:4d:d8:30:47:f9:43:4b:e7:97:e2:2a:58:74:
                    e6:79:d3:df:29:3e:26:a2:e3:63:c6:97:a9:4c:79:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2d60::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:9d:52:f2:b5:fc:b1:bb:7e:76:07:a7:a3:49:10:4d:07:
         f6:19:be:e0:3e:83:62:ed:ed:cf:3e:1b:9d:31:ff:c3:df:8c:
         fd:99:92:3c:8a:05:cf:28:29:4d:98:9d:2d:a3:9a:76:23:a2:
         32:61:35:04:53:0f:df:2f:dc:85:a5:eb:98:da:e5:86:3f:86:
         77:00:80:1d:4f:8e:cb:14:49:5b:4c:d3:cd:ad:a9:17:7c:04:
         27:0d:cc:a0:8b:bc:35:42:e8:c5:42:bb:a4:13:a4:23:e6:f8:
         ab:0d:a5:38:c3:43:82:e6:b1:08:2e:f2:a1:56:29:c3:0b:df:
         58:d1:54:27:c1:93:76:fc:67:a6:e6:a5:18:62:62:25:68:08:
         46:97:bd:62:10:d3:09:85:d6:1b:47:1a:0f:0c:cc:91:4c:af:
         ea:6e:f7:3f:50:8f:a1:1a:1f:56:53:45:13:f3:39:ee:66:a9:
         ba:59:aa:7c:84:18:10:ab:bc:91:4c:ca:db:a3:8f:43:72:09:
         14:11:9c:f9:7c:70:fc:e1:6b:fc:10:56:fa:1f:c0:71:8d:e4:
         26:fd:66:54:3c:f8:e9:dd:02:74:47:d5:7f:d2:f3:b9:6b:d2:
         69:d9:1b:e6:f4:a7:6a:ee:17:73:f2:5e:24:19:50:0b:ef:61:
         59:13:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----