Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.cer (raw, json)
Hash identifier:          6k26PldzxvoQrITRmDCvr/fT3sb30LpQKdAxead952E=
Subject key identifier:   E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E7D036FAA8D96705F5E6830772C5E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.187.124.0/22
                          IP: 2a0b:a180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:7d:03:6f:aa:8d:96:70:5f:5e:68:30:77:2c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:2b:b8:04:af:1f:bc:74:8d:f4:19:a3:8e:
                    8b:4f:c4:d3:4a:6d:e5:c1:78:4a:21:0b:c6:5d:de:
                    b1:4f:53:bb:0a:a3:ce:0e:91:de:f8:8b:b6:2d:07:
                    61:63:b9:a1:ee:13:d4:67:b6:65:a7:aa:e5:d5:75:
                    55:6e:d2:ce:93:39:bd:21:28:8b:69:fe:d6:43:ba:
                    67:45:38:8d:76:4c:90:3b:89:99:b5:e1:d2:b5:dd:
                    14:89:b5:80:b9:1c:f4:6b:01:e5:e5:9e:56:58:68:
                    ac:b0:08:e8:f1:bf:12:fd:81:14:96:58:47:ea:99:
                    66:05:b8:c7:90:6e:11:8d:76:03:c9:bf:d4:25:93:
                    65:6a:84:5f:53:a6:ce:e9:ab:ba:13:8d:72:d6:5a:
                    9e:7d:7d:ed:b1:f8:ad:1c:17:e3:08:d8:01:e7:1e:
                    2e:4c:c9:18:03:c9:18:18:c6:b3:a3:e7:9f:39:61:
                    b4:e0:0b:f3:ed:66:03:0b:3c:15:cd:8d:5a:c9:51:
                    d8:e3:33:61:f6:3a:23:b8:c1:f5:74:6f:5f:25:a5:
                    ec:c7:e2:d4:94:75:03:be:ea:04:57:d3:91:20:55:
                    57:64:ff:c7:a9:6d:5a:30:43:73:4a:14:4b:8b:9f:
                    c4:80:80:80:f1:f7:08:fa:d5:b4:2d:5f:eb:af:f7:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.124.0/22
                IPv6:
                  2a0b:a180::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:51:f9:1e:13:dd:7c:b8:da:09:f0:dc:b8:fd:92:be:d7:
         ee:02:20:80:30:7e:5e:dd:81:f6:e7:44:a5:f9:84:8f:03:c0:
         e6:68:14:46:00:b8:93:71:c4:c3:50:f1:00:73:5f:5e:69:39:
         3e:73:0d:ee:17:37:5f:29:f2:70:f3:54:1a:01:5a:54:5a:72:
         01:8a:7b:78:59:c0:1c:ac:85:92:b1:71:df:fb:39:ef:17:cb:
         f0:2c:df:26:9c:42:f0:34:a1:fb:4c:4b:7a:75:7a:f5:77:0c:
         90:9e:6c:c3:fe:31:4d:7d:4d:32:3a:ab:99:74:a6:b5:75:0c:
         e5:b0:ed:27:48:3c:15:fd:eb:ac:c3:5e:76:06:c5:53:c7:62:
         7c:e6:0e:8c:26:55:0b:29:b3:83:0d:02:63:11:67:b7:92:83:
         e4:d5:c4:29:a9:1d:49:27:4b:ee:5c:54:3f:e4:af:ea:24:be:
         f2:a6:c2:f3:8a:b5:ca:aa:0f:2f:d7:d5:61:c2:84:9d:e4:6e:
         70:ec:5b:5c:6a:33:b2:5a:e6:6b:a3:8b:0b:fb:63:53:c4:f5:
         2a:62:98:74:ce:56:b5:70:3d:6a:d7:8c:94:5c:ef:f5:91:20:
         07:6f:c9:f6:55:74:a5:6b:c3:8b:5e:ec:ba:e3:b8:c9:2a:2a:
         0f:31:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----