Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
File:                     KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer (raw, json)
Hash identifier:          0sY660Te7GtTx4JNN94bxd0+ps27riGWae4v5FWGXs4=
Subject key identifier:   28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D607D70E49E604638117AD8CFDAC06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.237.117.0/24
                          IP: 2001:67c:28e0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:07:d7:0e:49:e6:04:63:81:17:ad:8c:fd:ac:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:65:c3:ce:73:1f:ee:a6:cc:0b:24:21:48:
                    7f:79:11:16:09:07:d8:f6:f7:c6:70:ce:3b:95:27:
                    2c:cf:df:16:75:06:0b:18:e6:9c:da:dc:fd:13:41:
                    f9:0d:08:07:31:1f:91:c0:45:ec:bb:fd:dd:1c:e6:
                    76:a7:a2:8b:05:9b:e4:9d:65:07:7b:f5:12:2c:ef:
                    f3:df:c3:f1:e1:a4:99:b9:ca:26:3f:44:48:c8:fe:
                    5d:62:19:c1:a0:0b:27:40:3d:72:ba:cf:1d:cc:9f:
                    e7:61:9e:2f:c7:9a:86:b8:5e:4d:65:04:07:bb:a1:
                    00:58:08:15:98:5b:6f:f1:a5:39:78:e8:b1:63:8b:
                    ef:ef:3e:43:21:c5:dd:49:ad:e8:77:32:0a:a1:1e:
                    c2:39:bf:55:7f:8c:fd:5c:48:7c:0f:31:28:66:9c:
                    3b:59:bd:2b:4b:31:9e:94:82:f8:46:43:c1:c3:5b:
                    6a:48:f9:c4:ea:d1:25:8f:a2:c7:f7:28:5d:55:7c:
                    6f:de:30:b2:f0:c6:29:eb:c6:e9:0a:ed:af:4e:ed:
                    4e:b7:cd:7d:95:d5:17:f0:fc:87:fe:92:90:6f:89:
                    dd:17:da:2c:53:08:d4:00:bc:28:78:ad:3f:18:25:
                    e5:2a:0c:db:58:df:eb:1d:32:05:b4:8e:41:53:53:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.117.0/24
                IPv6:
                  2001:67c:28e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:71:4c:cb:8f:39:26:2c:18:3f:a8:83:fe:bc:cc:d9:45:ae:
         5e:13:ac:6a:44:7d:3b:fa:62:5a:6c:48:c3:0d:66:ac:a1:b5:
         83:a7:65:bc:93:ef:7c:75:16:b6:cd:e8:b0:43:1c:1f:16:7a:
         01:1a:e1:37:d8:41:d2:10:78:07:5b:49:c7:e7:6c:75:26:ce:
         94:4a:91:49:3f:56:a0:7f:00:31:6d:8b:c0:1e:a2:45:2c:4f:
         83:e4:5c:b4:9a:70:04:3b:66:b6:7b:e0:aa:31:4f:07:6e:7f:
         32:c3:86:da:03:02:b6:df:24:94:68:cc:6c:76:6c:92:3b:a3:
         f4:8b:c1:fc:13:74:1c:41:f9:da:33:24:d4:08:88:d6:ff:2c:
         d6:e3:40:fa:a9:da:78:1f:e6:cf:cd:65:82:e1:6e:16:fe:b5:
         62:99:e2:30:9a:e3:ea:88:50:ef:e9:86:b7:68:d2:31:e4:6c:
         b7:f9:51:dd:41:2f:0b:95:ef:e8:71:b5:a3:9e:c4:77:46:69:
         79:d6:0f:31:62:99:a6:17:dd:8f:89:28:a9:14:f7:5c:c0:c3:
         d0:e6:64:0b:f4:68:93:30:42:7c:8a:d3:9a:45:5d:dc:8e:da:
         10:00:3c:79:1e:fa:b0:e9:47:c7:04:3d:e3:c0:72:cd:11:2b:
         44:66:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----