Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.cer (raw, json)
Hash identifier:          FfVM8CA1kVi+J54+pTEfdvbPAlpiHFBfGP+hdtrR228=
Subject key identifier:   05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01951916B86A4480B5BFB59D0C2F9D567070
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:44:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 77.95.216.0/24
                          IP: 2a13:f7c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:19:16:b8:6a:44:80:b5:bf:b5:9d:0c:2f:9d:56:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 12:44:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:43:83:0c:b0:4d:f9:26:f2:04:e0:be:80:
                    75:e5:ff:de:70:5a:e0:9d:9f:59:60:db:bb:0e:cd:
                    58:73:0a:37:e0:f6:8e:7b:c1:d6:ed:ac:5a:9e:a5:
                    df:bf:98:f8:23:9d:4c:07:5a:32:97:ba:ef:89:57:
                    3c:8c:ec:68:70:41:cd:c6:e8:f6:1c:ad:fe:56:5f:
                    fe:2c:ae:ba:96:46:5c:df:6f:3a:fa:6d:41:be:3e:
                    9d:47:7e:fe:71:ba:8d:25:58:e7:55:f7:0e:3d:cc:
                    32:e5:1d:13:af:41:ae:5a:f9:eb:7f:5f:06:6a:32:
                    76:1e:51:84:d3:28:d0:5d:f1:37:ef:45:49:7c:19:
                    50:0c:62:f4:a1:0d:c6:f8:be:ab:67:08:e5:46:5b:
                    c7:c6:41:98:78:af:45:6f:35:b4:07:db:00:03:41:
                    40:6b:81:f0:4e:82:5a:24:44:70:6e:16:39:04:20:
                    1f:6a:f4:8c:a3:4e:f9:3b:c3:63:14:fc:91:9b:db:
                    cd:66:3a:fc:22:e8:91:17:02:ad:09:0e:84:dc:b8:
                    78:ac:1b:e2:db:66:48:b9:49:cf:ed:03:74:6c:6d:
                    0a:f4:fb:73:39:83:88:9e:9a:c3:4e:3e:93:83:4d:
                    4e:6c:5d:5e:7c:96:0c:4c:2e:55:43:05:bb:e9:1a:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.95.216.0/24
                IPv6:
                  2a13:f7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:a8:97:c8:50:f3:0d:3b:9a:f4:6e:7a:5c:73:25:13:26:
         ac:af:83:66:08:02:56:fb:5e:3f:51:af:e5:b8:5e:2b:82:c1:
         31:4e:49:d7:c2:81:1d:6c:51:82:3b:9a:ec:2c:23:29:62:d8:
         91:60:84:e9:6e:dc:1e:35:9b:97:d2:ba:2e:49:61:9a:43:63:
         29:d1:2c:00:5c:64:02:ee:f7:08:17:ca:13:66:5e:13:40:62:
         db:3c:20:cf:77:10:18:f5:1b:be:3e:2f:78:d0:0f:5c:c4:0c:
         24:47:8b:2c:3a:ea:e5:4c:43:82:56:4c:bb:5c:66:89:4b:57:
         ee:cf:b3:d5:62:26:09:ca:cd:7e:a7:33:44:88:c9:46:cd:14:
         09:91:c4:b1:13:81:02:98:4e:40:38:9a:bc:39:4e:e4:06:d2:
         b7:f1:bb:e6:54:fc:25:99:95:7e:92:3f:d3:de:00:15:30:30:
         ae:20:38:fb:ff:62:b8:84:41:a3:7f:9d:33:e8:22:f4:3d:30:
         e3:ce:ae:6e:94:42:7a:32:e1:e7:da:be:f3:14:6e:0d:a2:78:
         5f:32:44:c1:18:8a:af:e6:08:60:e0:1a:34:20:12:13:98:01:
         d3:c3:fb:79:87:f1:3c:d2:2d:18:49:99:56:06:0f:de:d7:b7:
         1b:41:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----