Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
File:                     D0OG59TvxHLBH-nP7z0zCXSzP2E.cer (raw, json)
Hash identifier:          QxH3UlVUCNETghfzQbitIf7AJplid41rBPe/HiZ/J7Q=
Subject key identifier:   0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B545882270820F2E17E085E60515F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.216.156.0/22
                          IP: 2a0b:b940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:45:88:22:70:82:0f:2e:17:e0:85:e6:05:15:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:3b:00:08:0c:4e:af:ed:16:72:d4:ce:fa:
                    e5:d8:1d:4d:24:e2:47:55:11:71:37:08:fa:52:9b:
                    23:d0:47:a0:ae:d9:ef:9e:4b:14:90:18:0d:72:32:
                    85:bc:ba:fa:a0:a5:ee:34:f6:c2:08:65:32:71:58:
                    04:ae:ee:e5:4e:7d:bd:fb:60:3e:c7:9a:97:aa:08:
                    64:a9:00:e1:f5:65:b9:b5:27:2a:77:1d:e5:8d:45:
                    40:bb:d2:ab:52:c0:6d:5b:b6:70:ca:a8:22:b9:12:
                    21:41:61:ad:f1:d5:77:99:8a:df:77:ca:7d:c7:08:
                    80:dc:0f:f0:6c:41:76:77:1c:2b:8e:e2:80:a5:e4:
                    73:1d:d9:33:d7:61:6a:dc:1a:d9:e0:be:6d:3f:1b:
                    33:0d:b7:0e:a6:6e:47:46:7e:0c:fe:64:82:18:ff:
                    c0:d8:67:40:9e:c7:6c:d7:3f:bc:80:a3:a3:e4:b3:
                    db:f7:a0:0c:04:c6:bb:bb:a0:16:72:f6:1c:d7:d1:
                    f1:48:c8:9a:28:3e:6d:b9:87:fa:46:ec:46:7e:a8:
                    90:66:9c:b3:28:bb:60:cf:3d:d6:6c:a6:d5:64:9d:
                    ce:e7:b6:de:f7:35:fd:2c:4d:5d:27:69:4e:96:90:
                    28:2b:6b:2c:e1:b2:95:bb:ce:06:e8:a9:38:e9:cc:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.156.0/22
                IPv6:
                  2a0b:b940::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:6b:88:6c:b4:ad:d5:04:07:9e:56:60:b0:7b:18:36:8b:
         e4:f2:d3:04:c3:be:69:7e:43:93:28:77:c2:1f:a5:50:f1:fb:
         42:71:fd:60:2a:12:af:22:71:93:6e:10:af:06:90:f3:59:9b:
         68:aa:49:26:fd:bf:3a:f2:30:f3:01:ba:60:c3:17:c7:51:25:
         49:7e:57:28:2b:21:d6:37:3d:a3:ab:80:97:a0:76:69:51:eb:
         8f:f9:85:5e:db:77:0f:af:5c:a8:46:88:40:75:23:23:ef:14:
         f1:0c:16:f0:d0:8a:a9:80:2a:00:d1:ab:89:05:9e:b2:28:65:
         89:55:52:b3:2a:cb:3c:b1:7c:55:ac:9a:ba:2a:58:0f:46:9d:
         40:c1:ca:e5:3c:19:7e:e4:47:fb:50:01:78:50:a0:7e:cd:3b:
         9c:19:f5:50:2d:5b:94:c0:31:b2:b4:ff:f7:00:40:7d:cf:9b:
         d2:cc:c7:99:0c:eb:29:01:61:7d:8a:93:55:63:ba:09:0e:27:
         44:b6:3f:7a:7d:63:2e:0c:ff:c7:3e:06:0f:bf:cf:ab:18:e8:
         6d:89:a3:f3:d8:e8:72:6b:87:68:07:c9:0c:88:a4:9d:cd:db:
         26:90:df:90:13:ce:0b:86:9f:de:30:ef:af:e7:07:c3:c0:db:
         70:41:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----