Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.cer (raw, json)
Hash identifier:          624mu0dXFpYr0MGAMkUTrMFIID9u8e5S2GU1udnlEWE=
Subject key identifier:   E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FB9ADFC494B13D587916AB5DA0B77
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.218.92.0/22
                          IP: 2a0b:bb40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:b9:ad:fc:49:4b:13:d5:87:91:6a:b5:da:0b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:7a:4a:d7:94:96:3f:8a:f4:c4:23:d9:cf:
                    9e:91:9f:5a:8b:e8:a3:0e:55:1b:37:6a:96:e7:b7:
                    2c:3d:f4:44:fe:0f:5e:9d:7e:5a:d5:c0:55:84:26:
                    77:5c:75:4a:5f:cf:03:16:1c:6f:dd:35:6b:f3:75:
                    8a:3f:b7:d4:5a:9a:98:6e:02:96:03:15:a5:4a:75:
                    92:45:28:bb:a2:cc:56:a2:bf:aa:89:a5:8f:4e:9e:
                    49:de:9b:ad:f0:fb:f7:8d:b3:94:57:7a:a8:0e:af:
                    6a:67:b8:27:32:ca:24:92:8b:99:83:77:23:39:67:
                    29:fe:94:48:14:5b:f6:c1:df:2b:ef:cc:0e:f1:c9:
                    7d:a8:92:b1:34:8a:7c:9c:3e:c8:27:5c:57:21:53:
                    d5:40:f3:b9:25:b2:64:97:ba:3c:bc:da:62:c6:b8:
                    69:41:67:4d:22:fe:d7:f8:d5:01:5e:bf:40:61:4b:
                    ff:cb:fd:01:16:f1:81:f7:ee:35:ad:07:70:bf:e5:
                    ed:c9:32:05:1a:cb:45:64:4d:76:74:d1:47:3a:95:
                    96:c4:47:28:29:c4:03:dc:2d:df:e9:71:79:92:23:
                    f7:02:5c:b4:02:85:cc:37:5f:62:2d:74:36:c7:23:
                    22:49:58:dd:d7:05:8c:80:07:00:1d:63:e0:ff:ef:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.92.0/22
                IPv6:
                  2a0b:bb40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:67:91:2a:ca:b4:9d:bb:00:25:55:80:9d:fb:ae:cd:50:
         9d:ea:cf:4e:54:8c:3e:80:75:95:b9:3b:28:e8:4b:39:42:b0:
         6e:43:c9:f9:fd:a0:39:40:8e:b3:98:2e:65:27:1a:87:49:a1:
         49:6c:61:56:e8:1f:4f:14:98:ea:78:29:30:a9:48:f5:28:7f:
         c4:75:86:2d:74:56:69:b5:8c:ce:fb:b2:14:8e:bd:81:51:d3:
         7c:28:79:3d:31:9e:b0:35:76:d8:8f:1f:cb:ab:08:fc:9d:bc:
         79:ef:b5:9e:86:ea:35:2e:73:5b:cb:ea:97:05:c9:a0:22:2e:
         86:87:e3:5f:13:58:2e:50:e3:12:a1:d2:f3:01:7f:00:97:de:
         c9:64:a2:4b:39:28:7d:d3:7b:07:11:b4:ef:13:cd:ae:82:76:
         92:56:11:e7:f5:4f:f3:c0:11:47:8f:2c:43:21:a0:2c:be:80:
         11:5b:31:15:4d:3c:40:73:7f:9a:b3:48:52:44:a0:70:d5:4d:
         1c:29:f7:3b:9e:12:aa:fd:bb:12:8a:2b:30:0b:19:85:4e:90:
         9a:61:9a:80:51:5f:a1:d4:35:44:71:08:d2:7b:d0:6c:06:b2:
         d7:21:33:d2:6f:64:2d:50:56:0a:f2:bb:d3:3e:9e:92:76:d9:
         76:a3:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----