Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
File:                     JFf3O_AvdUseYxfumk8-iGN_Gqc.cer (raw, json)
Hash identifier:          sKNLiYH6YOTn1bgKzCjhj42ykQIleBPf5whQBDZFvsY=
Subject key identifier:   24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC23611009F1424A89F6DE9DFAF994
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 203.56.112.0/22
                          IP: 2a14:3e40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:23:61:10:09:f1:42:4a:89:f6:de:9d:fa:f9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:f2:47:eb:61:14:63:fa:80:13:ec:99:6e:
                    46:79:56:d7:6e:9e:eb:2f:e0:e1:20:e3:c5:16:94:
                    e7:e4:c6:74:ed:bb:2d:a3:0f:c3:32:46:90:98:fc:
                    64:c6:3d:77:33:bf:4f:5c:48:44:f9:54:fd:24:a7:
                    ea:ee:9d:77:a5:00:4c:cd:c6:93:b3:b9:d7:f9:0f:
                    61:cb:97:1b:f6:13:69:ff:2f:44:d5:5e:d1:3c:34:
                    e6:22:d2:6a:c1:53:d2:4a:e5:07:5e:fe:d4:d8:a2:
                    94:3b:ef:46:4b:6b:63:0b:37:42:c8:8e:3f:07:c9:
                    d8:78:85:80:ee:f5:79:f2:cc:f9:fc:21:03:86:55:
                    bb:34:ca:4b:21:83:fd:fa:b0:0e:c6:ef:b1:ed:19:
                    0a:99:1f:5f:55:6d:9a:ea:e6:97:a5:a1:1f:00:f2:
                    53:8a:7b:f0:47:14:20:0a:3e:ed:4b:4a:de:e6:b4:
                    0b:90:90:50:4a:bc:3a:cb:47:70:8d:78:dc:da:a4:
                    3e:72:0f:19:a9:02:26:92:4e:92:f9:a6:9b:7d:87:
                    1f:1a:10:4e:5e:03:57:3b:f5:17:8f:f9:d2:1d:d3:
                    d6:c9:b3:78:d5:0e:5c:cb:0a:5f:67:82:69:4a:4c:
                    a5:1b:6c:48:ae:77:2e:e5:52:98:c3:a8:d5:11:43:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.112.0/22
                IPv6:
                  2a14:3e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:c5:81:be:71:d1:16:df:cc:22:1c:f0:78:46:69:8e:2f:
         b4:88:a2:b6:1e:c0:d5:49:35:84:37:36:a4:4c:8f:be:ed:b6:
         41:3d:cd:0b:09:44:ff:7a:6d:15:6d:44:53:e9:79:c3:ee:82:
         73:d0:05:0c:3a:ef:bd:0c:83:dc:1d:49:57:78:a7:60:f9:7d:
         13:1f:bf:1a:d9:b2:a5:a0:c9:5e:9b:bd:e8:3c:a9:eb:c0:4d:
         79:49:24:69:2b:cf:24:6b:86:7d:e7:47:75:26:76:b2:95:00:
         1a:79:b7:69:25:d8:0c:ed:ac:ad:c6:3c:5a:26:83:11:18:18:
         ff:b9:98:71:a7:87:11:d4:b3:06:85:54:7f:9b:b1:92:39:0c:
         1f:bd:72:4c:08:a8:c9:b3:c2:df:e1:8f:cb:5f:07:ec:f7:d5:
         10:22:1c:1b:f7:a5:77:a9:a4:3b:d5:b7:2a:d9:02:7e:19:33:
         67:b7:79:8b:b9:e3:b5:da:14:72:5b:bd:9d:37:d4:04:ed:17:
         16:70:c1:b6:31:9f:df:9d:68:f6:a3:9c:54:3f:9f:77:eb:7a:
         9b:40:2b:5f:a3:da:f3:cb:d3:bc:59:8c:b5:e8:e1:18:6e:be:
         a3:29:96:a7:81:a0:63:20:10:17:cf:86:c5:23:bd:46:7e:6d:
         a0:0e:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----