Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
File:                     4q9q9tGZ8R7LpDVVEOmbficatUA.cer (raw, json)
Hash identifier:          3/qAJpD0mTMvKXo4HGiRiDBpI287iniMMUGCgGHyOQg=
Subject key identifier:   E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195F697D6F0017AF8C430016D5C4249EFE9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 13:01:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.1.14.0/24
                          IP: 2001:7f8:12e::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f6:97:d6:f0:01:7a:f8:c4:30:01:6d:5c:42:49:ef:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 13:01:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:6f:8e:54:4b:68:5a:78:29:ce:aa:32:bf:
                    7e:44:3f:48:92:6a:43:16:c0:04:24:e3:c8:54:b2:
                    56:08:84:43:b4:32:f2:a4:69:8e:df:35:6e:a8:33:
                    52:b5:ee:18:8f:b5:08:0a:87:c1:1d:ff:3b:db:7b:
                    54:90:9a:c2:40:04:c6:92:b2:87:29:31:87:77:d6:
                    d7:71:f5:1c:97:10:8c:c8:f4:c5:27:50:50:df:bd:
                    6d:c0:7d:6c:a5:a8:cb:70:e8:ab:b4:a8:46:60:6b:
                    56:bc:46:7d:0c:de:cd:99:8e:ec:7b:40:4b:9e:7b:
                    98:db:87:bc:12:f2:e5:04:69:4d:d4:6e:a7:c4:00:
                    94:be:31:6c:eb:ac:28:6b:d6:2e:39:8e:39:3e:ce:
                    c4:d6:6a:2c:60:fb:7e:99:9a:e5:f6:13:d6:81:70:
                    8f:d5:46:6d:64:6c:df:84:98:21:6d:3a:a7:b8:94:
                    c5:e7:e7:1e:b8:8e:b8:54:f7:34:9d:62:46:3e:ed:
                    91:13:87:cb:32:02:f1:26:37:a8:1d:bd:c3:dc:aa:
                    ee:a3:d7:96:f6:94:b1:ac:53:91:ec:5d:95:9e:a7:
                    a1:8b:36:52:a3:41:78:fe:e2:7d:3a:f3:0d:2c:4a:
                    7d:81:84:40:ba:ce:ea:f3:f2:c8:77:e5:62:de:fa:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.14.0/24
                IPv6:
                  2001:7f8:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:82:f0:2f:5a:ab:eb:04:0c:fd:1f:b4:96:d2:44:15:79:3c:
         fc:e5:6b:76:87:5b:19:bc:e0:52:cc:7f:d5:83:9f:39:90:97:
         90:34:c8:ad:a1:c6:d1:16:90:0b:30:1f:a7:21:8e:32:db:10:
         7b:ba:72:c7:76:4b:21:e0:61:43:6a:ef:3d:04:e6:dc:c5:d6:
         af:e1:77:64:60:7d:4e:47:48:71:a7:af:af:6c:44:c0:70:fb:
         c3:4b:6a:56:f7:45:78:3a:bd:f1:8f:10:1d:8c:e2:7b:89:01:
         dc:58:55:2c:66:cf:db:12:83:45:17:4c:58:31:9a:7c:62:26:
         69:a8:83:34:a8:fe:3c:5c:37:c2:33:90:3d:17:8a:be:02:f6:
         d5:25:71:df:76:b1:65:58:bd:53:36:46:7d:d5:e7:c6:18:00:
         8b:3a:99:14:ba:08:a7:2e:a6:04:24:2e:bf:32:e2:1c:a1:16:
         ed:36:11:f4:ab:59:9c:50:0c:e3:12:cc:37:4b:bf:a0:4e:34:
         ba:e7:d4:6f:ba:27:9b:77:c7:98:70:76:1a:c4:c8:43:f6:ee:
         33:18:a9:20:b3:44:b6:b7:a7:02:6e:7b:30:78:0f:38:4f:90:
         61:e9:b9:f9:ee:75:c6:5b:f3:6e:9f:cb:78:e7:a4:2f:ae:c6:
         60:2f:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----