Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
File:                     IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer (raw, json)
Hash identifier:          W4ftPRk5VB3dbUXLh/LLqS/73IL7SPntFnXF7umdcv8=
Subject key identifier:   20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F67F68806824F5E5A4AC5C67D56E7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.204.188.0/22
                          IP: 2a0a:fc40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:67:f6:88:06:82:4f:5e:5a:4a:c5:c6:7d:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:32:09:6f:3b:1c:3e:85:8d:dc:aa:99:00:
                    6d:91:f9:7d:bb:e7:7e:28:c3:88:a4:8d:3b:d5:6a:
                    d5:51:d5:17:e7:26:ce:19:76:4d:79:d3:ec:19:56:
                    ad:8a:7e:d7:e4:74:a8:5a:ff:7b:99:a2:69:d5:43:
                    72:94:33:e6:2a:a2:82:de:a8:6e:51:e3:42:38:da:
                    86:17:ca:9a:d5:cb:19:ed:4f:59:3d:70:e6:38:88:
                    1f:e0:2b:ef:ee:b5:d7:7e:47:59:90:ef:23:03:7c:
                    20:f7:d2:02:31:3c:13:2c:ee:ca:6b:9d:93:eb:5c:
                    49:c9:8b:c3:80:9f:bf:24:b1:f1:9f:ae:3d:4e:95:
                    69:d0:52:a4:c7:62:c9:3b:d5:f6:1f:57:48:4c:c1:
                    47:f1:2a:b0:07:b3:2b:f1:0a:21:64:d8:7f:8d:d4:
                    62:d1:eb:5f:22:a3:c0:76:ae:4a:2c:14:1f:01:1a:
                    54:0c:7d:0f:4d:11:3e:c8:59:15:29:d3:44:25:83:
                    06:5b:7d:c2:4f:53:a5:0a:16:88:24:b8:28:e5:f2:
                    3d:2c:6f:46:04:29:cc:12:73:7b:dd:71:db:a9:3b:
                    cb:ed:b6:ac:ab:fa:79:0f:e1:f2:0f:58:60:ea:df:
                    ef:c4:3c:bd:11:94:7a:27:d9:a1:45:a2:15:d6:26:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.188.0/22
                IPv6:
                  2a0a:fc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:96:d8:0d:64:ad:d2:53:43:73:81:01:bb:33:9e:f7:27:
         f4:0a:b7:b5:7a:e7:ca:8f:ec:5a:55:c4:29:10:22:87:a5:39:
         ba:37:1d:1b:85:47:b2:2e:31:5f:91:d8:7d:96:81:31:48:5f:
         9f:0f:07:80:3c:b1:d2:4a:67:e3:7e:a5:04:5d:bb:aa:e3:39:
         4c:c1:d1:3c:74:d8:1e:69:0c:91:0b:8a:fd:b4:ea:7f:46:6e:
         da:7d:62:1e:b8:22:a0:f2:8a:8d:c7:4a:72:51:55:54:45:c0:
         c6:96:82:b8:0f:52:0a:fb:b6:36:89:74:c5:95:84:dd:f4:d8:
         14:78:a5:65:d4:4f:41:92:22:fa:00:d6:93:4e:60:49:cd:b6:
         a9:92:6c:d1:90:c1:6d:cd:ca:a8:3f:bf:71:d8:f4:2f:36:44:
         eb:d0:21:45:11:79:67:f3:c2:ac:fe:fe:fc:68:29:18:37:25:
         8c:38:74:35:4e:00:0a:1d:38:b3:57:c5:4d:50:48:b3:88:0c:
         b8:cd:02:2e:fe:9a:f2:6d:57:4c:f5:9d:1c:fb:ac:13:29:e9:
         e8:61:32:1c:b0:bb:01:e1:19:6f:ed:0e:af:4c:f5:47:d6:8e:
         fb:9c:8f:73:9c:39:63:1f:8e:50:86:99:c9:bf:3b:30:91:ba:
         c7:b6:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----