Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
File:                     8PY2_se1stGN43l-aYTAaVXnFtc.cer (raw, json)
Hash identifier:          TbHKaqJQA4sm0pq3Ex5O35RURWXp4Fo9+hwf6PKTf/4=
Subject key identifier:   F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444FE4D706965F83DC8C5BA6B0FE8F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.182.80.0/22
                          IP: 2a0a:e680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:fe:4d:70:69:65:f8:3d:c8:c5:ba:6b:0f:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:a3:91:a2:54:74:13:4b:ef:e3:45:25:38:
                    95:2c:9b:6b:9d:20:1a:7c:24:d5:be:4d:2c:61:13:
                    60:33:12:7a:f2:38:f4:67:b7:49:b5:bc:3a:07:a6:
                    e8:0a:1c:10:70:b2:ea:c9:2a:91:e0:b7:b0:87:a3:
                    99:ea:35:64:ab:80:d2:51:e2:f7:bb:80:3a:3f:95:
                    f0:b5:ef:2b:2b:2b:1d:4b:09:a7:4b:1a:82:2b:16:
                    f9:8d:78:ab:ce:ee:cc:66:36:b2:bb:3a:01:26:c6:
                    6f:63:68:e2:25:62:03:2c:2b:7c:5f:d7:52:be:b9:
                    d3:1a:24:b0:97:1b:15:bf:7b:72:ab:dc:1b:08:90:
                    12:0f:3a:bd:09:77:00:08:72:fb:d7:9d:96:88:d2:
                    d7:f7:3a:70:4d:82:79:5c:6b:1b:0f:3f:71:9c:5a:
                    55:a3:41:73:f2:98:2d:ef:f9:8f:48:b6:81:84:8a:
                    22:b6:c9:0a:b9:50:26:5e:a5:23:b1:8f:0b:cc:f8:
                    af:fe:84:39:7c:45:49:a0:28:93:d0:5a:f6:5b:62:
                    da:7a:04:b2:a4:78:66:d0:65:0a:0e:a7:ae:55:24:
                    d7:21:67:0f:5e:c3:ce:0d:a2:ef:b5:17:8a:58:ec:
                    25:80:62:c3:f8:2a:3f:3d:33:41:4d:18:d9:5f:b4:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.80.0/22
                IPv6:
                  2a0a:e680::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:54:18:d2:68:64:0f:1d:3d:92:40:2c:02:d4:a4:0f:de:88:
         f2:63:22:dc:9c:95:b6:75:f5:fe:43:bc:e6:f7:cf:89:60:3d:
         6c:a9:30:e0:b6:c0:54:5e:ec:83:c3:43:20:6c:78:00:72:9b:
         38:bc:ad:5c:6d:37:ef:1a:db:e1:51:0e:f2:27:9a:a1:91:6e:
         d9:58:f0:02:71:92:a3:df:60:64:27:cd:23:1c:dd:ba:24:01:
         35:96:11:17:bf:3a:a7:61:56:ae:3d:e7:b4:57:df:c5:b5:8c:
         a3:f3:f3:d2:33:2e:88:33:18:59:bf:16:de:a1:53:8e:fa:4f:
         eb:73:97:b7:10:cc:4f:f4:4e:84:be:7d:f1:fd:e9:d9:2c:e2:
         17:15:8b:d4:e9:2f:7a:dc:f5:70:70:66:c4:95:f7:e0:79:38:
         49:63:14:15:1f:5a:da:75:37:60:1e:97:96:a6:d8:f8:44:95:
         09:9f:4b:08:50:26:6d:83:f7:50:e7:86:bb:0a:70:ed:2a:be:
         46:0a:19:fd:bd:5b:a7:43:a0:01:6a:2c:d5:8b:ea:84:ff:45:
         d6:37:65:c4:2a:40:6e:22:78:6a:cc:89:c0:98:62:27:16:e1:
         15:29:e5:f1:e1:3f:78:22:45:21:7e:0b:1c:10:c0:23:2e:78:
         d8:d3:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----