Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
File:                     9BGAp8UWZ-w4dedl8kX5CThhJXE.cer (raw, json)
Hash identifier:          lz2Sm5hqSmU13wtLI5IrsQOdJ6tzx3WOyt5KrghqDD0=
Subject key identifier:   F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8CA4974F7CDCE65D68C58A6F17D343
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:a3c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a4:97:4f:7c:dc:e6:5d:68:c5:8a:6f:17:d3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f41180a7c51667ec3875e765f245f90938612571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:c8:5b:02:c7:17:ad:04:a3:af:34:f6:92:
                    62:89:25:ed:41:89:db:59:39:b7:ae:39:95:12:3e:
                    41:28:0e:a4:26:a0:3e:ea:77:c1:c1:94:26:55:e1:
                    e6:54:73:e8:8e:3e:2f:c1:a0:67:41:ee:0b:0c:de:
                    94:dc:26:aa:57:67:a3:84:71:87:b0:29:d9:90:b0:
                    1d:dd:7d:3c:f3:d1:80:28:08:35:cb:9a:45:ec:4c:
                    84:21:30:36:c3:4f:5d:50:ca:37:ff:ba:01:2d:4f:
                    04:54:67:6f:75:e3:d6:2a:8d:4e:96:6f:99:f7:be:
                    be:ca:05:91:f1:16:23:74:38:67:8f:10:1d:6d:46:
                    c1:d5:3c:5a:e8:96:38:a3:e1:1d:80:a1:96:f3:ea:
                    98:33:5b:e3:09:3a:81:db:d1:01:31:85:54:05:ee:
                    e5:b1:a3:be:7b:0e:1b:da:9f:5b:8a:0d:b8:6d:84:
                    86:b6:a6:da:2c:12:82:45:b1:56:c0:85:66:3c:6c:
                    22:2f:e2:c3:5f:79:7d:5e:be:c6:43:33:b7:ca:f6:
                    55:df:b6:76:7e:cc:1b:0d:d0:1c:28:91:1f:6c:86:
                    b3:fa:40:8b:bf:b0:e7:2b:ee:fc:4c:4f:d4:f7:ad:
                    7b:f7:6d:6c:64:8f:98:da:7a:be:c2:a7:27:cb:71:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:3a:8f:2e:e3:dc:b5:d4:96:bb:4a:5a:98:32:0f:58:85:
         b4:fc:ee:3c:49:df:88:04:f1:d1:dd:78:70:ee:a2:07:e9:06:
         e3:4c:ce:42:21:3c:c9:5a:15:41:2c:92:d5:9f:6f:fe:08:22:
         30:ee:0a:f9:dc:7e:19:4f:4f:bd:7e:e9:4e:7a:c4:69:2a:7e:
         c3:9a:0d:26:2b:36:7a:bc:e4:ee:20:68:d2:d2:33:16:32:61:
         db:72:dd:bf:50:76:9b:76:ae:13:90:dd:5c:a8:02:5b:f1:3c:
         14:f2:84:58:1c:a4:66:f1:ea:2e:d9:43:fb:c0:d4:51:76:9a:
         42:f9:48:1e:a1:a6:3a:56:7a:2f:ab:fc:5d:81:2b:aa:04:f3:
         bd:45:da:57:a6:d2:08:9d:b7:5d:b5:63:fc:27:ab:28:54:5c:
         43:18:b7:67:23:fc:df:12:3a:11:3c:de:7b:ae:ce:76:8c:0d:
         5a:7b:33:da:58:0d:64:05:60:98:a9:0c:a1:78:7f:67:43:09:
         a7:02:68:e8:e9:6c:cd:5c:bc:b0:05:ed:8a:36:9b:5a:b8:f0:
         1e:61:09:2f:fa:4b:71:46:3c:40:7c:30:20:25:57:35:7e:2b:
         d7:8c:38:e7:6f:fe:8f:45:70:95:2f:6c:0b:0a:3e:77:70:35:
         41:fb:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----