Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer (raw, json)
Hash identifier:          MezAO3dN79HLKHElN9VqH9UNKlB4HNDG+kAkfJLnT4I=
Subject key identifier:   0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F0548A3998B4553D0517DAF4778D7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.133.188.0/22
                          IP: 2a0e:77c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:05:48:a3:99:8b:45:53:d0:51:7d:af:47:78:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:b2:66:61:ad:6e:e1:09:0c:4e:26:29:5b:
                    67:89:d2:01:e2:c7:84:56:ee:40:af:ce:56:87:e7:
                    e7:57:ae:7b:7e:ab:a1:91:0c:b5:73:c3:99:85:22:
                    de:93:87:9b:a2:0d:1b:11:a7:90:c3:6e:e8:2e:c9:
                    8c:9c:cd:a0:21:46:22:f0:89:d7:c8:67:95:d5:1e:
                    dd:a2:0c:36:ea:c8:b6:5a:1b:16:32:4f:e2:2f:4b:
                    27:60:4b:06:11:5e:b3:86:78:c0:6d:c8:12:e8:47:
                    ce:f3:35:2b:ce:9c:89:1d:82:c5:3e:39:81:86:65:
                    1a:97:da:74:80:87:d7:f4:36:1a:a5:80:8d:fd:3e:
                    9b:c6:33:b8:0e:fc:ba:1a:d2:f7:42:72:b9:7f:98:
                    74:d3:37:0d:6f:21:c3:2b:74:8f:fa:b0:cd:76:02:
                    e6:fd:66:1d:a6:5a:5c:46:70:fd:63:7a:45:29:25:
                    49:70:af:33:77:f8:9a:5e:ac:3f:58:7a:18:37:e9:
                    65:fb:43:5c:fe:6b:2d:29:6b:2b:a0:1e:43:19:4d:
                    5e:ab:b6:15:47:86:0b:9b:9e:ba:93:82:25:b2:6b:
                    79:ec:e4:60:d2:01:11:74:93:ab:16:8d:f1:18:db:
                    fd:1f:05:c7:d1:c3:1e:e7:20:5d:1b:5b:d8:f1:83:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.188.0/22
                IPv6:
                  2a0e:77c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:20:4a:09:d0:20:17:1e:fc:8a:d3:86:22:62:86:ee:f9:39:
         8c:2c:bc:1e:8d:70:40:2e:37:c2:3b:f9:f4:14:69:90:4b:ca:
         63:bc:37:aa:c9:31:2a:a2:28:08:5c:ca:e9:a5:dc:82:40:84:
         6f:b7:e4:75:2c:f1:ab:49:69:88:2b:90:f4:ce:14:da:47:54:
         78:72:4f:69:7c:8e:9f:7a:34:74:3d:8f:1b:ca:2c:a6:01:69:
         2f:e6:20:a1:78:33:15:9c:54:44:44:97:36:53:a2:bc:11:ca:
         e9:06:c2:1c:4b:8a:f7:b2:4a:bf:7a:d2:e8:36:ca:61:90:7d:
         a1:93:f9:dd:b5:08:e5:dc:eb:a1:aa:65:51:20:2e:3f:91:99:
         69:bc:01:a3:e5:01:c2:e4:57:7d:6d:09:8b:ac:71:b8:95:0a:
         ba:fd:a6:90:07:64:e5:ca:be:b5:26:54:02:6f:c4:d6:fa:a8:
         ee:d2:e9:05:b2:51:dc:b3:25:f2:16:33:95:02:a7:ea:76:de:
         d9:2f:a3:62:d5:81:e2:0a:ef:c9:09:50:6b:af:15:39:42:77:
         44:eb:23:d3:6d:90:e8:6a:e2:18:aa:33:a7:af:a9:66:df:98:
         ec:f6:99:32:d5:c5:4c:10:9f:ef:92:4d:0b:b6:7e:7c:8a:ae:
         76:b3:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----