Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer (raw, json)
Hash identifier:          N1wNKwEBhsKH6m82HrcNETS23YWnWD0GbO/hNLY0P38=
Subject key identifier:   23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424453C1A8A3F60A7C02388A75878B1E7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.223.247.0/24
                          IP: 2001:678:1b4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:3c:1a:8a:3f:60:a7:c0:23:88:a7:58:78:b1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:aa:34:5e:f4:e5:d2:96:ea:b8:2f:a2:97:
                    0d:c5:fa:2f:de:17:bb:97:62:af:e1:60:c2:35:72:
                    30:04:e1:ec:91:c7:c8:ee:a5:c2:95:02:78:26:62:
                    14:e6:94:f9:6d:5f:6f:e3:9a:8d:c6:a5:3b:24:e3:
                    39:a5:27:3b:88:c1:22:3c:c7:48:b2:a4:55:5c:e1:
                    8a:33:7a:a5:d7:06:fd:bd:93:9c:e3:db:28:28:ee:
                    25:5f:bf:52:c6:55:f2:16:b5:75:d8:cd:7d:16:dc:
                    b8:43:c8:b0:bf:4c:10:d8:99:c2:cd:04:7d:e7:a0:
                    30:28:4a:1a:d2:c3:39:58:ef:17:33:b0:21:38:36:
                    25:36:45:68:16:39:7a:4a:19:18:c0:fa:2a:c8:7b:
                    52:46:c4:66:42:01:a2:de:a8:81:5b:8c:bd:eb:16:
                    db:26:d9:b5:d1:50:5b:08:66:ca:77:db:a2:45:96:
                    2c:80:62:42:c9:02:96:8c:39:cf:55:2f:c6:72:f5:
                    ef:19:0b:8e:de:df:9b:51:00:0b:4c:32:76:fc:5b:
                    ca:72:52:ec:f7:74:8e:a2:21:0d:1f:df:a5:09:97:
                    85:cf:2e:15:43:5b:c9:ab:24:08:9e:82:7b:7f:05:
                    f5:62:f2:81:2c:54:a3:3d:7a:7f:10:6e:29:13:4a:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.247.0/24
                IPv6:
                  2001:678:1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:14:fb:71:83:52:78:19:ea:9c:01:35:89:b0:8c:b4:07:
         60:5a:7a:1e:24:30:62:b3:a4:3d:4b:46:fd:56:91:2d:b8:b6:
         43:b6:c1:72:29:91:cf:25:2e:fa:2d:86:9e:21:7f:e7:8b:dd:
         de:b5:42:50:a5:1b:a1:25:ff:3f:1a:04:70:36:55:5e:92:ee:
         dd:7c:a7:25:70:ef:0a:d1:54:91:02:af:1c:5c:c3:72:16:f4:
         d5:1b:d6:8f:10:87:33:de:86:97:b0:9b:fe:be:ff:29:35:79:
         7b:0b:33:ce:f0:f4:0f:08:c9:9b:cd:b6:69:64:a3:1a:af:13:
         60:29:4b:1a:a8:ff:5d:e7:a5:f9:b2:ea:b9:f8:38:05:8f:bd:
         30:f6:25:df:f1:61:fc:0a:be:d4:44:0b:ea:bc:73:e7:c2:1b:
         80:98:bb:b5:c8:27:60:3f:99:bc:8f:80:2e:8a:42:f9:01:fc:
         ea:a2:81:22:f6:1c:a6:8c:1b:04:96:94:ec:81:c8:cc:5a:16:
         90:c1:13:26:98:34:f0:bc:ef:d8:68:a7:b2:5e:a0:42:1e:16:
         d5:84:5d:17:87:4a:04:54:2c:26:9f:4c:bc:58:d0:43:81:ff:
         1e:04:1e:f2:8d:59:dc:c7:29:cf:ea:99:22:4d:a8:80:89:71:
         40:ce:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----