Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
File:                     Hqemr7IbsUh0L2FV0aOa_I_H55w.cer (raw, json)
Hash identifier:          7T5QVAnRDiypkONT0Z1TRob27LW2SE2n/D6DPFNPhIo=
Subject key identifier:   1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F6F475330EC6BD86AC24BBBDC59B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.26.238.0/24
                          IP: 2a11:75c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6f:47:53:30:ec:6b:d8:6a:c2:4b:bb:dc:59:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:99:88:70:b4:ae:a5:3c:0d:ad:14:12:52:
                    3e:ae:8c:0d:ef:fb:e3:a5:18:2e:07:7e:e6:3b:5c:
                    de:8c:fc:49:52:55:79:44:3a:cc:a8:96:96:8d:27:
                    e0:96:8e:cb:c2:5a:23:1b:59:ff:62:f1:fc:e3:e5:
                    53:5e:cf:fd:98:38:b6:35:27:77:9d:92:73:24:dc:
                    51:21:6c:db:a8:70:c1:c6:dc:af:45:1c:ce:74:17:
                    c1:e7:a3:51:19:cb:f4:61:a6:ad:e0:0e:fd:97:ed:
                    2f:17:95:4e:5a:c4:9e:15:fa:ce:3e:5f:76:56:06:
                    ef:44:fd:9a:55:0d:a8:f8:ae:0a:89:04:1c:bc:04:
                    73:b0:0b:e1:20:b1:b7:f8:39:c7:39:ab:95:3c:dd:
                    1d:c7:ba:79:8f:32:0c:b8:58:3e:5b:a8:f3:3e:f9:
                    e9:78:a6:a3:84:5c:7a:1a:e2:ed:43:03:71:9c:a2:
                    e0:07:1d:db:8b:5d:ce:05:6f:70:b8:b6:4a:46:85:
                    c0:f8:0c:3d:b2:60:92:fb:4d:11:2c:29:c9:65:d4:
                    6b:0b:ee:9a:19:f1:d9:c5:cd:0a:6e:f1:d8:e5:90:
                    ac:b1:f7:1f:e3:76:4d:e8:d4:bd:83:a2:74:9e:32:
                    1b:37:eb:89:ca:84:b8:13:f8:e5:f4:47:e9:3b:23:
                    af:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.238.0/24
                IPv6:
                  2a11:75c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:be:34:26:ec:8d:92:aa:6c:b6:71:97:7d:47:f6:29:cd:
         3a:ec:e3:54:ca:3f:39:3d:10:1b:0b:97:7c:89:38:96:37:28:
         f6:94:51:4e:38:30:19:d8:a1:90:81:59:57:c6:7e:95:15:bf:
         81:4d:f6:6c:eb:44:b4:85:d6:9f:74:ee:9f:c1:f1:03:77:35:
         66:5b:d5:00:2e:b5:0a:46:33:ec:d4:2f:61:cb:fe:4f:e6:96:
         a2:56:d3:7b:fc:c2:ae:5a:d5:1a:ff:25:81:bc:8d:0a:5f:c0:
         38:13:c0:63:4c:9a:ed:78:fa:0e:db:d8:01:7f:b7:95:4e:f6:
         c0:03:e7:dc:c1:4f:ed:c6:21:46:47:4c:a8:2b:c1:06:1d:2a:
         51:37:5f:ab:9b:fb:2b:f6:d2:c3:14:2c:2e:ca:88:b6:b3:fc:
         76:a9:5c:8c:8a:3b:91:e6:f9:c4:39:55:7a:ed:f7:d4:bf:45:
         85:1f:0f:de:0a:2a:56:7c:ee:55:64:7a:fb:78:94:a5:be:5c:
         c3:7c:1e:3f:58:0f:fa:f6:9c:7b:40:8c:24:f5:47:61:1f:83:
         00:42:ba:29:c8:7e:a4:bd:7b:14:b0:53:a1:d0:28:0a:2c:9f:
         9c:40:22:64:71:01:b4:9d:ac:b7:41:1e:57:40:f6:b7:dc:03:
         22:ee:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----