Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer
File:                     EuRSx3xd4QkKFhC6wqY-g6pysNM.cer (raw, json)
Hash identifier:          dGQhJVcFciItdmiDNOTlMhe05qIu6FckUJwUnbqkojQ=
Subject key identifier:   12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D655DAB31C4DDEF3AF78A15E6793D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.36.231.0/24
                          IP: 2a09:1180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:55:da:b3:1c:4d:de:f3:af:78:a1:5e:67:93:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12e452c77c5de1090a1610bac2a63e83aa72b0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:06:e4:e3:9b:bf:e9:86:2a:dc:f8:b9:d8:
                    77:1e:51:cf:73:af:e5:27:28:5a:33:01:df:29:87:
                    ce:8f:d0:8a:34:1b:a1:3d:21:82:2b:a7:d8:23:14:
                    8a:55:be:70:5f:90:57:46:90:6a:f7:47:14:3d:ad:
                    00:0f:8c:82:4b:29:3c:be:fb:7e:b4:94:45:3f:05:
                    ca:15:0f:89:81:27:86:6f:ac:65:f8:cd:b8:ab:4b:
                    a3:6c:19:f7:f0:12:43:cd:20:f8:c2:fa:ab:db:17:
                    fb:18:76:01:38:b1:e4:f5:57:80:7c:18:5a:6d:3d:
                    68:20:2e:2a:bd:db:2b:63:35:58:19:33:fd:4b:99:
                    86:1b:ed:59:b9:23:05:39:7e:35:8d:3b:93:8a:36:
                    1e:1c:7c:c0:a3:a5:97:e3:90:24:a7:dd:69:8d:f0:
                    84:f0:2e:e0:32:b9:a1:3f:a5:0b:0b:ff:87:fc:e7:
                    f2:7f:d6:15:e1:10:b7:b6:df:9d:bc:c6:f1:91:d6:
                    7e:da:d7:0f:62:2d:ff:68:4f:5d:cb:af:5d:fa:6e:
                    a2:8d:f4:06:fd:a0:bc:06:15:bc:3e:44:8c:e3:2d:
                    75:37:3a:c6:1f:82:23:14:a7:f3:db:bf:21:b9:4e:
                    5c:99:a8:13:78:d9:95:7b:01:d4:44:5c:6a:30:6e:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.231.0/24
                IPv6:
                  2a09:1180::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:bc:dc:88:fd:ea:e2:34:15:30:ab:5a:4d:c8:f2:64:28:
         07:9a:9e:36:64:1c:86:62:80:2a:4f:54:99:e6:c8:3c:9b:46:
         12:c0:97:b7:18:44:2e:9f:15:58:e2:02:c8:3f:8f:33:7a:f0:
         bf:16:33:aa:ba:50:4a:f4:11:57:fd:94:34:b2:ef:95:2e:8b:
         ae:09:3e:54:9a:37:ea:b0:09:88:67:52:d1:a8:8c:c7:36:29:
         33:0a:7f:17:59:a1:fe:62:91:c9:d8:1b:5b:ed:cb:28:9f:99:
         43:99:90:c9:7c:91:ec:47:2d:5f:17:a4:bd:e2:12:f1:e1:4a:
         a5:6a:9f:2b:82:0e:78:41:24:a7:c2:5d:f3:73:47:61:16:91:
         33:05:3c:81:b2:ab:72:6b:6e:ef:2f:bb:a4:69:2d:b5:1b:16:
         4c:20:d2:bc:ab:38:08:77:97:95:6f:c4:14:e0:66:38:38:4c:
         37:dc:ec:67:27:d6:c5:e5:7d:8a:f0:78:e4:af:a6:51:d4:73:
         4b:df:13:ca:0b:29:9e:a3:de:b8:c7:0f:c1:67:76:34:46:f7:
         55:f2:78:32:81:93:81:bb:8f:17:4a:f2:d3:1b:51:f2:62:3b:
         75:8a:d1:3e:e8:aa:86:70:a3:e5:fe:01:46:f3:51:37:4a:67:
         af:94:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----