Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.cer (raw, json)
Hash identifier:          oM0Gm7rAwR4uNg0JV5fHKPNuQJ1plWxYh8ycKtiA6zA=
Subject key identifier:   F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F77332D2ADA708EE6E17F62EB4DD0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.185.164.0/22
                          IP: 2a0b:5a80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:77:33:2d:2a:da:70:8e:e6:e1:7f:62:eb:4d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:49:72:02:c3:96:61:b4:49:7a:e3:8d:1a:
                    90:a5:cd:19:52:f8:38:00:e6:52:19:50:ed:fd:93:
                    4c:4c:2f:df:82:8e:c1:49:3a:ea:77:20:42:c2:39:
                    40:58:ea:4f:c6:f4:91:ff:fb:66:6c:84:0c:7e:5f:
                    5e:8a:6b:1f:b9:93:24:72:bf:f4:cb:99:f9:a1:94:
                    2f:0f:00:68:b8:00:92:99:b4:fc:25:7d:e7:23:57:
                    65:f7:dd:e0:6d:34:03:8e:ac:26:c9:3a:85:37:6c:
                    44:7a:97:bf:fa:af:10:6b:7f:55:b9:ed:45:fb:3f:
                    0b:62:0c:99:9d:18:50:92:5e:c0:89:45:f6:0d:36:
                    ab:50:ba:d3:cb:46:f2:c2:0c:3f:ca:04:de:b2:32:
                    ea:f2:18:06:17:d3:44:86:cd:88:54:3f:3e:59:0d:
                    94:91:10:bc:83:ae:af:b2:ba:22:d3:bb:c2:96:a9:
                    7d:c3:7a:3d:c1:a5:24:8f:3d:71:84:a2:2c:3f:fa:
                    5e:e1:38:3d:78:b6:b5:5c:f6:be:45:dc:a1:42:a4:
                    87:d0:d6:77:fe:ad:ea:91:3f:1e:9a:42:d3:b3:51:
                    66:a9:98:03:35:da:41:64:24:39:2b:f0:46:3d:93:
                    c3:a1:2c:1f:75:57:c7:20:72:3e:94:cc:86:aa:a1:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.164.0/22
                IPv6:
                  2a0b:5a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:34:5a:64:c0:e6:3b:7d:8b:c5:01:d7:90:45:23:a7:cc:
         08:79:98:9b:53:34:6b:65:6c:ca:93:f5:5f:9a:4e:26:21:31:
         80:5c:7f:cb:4a:5d:dd:a8:42:08:86:ad:7f:5a:69:f0:af:96:
         2c:84:a8:50:62:2c:3c:15:26:f7:05:c6:81:18:e6:db:e7:21:
         54:13:e6:b6:dc:2f:ba:2d:81:2d:47:e3:13:c9:65:9c:9d:cb:
         96:b2:94:d3:2b:5f:8b:bd:bf:b6:03:5c:e1:2f:5e:22:89:6d:
         82:7d:40:2b:c1:5b:e4:c3:6e:9d:5c:ba:94:e7:4e:79:b3:39:
         e8:44:65:88:f4:35:81:31:92:cb:77:e6:2b:63:73:a0:b8:ac:
         ce:2e:56:47:95:67:1c:59:af:5e:d0:cf:3a:41:ed:f5:f8:20:
         81:6e:fd:0b:8f:55:1e:6e:65:fa:ca:8a:18:75:ac:40:87:c1:
         63:9f:61:73:e2:9e:f9:fd:c0:0a:e0:07:a1:4d:86:46:c1:11:
         77:72:3c:9b:53:88:25:62:13:bd:76:47:38:b5:e6:d2:64:70:
         1d:28:33:1e:7c:ef:ea:5c:2a:5a:09:2e:90:28:01:30:ab:41:
         d5:ab:f7:6f:1f:3e:1c:80:1e:a2:19:a6:c9:29:95:06:c6:47:
         cf:02:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----