Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
File:                     53e8jj7CUM6F-5CRPCxJBRBD68U.cer (raw, json)
Hash identifier:          UV0yjgM8QAwKfvWP793A1JKdmGbJzRXh+s0I5cFmEGA=
Subject key identifier:   E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B605A54E393609C30401A168284ED4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.239.184.0/22
                          IP: 2a0c:6580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:05:a5:4e:39:36:09:c3:04:01:a1:68:28:4e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:6c:6f:c7:e6:cf:49:12:d1:d8:e0:09:34:
                    a3:db:c0:b2:09:43:31:d1:10:f3:b3:53:61:c9:8e:
                    05:f0:94:f3:12:68:a3:bb:2d:50:77:15:58:9c:e1:
                    bd:6c:01:33:cb:95:c7:b4:0c:a2:4d:10:bb:c3:08:
                    3f:3e:4d:a0:50:0e:3c:53:d4:19:74:6b:7f:42:74:
                    c7:3f:7b:cd:63:5e:41:30:f4:11:52:d5:d7:ff:c5:
                    a3:f0:7f:94:21:0e:f5:96:fb:87:0d:df:ff:dc:22:
                    98:7a:a4:15:13:ac:0d:f2:36:87:45:eb:f3:6c:67:
                    62:fb:ed:65:a4:97:27:ea:e6:61:1c:9f:68:76:6e:
                    21:50:e0:22:c3:35:42:c8:9e:52:f0:fd:73:3b:27:
                    62:e7:1d:d6:7e:95:f8:c6:c4:3d:2d:6f:8f:43:43:
                    59:e4:73:33:4f:6d:fa:ad:b1:96:35:42:c0:78:bc:
                    b7:61:ec:3a:51:87:68:67:9b:8e:f6:8a:7a:a0:1e:
                    9f:e0:8b:8d:38:2a:dd:ac:33:72:16:4e:0c:e0:a4:
                    27:c8:ab:03:1b:0f:0a:12:62:d1:39:8a:03:30:76:
                    2a:2c:a0:30:91:fc:1f:da:4a:c2:8b:59:31:5e:80:
                    de:f0:b9:d7:d4:31:8d:f1:77:71:66:93:0c:7f:20:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.184.0/22
                IPv6:
                  2a0c:6580::/29

    Signature Algorithm: sha256WithRSAEncryption
         17:14:6e:4e:29:c1:58:1e:81:14:7f:30:64:77:ae:6c:84:4b:
         2c:cf:95:38:6f:65:a3:0b:93:83:f8:9b:9f:b3:a8:39:45:33:
         bb:ff:ed:60:dc:f9:63:31:6a:a7:16:e2:db:1c:44:55:49:6b:
         ce:03:3f:b1:02:f6:27:42:54:d0:84:84:7e:8e:9f:36:01:aa:
         18:e6:3b:73:e5:99:a1:e0:cc:90:86:ae:cd:aa:43:a8:e4:ab:
         f6:da:93:4e:ec:16:30:3f:b5:21:f3:b3:00:aa:8b:c4:7e:c9:
         d9:b5:21:72:e9:e5:59:17:7a:7e:37:7a:cb:71:38:04:c2:fb:
         50:07:0e:39:89:53:a8:31:38:d9:39:3f:77:43:d6:f3:cd:7d:
         dc:ef:b4:ac:60:7e:df:89:e2:85:2d:e8:e1:eb:5a:5e:a6:40:
         ee:dd:91:dc:82:01:86:0a:31:be:fa:e7:47:de:a3:3a:5e:8a:
         d8:1f:e1:00:c1:12:62:5e:05:5c:cd:cf:62:88:52:18:db:5a:
         15:d9:41:5e:8d:b7:d7:b3:d8:ac:68:87:30:b9:02:f2:be:90:
         cb:7f:81:30:d7:ec:71:91:5d:95:68:14:46:26:a7:4a:81:97:
         c5:1f:cc:df:fc:1b:a9:65:bb:a3:58:ed:11:e7:2b:5b:b9:65:
         9b:c6:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----