Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
File:                     GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer (raw, json)
Hash identifier:          YFz6gdlskvgmvBAGUDZLZxND2Tx4PUr9b9ymvJCAoG0=
Subject key identifier:   18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D99BC3D19C5633627D6BCFAB71ACA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.143.192.0/22
                          IP: 2a07:3840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:99:bc:3d:19:c5:63:36:27:d6:bc:fa:b7:1a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=184c7c0364f1093cfc584c93037024104fb4854a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:f8:08:67:60:a7:94:ad:0e:fe:72:82:e4:
                    14:b8:f4:18:48:6f:be:c8:9a:f1:cc:9c:7e:b2:45:
                    44:15:d5:5a:26:db:df:02:ca:bf:02:2b:69:3f:13:
                    10:52:f8:e4:1a:9e:6f:dd:b2:49:8f:39:8e:58:55:
                    42:07:b0:ce:fd:e9:a6:d0:2c:60:d3:01:db:6b:32:
                    12:39:72:06:50:27:c3:87:73:49:ae:e3:eb:70:82:
                    67:4d:ab:3e:4d:79:83:53:b4:28:fc:9d:88:75:7a:
                    89:0b:f6:7c:2e:36:11:43:af:71:3b:d6:00:fe:2b:
                    17:c5:76:50:c4:31:32:ba:09:d1:08:72:b4:39:da:
                    e5:99:a9:67:7b:51:2a:33:9a:10:06:4c:dc:9e:b1:
                    a4:81:58:b6:72:fd:38:c6:a8:55:e6:83:4f:07:91:
                    ac:11:45:7f:3a:84:54:1c:49:74:c5:8d:df:b6:1a:
                    21:3f:1b:a6:97:8c:e8:64:72:7f:cf:f0:85:5b:d8:
                    0d:48:97:4c:cc:cb:28:5b:4f:eb:03:05:1a:d8:43:
                    6a:4f:a5:5f:cc:28:97:1e:ca:96:5f:ad:6a:9b:3b:
                    f7:4d:e6:ca:27:a7:7c:c5:0b:52:18:a5:0e:c3:bd:
                    b5:20:46:f4:26:87:e9:d1:71:f6:63:e1:32:67:4f:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.192.0/22
                IPv6:
                  2a07:3840::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:4f:ae:a3:ab:98:6e:73:9c:d9:19:13:b2:57:26:dc:da:
         41:bd:61:6b:9e:3c:9a:97:b6:31:5b:df:6a:6d:34:38:fc:90:
         c2:4a:b0:23:40:e8:31:e1:a6:ea:8d:90:b8:3c:6e:17:15:ea:
         d0:ff:93:c1:ec:12:1d:db:26:7c:8f:67:e0:cd:e3:75:1c:35:
         5d:26:1f:ac:aa:9f:0a:07:4d:6e:46:65:89:fd:58:01:de:11:
         90:1b:c3:8a:d9:6f:c8:46:c0:26:2f:91:26:c8:25:0a:da:5f:
         4d:a6:6d:9e:f3:8d:6d:96:9d:ff:fe:5c:71:b1:6a:4e:2a:be:
         63:4d:84:3c:83:6f:1a:63:1c:03:5f:1b:3e:7d:70:3e:ad:30:
         85:97:b2:33:cc:7d:3f:ca:a6:f3:b6:5c:f7:06:ce:d8:22:35:
         34:2f:57:ba:26:20:f3:d3:d1:ea:58:a6:ec:aa:30:5c:a1:56:
         d0:d0:82:ef:98:bc:d7:09:5d:87:1e:d5:5b:52:ab:fe:79:24:
         53:8c:7d:67:5b:27:08:4e:68:32:fb:d8:c2:ad:e8:bc:a3:fe:
         e7:5f:ba:0c:a9:26:de:99:d6:01:37:09:1c:c6:fd:0b:f4:c4:
         36:e6:32:5d:17:6b:2e:3b:50:27:e8:f8:07:dd:88:71:7a:3e:
         f4:d8:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----