Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.cer (raw, json)
Hash identifier:          0HqQzLKxNG/OAHHknIKEwAk60PqAwtPLGT5LKe3epgo=
Subject key identifier:   2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C2388AA140C559AA12D533E354ADC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.218.82.0/23
                          IP: 193.218.118.0/23
                          IP: 2a0f:e580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:23:88:aa:14:0c:55:9a:a1:2d:53:3e:35:4a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:1a:fb:e3:47:43:77:63:88:7a:bd:ad:29:
                    7e:a8:c0:8f:a2:ec:9f:81:e6:9f:aa:88:68:61:b1:
                    5c:9e:99:ad:c8:96:f3:0c:c7:50:15:5e:e8:07:4b:
                    f4:20:ea:cc:b0:f2:c5:bc:7d:a3:00:15:50:23:85:
                    3b:d4:44:8c:f6:98:ad:35:7a:86:b9:56:cd:04:85:
                    1c:7c:e2:8b:8f:a7:a3:29:b1:59:2c:02:6f:2c:95:
                    f9:ff:a7:fb:9c:b5:2f:ea:42:95:9d:37:b7:97:4a:
                    23:e2:74:7b:5b:aa:18:e7:0e:cc:90:5f:be:f7:9a:
                    7c:00:c6:32:8e:d1:9e:59:4c:1c:54:7a:21:b2:c9:
                    02:9d:aa:ea:28:2a:be:0a:d6:0c:19:3f:c0:0f:4a:
                    c1:34:34:07:b9:5b:28:34:5e:75:23:5a:f4:d2:ff:
                    d6:19:df:c7:51:cb:94:1a:90:89:c9:58:72:9b:3e:
                    d4:b0:7a:94:dc:94:2d:c1:4b:51:fe:18:9a:93:8e:
                    1d:79:a9:ef:79:df:ce:f9:34:8d:84:39:8a:00:db:
                    d3:e5:e2:13:05:eb:5b:60:e5:f0:57:dc:eb:19:d0:
                    47:18:75:bf:37:ce:22:6f:07:d8:d0:e5:94:0e:65:
                    cb:5b:08:65:25:2e:76:ec:cf:f1:f4:40:0f:dc:91:
                    e4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.82.0/23
                  193.218.118.0/23
                IPv6:
                  2a0f:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:5b:64:8d:09:e5:d4:b6:f9:30:07:d2:83:f8:3a:a5:70:c9:
         21:f2:9f:d3:5b:f1:64:08:d6:28:7a:49:39:af:5f:bd:3b:95:
         83:08:ed:c9:95:0c:58:1f:bd:eb:5d:32:2e:e6:80:e1:f4:3e:
         94:6a:bb:f0:09:d4:fb:76:f9:2b:29:66:a2:d2:1e:4e:46:2c:
         62:ec:26:c8:aa:9f:0e:aa:8d:f3:da:6b:a5:50:cf:89:26:e2:
         07:ab:cc:a8:6f:76:ad:79:c4:92:b9:50:58:28:40:05:0c:28:
         fe:44:e2:0c:a4:d0:3b:ad:ad:d1:19:2a:61:d0:ef:85:96:e5:
         3c:4d:1c:30:e7:98:8d:1f:7d:f7:cf:76:f6:36:9d:c0:88:dd:
         c2:2e:e9:64:17:28:9a:c3:47:d0:45:6c:8a:0d:0c:df:02:b8:
         19:cd:1c:6b:4a:7a:52:ca:02:16:bb:7c:f9:7c:a9:35:a8:05:
         9b:21:37:a6:e9:86:e7:45:90:4e:c8:3c:f0:5a:1e:96:c0:d4:
         6f:13:1b:97:e9:18:1e:f9:4f:ea:44:3e:27:c4:2c:63:4b:83:
         91:29:cc:9b:66:8c:73:a9:5c:49:e4:58:c0:af:c3:ca:02:a2:
         3a:86:69:d8:24:9d:ca:6d:36:7f:cc:2a:19:3c:2c:f3:1b:46:
         31:b2:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----