Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
File:                     GurA9jJXsiTsFxBuG83v0ywkd4s.cer (raw, json)
Hash identifier:          7RzEMo84JdF9FC6Atn1L1A9peUIxx7berEv4faQj2Kw=
Subject key identifier:   1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445337DBE7651BE8E8CDE938663BAD6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.126.195.0/24
                          IP: 2001:67c:1950::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:33:7d:be:76:51:be:8e:8c:de:93:86:63:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:03:ba:96:38:21:71:d5:83:df:e4:56:0a:
                    a3:5c:18:38:04:f2:19:3d:74:cb:83:82:36:49:7d:
                    5b:c2:e9:4b:e0:e7:48:12:43:55:f8:b2:0c:99:c8:
                    50:db:f2:9b:72:ed:4f:ca:73:46:1d:01:b0:b2:7e:
                    77:ed:21:df:c1:82:00:7e:c9:b5:07:4c:8c:3b:31:
                    9f:8f:31:55:1c:d0:8c:19:3c:87:49:1a:77:b3:55:
                    53:7d:88:28:fd:ce:1a:97:b4:9e:c5:ae:fb:11:e4:
                    ac:36:13:37:c2:f1:d8:83:b0:39:97:e1:45:5f:19:
                    8e:dd:31:9a:d3:23:23:a8:21:86:e1:25:87:98:6b:
                    c4:31:7e:f6:64:fb:0e:f4:fb:53:f1:c0:7c:2d:26:
                    8b:4b:bd:6a:2b:3c:ea:48:32:9c:e7:ec:ea:dd:30:
                    47:b7:e1:f0:26:e8:4a:8c:12:37:84:e8:10:0b:83:
                    ae:a1:fd:f9:f5:5a:49:4a:1b:9e:df:51:7f:ef:c7:
                    50:9d:15:9c:ed:91:b8:5f:74:79:41:c7:a6:8b:13:
                    64:4e:1b:03:3b:a0:5b:4f:18:87:b6:d4:cc:c7:5d:
                    ca:0f:69:3c:3c:e4:68:85:d0:fc:c2:89:0e:47:49:
                    d5:a6:e7:fd:b4:35:41:8a:cc:f3:d1:cd:95:b9:a9:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.195.0/24
                IPv6:
                  2001:67c:1950::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:20:42:9a:05:8f:a5:5a:41:35:49:9b:78:05:a8:00:2a:85:
         e8:61:09:be:99:ce:24:c3:0b:01:2d:ea:df:20:18:d3:cb:9d:
         29:4b:d7:7f:07:24:92:30:3c:1c:d5:a5:bd:2c:0a:64:4b:55:
         b6:3b:c6:26:f9:79:10:a0:29:2d:12:57:5d:1d:8c:85:96:b1:
         dd:cb:ba:98:78:1d:00:0f:20:fb:c6:d8:79:e4:15:ff:9e:03:
         94:7a:cc:8e:08:1a:57:cd:78:ae:d0:dd:ec:6b:e9:05:66:5e:
         19:4b:c3:7c:94:98:ae:79:d0:57:97:9e:aa:7f:6a:87:8d:80:
         0d:fc:97:fa:9b:0e:45:61:54:2f:c7:f4:82:e5:48:2a:2c:f6:
         2d:0b:1b:89:d3:60:25:5c:80:07:b5:4d:c7:d5:04:a9:51:0f:
         7a:7f:05:c3:67:a6:19:1e:5d:a5:1d:06:6d:0f:a0:5d:36:eb:
         08:9d:27:fe:5b:6c:a9:de:db:2a:2f:eb:9f:80:65:e9:dc:27:
         29:5e:5e:58:9a:f3:98:1b:23:ad:5f:cb:fa:e9:c7:32:4c:8f:
         0e:a8:77:85:37:01:96:a6:06:6b:6b:82:5d:73:a4:f2:5d:0e:
         f6:86:13:39:13:f1:00:be:84:39:83:25:f8:aa:7c:79:e7:77:
         e8:5b:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----