Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
File:                     8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer (raw, json)
Hash identifier:          41cEg15GM4fEYzI1QjM6pNpyDDqrTl2amcYadb64h6c=
Subject key identifier:   F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D99F58E2F56DAB017718E677F7D688
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.0.2.0/24
                          IP: 2001:678:5::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:9f:58:e2:f5:6d:ab:01:77:18:e6:77:f7:d6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:32:2a:a7:e1:54:b6:17:65:d8:03:54:8c:
                    21:f5:b3:29:2d:50:ff:f7:0c:b7:85:0c:a6:93:a4:
                    8c:6e:44:1c:58:37:99:5e:23:27:ce:3a:e6:cb:69:
                    2d:43:af:ab:7b:78:31:b1:6c:05:f7:ad:af:36:d3:
                    34:0b:1d:da:8b:c2:f8:0b:79:5a:18:71:e5:dd:73:
                    9b:9c:b8:69:b3:5e:a1:a7:82:e7:a2:36:9b:95:83:
                    9b:44:c2:9f:c1:5f:88:7d:c2:5c:2f:c3:7d:a4:d3:
                    b1:3f:fd:88:22:61:32:58:3c:d3:c2:3f:39:19:27:
                    4d:8a:75:97:e0:46:02:03:f2:c9:77:7a:84:67:eb:
                    81:55:f6:5a:dd:42:48:68:46:77:45:ab:03:20:a2:
                    f3:3c:2c:2c:1e:e6:e1:05:b5:68:1f:13:20:14:65:
                    7e:d7:0f:8e:6f:13:4d:c3:06:be:ec:d1:bb:09:68:
                    96:17:db:cb:cd:fc:a9:14:52:62:69:19:a9:c6:8b:
                    12:87:f3:69:a3:b6:41:0f:38:0e:49:7e:06:27:0e:
                    48:8e:ec:28:9f:86:fc:b7:41:f7:32:41:74:e6:62:
                    61:d4:7c:a8:d1:86:86:d9:8a:2f:5a:73:23:e1:25:
                    cd:f8:10:3e:66:a3:fb:ea:97:54:59:b4:75:06:52:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.2.0/24
                IPv6:
                  2001:678:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:67:a5:e6:e3:dc:45:93:ed:89:87:00:bc:c3:53:f5:54:37:
         99:b7:c4:6a:21:e1:1a:cd:96:47:15:b4:97:7a:6b:a0:a4:66:
         ac:77:eb:39:0c:f3:52:48:82:79:39:4b:b3:0c:0a:9c:83:d2:
         aa:f5:a0:a2:7f:2c:ea:de:dd:c8:fe:c0:a1:c9:fb:ca:f7:d0:
         30:f5:c2:fc:f9:6f:da:bf:92:ac:88:87:01:0e:4b:9c:69:4b:
         5d:b7:d6:c4:14:58:f4:90:d1:d6:00:b9:1a:bc:ae:62:23:2c:
         2d:2d:a6:55:50:33:e6:b8:f5:d9:68:ae:a0:8a:3a:31:ad:14:
         e5:a5:b0:59:84:8c:38:28:09:95:a2:9c:88:a6:15:7c:a7:cd:
         07:f3:f6:fb:73:87:59:d0:7d:94:bf:b7:a0:13:e2:57:ee:88:
         45:57:9f:bd:c1:d4:48:62:7b:97:8e:87:16:48:5f:58:a1:01:
         41:f8:2f:2e:46:28:8f:ed:4a:48:de:1e:c8:fb:bd:95:d9:54:
         e3:af:cc:db:98:42:f6:fd:67:49:ee:48:6c:e2:76:83:c1:c0:
         14:c1:dc:e5:e4:f2:d2:0e:a1:dc:7e:51:06:72:d0:81:c9:5b:
         a3:65:0e:bb:88:45:2d:9e:9c:49:44:c3:a0:a9:39:41:ac:a0:
         69:72:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----