Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.cer (raw, json)
Hash identifier:          aoJ83ExBexBjzXU2qiMpQJfm2cGWOW+eEZy0Omt/wXY=
Subject key identifier:   15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D94338F743D88428256B998779BF38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.245.22.0/24
                          IP: 2a0c:d4c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:43:38:f7:43:d8:84:28:25:6b:99:87:79:bf:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:35:8d:e3:e5:08:73:13:ef:dc:3a:d9:be:
                    3f:7c:60:83:61:72:cd:f4:b8:e7:e4:40:17:1c:42:
                    c6:6c:e5:2a:e6:75:8b:1c:34:be:32:40:a9:89:1b:
                    23:87:17:d6:00:a6:7c:b4:80:ab:b2:a1:68:9d:f7:
                    55:0d:f9:35:38:03:39:50:f1:50:5c:47:94:cb:e2:
                    eb:74:f3:db:53:a7:a3:1b:ce:70:6c:0d:77:f8:75:
                    41:8e:5e:4b:be:4b:d4:73:d3:28:56:41:cd:56:be:
                    b4:cb:10:72:13:dd:b4:05:4e:b2:04:5c:e7:06:8b:
                    c2:e3:48:99:0a:a2:5d:ae:30:35:ba:60:40:3b:66:
                    fc:5c:6e:e2:f3:af:73:bd:cc:fe:ba:07:91:27:35:
                    31:21:23:3e:31:3d:e1:87:75:50:b3:9e:00:40:1c:
                    c8:78:fc:7c:e3:36:4e:d1:13:c0:6e:ae:44:68:93:
                    7c:23:46:d9:15:d2:cf:ec:d4:37:92:db:43:fc:67:
                    55:5c:6b:23:00:5f:ae:a9:a7:87:4b:6d:32:3b:72:
                    69:a9:a5:52:4c:57:3a:48:4b:c6:44:39:eb:1a:a5:
                    91:db:0d:cc:6b:33:a8:a3:b6:34:08:06:12:ed:cc:
                    a8:1c:9c:f6:23:e5:d6:74:09:2a:21:6b:36:c9:a4:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.22.0/24
                IPv6:
                  2a0c:d4c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:ce:12:ff:74:80:0c:c5:4b:f9:5e:07:9e:a0:ab:4f:6f:
         e7:2f:33:cd:55:7f:99:54:c2:0b:ea:95:6f:fe:9f:d6:3f:13:
         fb:d0:42:f4:de:3e:f8:01:f5:3a:39:99:21:8f:46:ed:c7:c9:
         47:f2:13:73:20:9c:04:83:23:66:b1:b1:52:2a:32:f7:2a:2b:
         15:03:83:0c:9b:fa:8b:21:44:20:64:10:23:0a:1a:33:29:68:
         66:46:fb:28:72:96:a3:dd:1e:96:3a:86:a3:b3:ac:3a:67:84:
         28:31:37:63:24:e7:94:0a:64:59:f8:82:54:2c:ea:f5:9b:1f:
         e4:e1:08:36:85:52:0d:f8:2c:ee:c7:76:dc:b7:2a:ed:85:60:
         2c:9a:cd:01:55:06:b0:45:83:4a:4d:af:6e:56:f1:b6:8a:bd:
         d0:43:6e:a8:c9:27:9d:4d:c8:ec:d8:8c:6d:51:ed:4a:40:41:
         78:35:c6:b5:3a:41:78:cc:55:9b:b6:df:7a:49:95:d7:15:ee:
         c5:72:a1:b9:3a:00:73:57:a9:85:6a:dc:64:6a:d3:f5:10:9e:
         1b:09:78:ab:bc:dd:b9:b1:4b:f1:68:b0:c5:9a:ab:db:29:0d:
         5d:95:db:d8:bd:ea:aa:23:e5:2f:00:9f:04:51:bf:bd:44:9b:
         5d:e4:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----