Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.cer (raw, json)
Hash identifier:          M/Zdi3B1x65axrGSuOotqMS9goKJuAJ6cQhIlQpS5hM=
Subject key identifier:   E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C1B212FCF7273C1AAA93ADAEED4BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.246.100.0/22
                          IP: 2a0d:7f80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:1b:21:2f:cf:72:73:c1:aa:a9:3a:da:ee:d4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:1e:e2:fa:de:76:fd:52:94:13:df:9d:0b:
                    4f:ce:da:d7:bf:90:d1:d0:be:82:e3:da:44:8a:a7:
                    3a:11:73:47:b2:33:4f:70:e1:ca:5b:21:18:2c:99:
                    26:f9:dc:aa:65:b0:55:59:90:1d:8a:24:69:ef:37:
                    2d:b9:75:76:f5:f4:9e:4d:31:5b:5e:6d:16:b8:f7:
                    09:54:2c:21:97:2c:fd:33:28:72:63:3c:75:76:d1:
                    36:9d:f2:fa:d7:e1:cb:dd:09:28:7c:9f:c7:13:6b:
                    1e:54:bc:c3:db:57:5f:69:95:c5:bd:b6:64:43:26:
                    b6:15:64:1f:f6:0d:29:b1:b4:68:e0:0c:42:c6:05:
                    ed:13:ba:02:bd:5d:15:4a:58:bc:9f:6b:94:67:6c:
                    e4:00:52:ea:dd:75:5c:61:fe:90:69:a4:64:1e:fb:
                    7a:5d:1d:35:fc:d1:1d:ed:19:8b:bc:7d:5e:6c:15:
                    c0:fd:9a:5d:a3:2c:4f:50:49:58:42:11:e5:cf:24:
                    2e:4b:4c:ef:1b:63:82:97:3f:0c:17:1f:dd:94:0d:
                    2b:e1:2c:f8:76:63:ad:29:d4:77:48:2c:30:9a:c2:
                    02:54:f3:0b:dd:b5:6e:ec:3f:85:40:9b:aa:39:d1:
                    b5:a3:6a:32:1e:fd:54:95:7b:ee:83:c7:da:9a:f2:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.100.0/22
                IPv6:
                  2a0d:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:fa:ba:b3:b7:9d:53:09:90:f4:d9:6d:83:fe:b1:3a:2d:
         96:81:bc:25:78:eb:7f:82:17:d6:0c:81:e2:38:c0:c8:f0:a1:
         57:6e:e6:af:b4:b3:a1:09:12:e4:e5:8b:41:20:fb:5e:30:77:
         35:1a:f4:de:02:fb:1b:87:4b:ca:9f:57:b9:44:b2:7e:ed:cf:
         a4:d4:51:df:8d:16:5c:27:85:78:d7:b1:c1:21:b7:ea:95:06:
         e4:1c:5f:5a:0d:4b:c9:97:7f:15:cf:9b:bc:72:f2:97:86:f4:
         bf:bd:ec:0f:98:71:04:3a:90:59:79:13:a2:df:e9:04:d3:38:
         05:52:25:89:6a:e3:50:31:c9:0d:79:04:6c:ac:9e:9d:95:84:
         17:d5:fd:4b:d5:8c:3b:70:ba:98:97:88:f1:6c:ce:7b:d2:cf:
         c6:ed:54:13:66:f0:dc:ee:54:b6:1c:06:75:7a:77:4d:95:f8:
         cb:8f:c2:b4:ad:45:13:25:14:10:b3:2e:e2:02:eb:d4:72:54:
         9e:df:a1:49:6c:2d:9e:7a:67:12:01:47:52:3e:66:fa:64:56:
         a8:4e:ab:57:09:88:cb:dc:73:2f:ef:74:fb:82:c6:64:12:53:
         6f:e1:c7:95:59:44:b6:60:77:d0:bb:a0:46:bc:93:a1:98:fa:
         89:bc:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----