Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
File:                     7HDF2GfeIA8BSGsaiAqUuEldciA.cer (raw, json)
Hash identifier:          yTUpUWani1e/5E4mg6928/3ygyQ1JODftmkDCvVq3sQ=
Subject key identifier:   EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B24EC8E6206CEE73C1A3BC3FB17F7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.244.52.0/22
                          IP: 2a0d:2880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:4e:c8:e6:20:6c:ee:73:c1:a3:bc:3f:b1:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec70c5d867de200f01486b1a880a94b8495d7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:58:12:de:7b:77:b4:6a:41:31:6f:69:42:
                    2a:17:11:30:86:10:0d:19:bf:40:d8:08:f0:18:d3:
                    11:25:32:0e:ca:0a:27:ec:d0:01:c9:c5:cc:71:17:
                    fa:91:00:e1:cd:04:1d:a1:e5:14:6f:8c:21:bb:c2:
                    77:50:96:a5:22:6c:c3:1e:a3:d4:19:39:d4:2e:7e:
                    b1:cb:27:cc:1e:fc:c6:e6:86:18:10:f9:36:60:10:
                    aa:6f:f3:d8:60:32:f2:37:ae:58:47:15:27:e4:99:
                    d0:a1:90:f5:27:a2:ca:88:60:e8:5c:0e:0f:94:0c:
                    d5:ca:66:7a:ba:42:eb:3b:bd:15:7d:f4:d0:57:a1:
                    22:42:6c:3b:b1:04:7e:dc:b2:06:e0:68:42:2d:f9:
                    bf:9f:fa:01:0a:4f:4b:1b:6f:55:8d:7d:d2:4f:1e:
                    22:7e:94:b0:c2:39:49:db:96:16:c4:cb:1b:48:a5:
                    e5:f0:7b:8d:59:72:4d:d6:53:3a:13:52:de:ba:70:
                    7d:32:6c:f2:a0:d6:1b:20:14:da:34:74:d2:98:de:
                    76:70:f4:f8:35:40:cb:b8:60:60:b9:81:1e:c8:7b:
                    79:30:c5:a2:d5:c3:b5:6e:ee:cd:f2:59:ed:7e:49:
                    b1:81:98:24:77:57:af:c9:47:ee:4c:16:11:b6:96:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.52.0/22
                IPv6:
                  2a0d:2880::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:db:82:80:22:d1:80:bd:dd:45:07:6f:a0:21:07:76:7a:e0:
         7f:f4:e8:f3:14:72:25:22:d9:85:43:a9:c8:d8:9a:32:6b:78:
         01:27:a5:1d:78:d2:d2:19:89:f2:f1:b5:fc:e7:1d:2b:30:16:
         8c:6f:17:77:39:9e:34:32:80:5e:43:56:50:85:9e:36:01:6a:
         cc:20:32:b8:c1:e4:eb:87:db:50:65:75:cb:e5:a6:43:94:bb:
         2f:e2:24:9f:5c:c6:6d:91:de:e9:38:2b:ed:7f:b5:f7:e5:6f:
         a4:87:7b:40:53:bb:3d:be:aa:d3:80:59:6e:4c:f7:2a:4d:68:
         3a:f6:7f:e6:20:88:99:f2:09:9c:2e:0e:be:f6:60:fc:16:11:
         0a:d8:a3:fe:38:94:a9:f8:51:71:4b:03:e8:c8:e6:ad:f0:0e:
         32:46:55:e4:39:0d:90:0a:13:5d:4f:5c:6e:89:6f:9f:24:dd:
         31:f2:3d:c6:c1:47:69:67:ff:9c:50:71:d6:ff:84:a5:96:68:
         b7:33:78:eb:6a:cd:4b:2d:7d:f7:54:1e:e4:56:36:1d:81:97:
         03:0a:cf:66:8a:ee:29:85:6d:f6:41:87:19:ab:32:31:10:8d:
         54:f4:a4:9f:62:b8:fd:1f:0f:07:1f:1c:3c:e0:6d:f3:f2:e8:
         e5:0d:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----