Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
File:                     8dpnE1tzfKnS39e5f-WXi48wDWs.cer (raw, json)
Hash identifier:          3vyo7uMHFgqeTnYhlqjrBx9tUg5XZuOhydLfA4m2crQ=
Subject key identifier:   F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143EC43900621200772DE8BD1A0EA31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60486
                          IP: 83.143.72.0/22
                          IP: 85.184.244.0/22
                          IP: 185.29.152.0/22
                          IP: 2a00:a920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:ec:43:90:06:21:20:07:72:de:8b:d1:a0:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:a6:6f:69:af:60:1d:2f:53:db:01:ab:aa:
                    2f:09:a6:b7:de:2e:52:c7:88:7a:3e:94:f8:f3:16:
                    4a:d1:59:f1:9e:f1:9c:b4:76:f1:c0:c7:ce:97:d6:
                    5b:28:4b:f0:c3:e1:66:62:cf:93:38:2a:d8:cc:99:
                    e1:eb:ac:6f:cd:f8:4b:5b:28:32:2b:a3:ad:35:a6:
                    9a:7d:8b:46:15:93:2b:14:34:70:82:2a:a9:94:3e:
                    57:d9:ac:5c:cf:c6:6f:d2:80:62:a6:a0:01:0c:f6:
                    98:82:b6:7a:93:23:c4:0a:0d:52:93:62:b6:a2:73:
                    da:49:f2:e5:de:3f:d3:5a:ef:36:f9:59:df:58:4c:
                    b5:16:07:c1:38:fc:ac:5c:52:37:0f:6b:de:20:c1:
                    92:26:cd:4a:33:b6:28:18:c2:3d:3c:b9:90:bf:de:
                    cd:f9:13:2b:a3:67:4c:46:42:8b:8b:40:a0:83:81:
                    52:76:44:ae:2b:84:ce:09:db:1e:c5:61:01:ef:66:
                    b8:b8:19:d9:e0:1e:3c:4f:15:18:b7:9d:48:f5:78:
                    ce:2a:2a:3f:b1:9c:23:65:6e:69:d1:b8:56:0c:6b:
                    7f:48:15:39:51:3b:cd:a7:a7:f5:fb:b3:a8:97:ff:
                    4d:89:a7:45:df:63:bf:81:45:67:74:64:62:73:eb:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.72.0/22
                  85.184.244.0/22
                  185.29.152.0/22
                IPv6:
                  2a00:a920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60486

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:43:12:04:a5:a4:a3:dc:e4:38:c7:3e:64:79:2c:ca:23:
         71:88:34:39:0e:bf:83:fb:0c:ab:79:af:34:47:79:ee:9d:94:
         47:7a:72:91:b7:5b:e3:e6:cf:df:6a:52:25:ea:2c:cc:23:5f:
         d9:9c:dd:77:50:3d:82:09:a4:22:a2:08:99:b4:ad:f1:50:f7:
         9c:cb:40:56:84:20:e8:eb:da:9d:62:4e:d9:6c:6e:27:13:d9:
         72:db:74:d2:fe:a9:07:07:63:71:d0:4f:c9:ed:61:b0:4d:7d:
         e0:0e:58:f4:18:6b:c2:d0:fb:2b:1b:59:58:f7:8b:c8:2b:f3:
         26:f3:cf:6f:78:a4:e5:de:40:3e:51:fd:f4:a7:c1:96:b3:6e:
         22:63:4b:5f:2f:90:df:f1:be:1c:a7:0c:79:ca:e5:c3:3e:65:
         35:22:4b:fa:a7:94:f0:85:c0:48:9a:51:16:72:91:d4:04:da:
         3d:47:b4:16:f8:41:95:62:44:57:1d:58:4c:6a:d5:ca:a7:77:
         cf:a8:b5:40:28:12:87:dc:6a:d5:87:ae:73:49:09:0d:61:3e:
         5e:ad:39:53:9d:67:e7:1c:f1:56:8b:ff:48:35:00:14:0c:08:
         fe:a1:2a:a8:bb:d3:76:6d:b4:bf:3a:c8:2a:04:57:d4:ce:a2:
         b7:3d:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----