Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
File:                     5J2_PERGjlJBHUhhhWvwvceQY-Q.cer (raw, json)
Hash identifier:          C8q8ZFXbz1mxg0aUq6nCtO/vuC0JR26PzUHH07y5Icg=
Subject key identifier:   E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1DE5CB6AF56828B4CD66D5B9EA0C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.108.220.0/22
                          IP: 2a00:e000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:de:5c:b6:af:56:82:8b:4c:d6:6d:5b:9e:a0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:43:0b:ba:e4:0a:cd:39:ff:8e:28:f7:cc:
                    b6:e8:d9:cf:f5:4e:fd:a9:6b:e8:c8:c6:f6:9b:4b:
                    8d:7d:db:67:c5:65:d4:79:9e:ab:b9:42:7c:da:a3:
                    b2:bf:b1:45:2f:8b:3e:46:0c:1a:3d:8f:ff:99:3e:
                    9b:14:85:a2:6a:4c:5b:d9:89:34:ed:49:49:d2:7f:
                    3a:92:f9:92:e4:8a:b6:2d:a6:b6:74:bb:91:a2:e5:
                    81:6e:f4:e9:bb:ed:2a:3e:08:df:fe:a2:87:b0:c2:
                    7f:11:0b:8d:db:a8:8f:b9:a1:ab:f9:29:b0:4c:de:
                    bc:ba:55:7d:9a:00:e6:f1:e6:cb:e9:66:e0:81:49:
                    3f:fc:b2:cd:8f:0b:2c:fd:7b:21:35:e8:e9:c2:a5:
                    db:83:39:8b:51:a7:5e:2d:9a:a1:ba:86:b0:53:47:
                    1a:cd:24:65:ca:a5:42:24:9c:dd:f8:2a:a9:d4:ac:
                    dc:eb:fe:2d:8f:73:c7:20:63:14:b5:cf:ba:13:fa:
                    88:ca:94:35:b9:5c:47:1b:c7:c2:a0:17:55:eb:7f:
                    4d:2f:80:df:7d:24:2a:08:c1:94:e1:a9:72:dc:43:
                    55:3f:3d:5f:a4:a8:94:20:93:aa:ae:ac:12:91:da:
                    e7:a8:8c:3c:81:00:25:f3:dc:f6:a7:39:4e:22:05:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.108.220.0/22
                IPv6:
                  2a00:e000::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:78:e5:cb:4d:e0:30:4f:43:71:d7:44:43:89:86:70:7a:
         d1:16:ea:8f:5c:ff:67:86:5f:db:57:20:4b:93:73:28:22:c8:
         ff:66:0f:41:b3:c0:9f:7f:e8:c0:01:d9:4e:99:16:9a:4e:b0:
         f9:2b:11:00:06:6a:36:af:e6:de:37:95:5c:e2:4c:17:2b:15:
         43:73:33:b6:32:07:13:29:40:6e:8e:20:4e:2e:58:a1:67:0d:
         26:db:fe:a6:f7:c9:84:e5:ec:80:24:41:e9:07:aa:18:c3:78:
         03:10:7e:d9:ce:03:12:aa:e1:58:bc:de:8a:7f:e7:59:2b:42:
         bd:a2:d2:80:12:0c:55:a4:ec:6b:69:ac:d7:43:13:5b:48:20:
         26:40:c0:1e:96:3c:29:cd:3a:18:e0:1a:78:d8:43:52:27:bb:
         14:9c:24:49:f2:13:e2:70:c0:7a:cb:a6:8a:17:73:18:b6:dc:
         06:37:bb:b8:81:c7:e6:a8:1b:21:21:65:b1:0d:79:1a:9d:8f:
         d1:19:99:86:86:01:2f:87:30:d4:57:da:51:9a:35:74:3c:fb:
         c3:aa:30:73:f3:7d:b0:42:e7:25:78:ca:a7:08:8f:61:30:3b:
         15:7b:81:33:84:26:a0:c3:0b:7a:8d:c0:c2:68:43:aa:72:98:
         97:af:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----