Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
File:                     8eV-NQ06bbilgFWSmfC504vMWVI.cer (raw, json)
Hash identifier:          5m36aJ0HNBs9D5wyG++t9OhdBIftR9rOIRdPw8YTTQA=
Subject key identifier:   F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01953D9E416D6D00564C07A5EED8B2DE8B88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 25 Feb 2025 14:58:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.116.227.0/24
                          IP: 2a12:dd40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3d:9e:41:6d:6d:00:56:4c:07:a5:ee:d8:b2:de:8b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 25 14:58:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:93:68:e4:cc:06:6e:f3:ac:70:5b:6d:c4:
                    44:df:6b:13:83:b8:9b:4e:68:c7:0d:d3:50:03:ca:
                    4b:b8:30:7d:11:ea:65:23:d5:d1:29:59:58:af:0e:
                    ff:63:f1:90:8a:5d:4c:44:cf:79:1f:eb:27:ab:d6:
                    d9:89:e5:ed:52:9b:08:0e:50:ad:57:37:19:4a:db:
                    b5:cc:9d:83:a6:43:86:0a:f6:bd:18:3f:0c:c5:8f:
                    b5:88:46:5a:80:ba:8f:46:86:2d:91:b4:4a:e8:f3:
                    f4:40:11:86:eb:55:25:48:6c:00:29:9c:cb:2d:7e:
                    82:76:c5:4e:3c:99:d3:50:e2:a9:7b:b6:a6:55:9b:
                    f4:87:27:ec:3f:34:32:e0:df:78:b6:c0:11:38:ab:
                    2a:c0:af:cf:65:04:be:8b:af:97:c3:a4:a5:70:7d:
                    73:c0:cc:b0:31:be:4f:28:a8:dc:2e:1d:80:18:62:
                    7d:aa:bb:18:48:bf:6d:1b:3a:ab:35:ff:e0:61:58:
                    3a:62:3b:0e:cf:d3:e6:b5:e0:68:9d:3e:d1:1a:ab:
                    de:f4:7e:57:c5:fd:59:e5:c9:3d:cc:7e:bb:57:67:
                    9c:65:86:49:d2:00:89:51:d5:c1:65:e5:19:a6:a5:
                    ab:fb:88:66:0d:62:20:16:94:26:64:53:1d:39:39:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:24:a5:6a:2f:74:df:3e:f2:ab:7c:8d:2e:10:77:2b:a3:
         af:49:a8:d0:c5:56:c6:34:0c:cd:11:5a:80:a9:00:9e:51:58:
         29:55:a2:25:ac:67:15:42:90:f1:df:e4:f5:d1:8b:e6:aa:61:
         17:dd:2c:ad:b2:9a:94:47:ae:4b:a0:f7:04:37:6c:2c:76:8e:
         64:5c:6f:68:9a:52:ad:82:b5:7b:ad:ee:10:64:11:bf:99:86:
         23:f2:0e:d3:db:df:e8:15:ab:c7:63:eb:71:a2:18:3a:19:bd:
         68:05:3c:40:99:95:91:bc:aa:02:d9:c4:31:61:41:1d:68:65:
         51:44:b0:44:d8:5c:7b:55:bc:20:8b:08:40:b4:4e:85:23:5b:
         38:5e:c3:30:aa:f6:60:67:84:f1:ee:6b:e5:92:d9:79:90:e4:
         aa:32:cf:86:ac:11:dd:d6:d1:7b:b5:ea:ba:a6:0c:d2:5a:6e:
         2f:59:81:06:c5:25:9b:56:db:92:98:8f:f6:e3:8b:a0:be:76:
         34:64:17:5c:7e:d3:8d:4f:8f:0b:5b:a4:e9:f4:31:83:5b:81:
         50:e4:7e:ce:08:6a:48:23:8f:93:87:07:d9:9b:0d:3c:22:7f:
         50:03:7b:9a:3f:67:c3:a7:af:62:3a:0a:fd:27:9c:54:13:4b:
         c5:10:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----