Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.cer (raw, json)
Hash identifier:          pEpMprpsY8XjzyZgb6/wfvJMqbVGKo/xyOTC1k1iBJA=
Subject key identifier:   33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3FABD7B4667500BF12164FF4C46E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.91.188.0/22
                          IP: 2a05:ed00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:fa:bd:7b:46:67:50:0b:f1:21:64:ff:4c:46:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:03:7a:db:f9:6f:a9:02:a5:c1:f2:46:d9:
                    6e:b0:ed:be:fa:d9:12:25:58:8d:26:ff:18:03:81:
                    61:6a:29:a1:74:00:3a:26:4f:28:f0:74:c5:6b:d3:
                    da:cc:aa:e3:e9:6a:9d:a0:ac:4a:45:f0:a8:09:3c:
                    3e:9e:cf:3a:1a:b2:7a:eb:4a:98:1e:50:4d:96:e8:
                    63:13:cb:6f:e9:cf:93:1d:f6:f0:85:72:ec:16:6e:
                    b2:6b:b0:8d:8f:27:b7:e6:72:14:24:e4:81:ec:9c:
                    e6:42:ef:4c:57:de:27:3f:98:b8:d4:5d:e1:62:0a:
                    9a:e1:3f:e6:2e:fb:bf:e3:01:4e:90:40:ef:6b:c9:
                    50:0f:5a:c7:e2:46:56:02:a0:9b:d4:fa:52:76:b4:
                    c8:d2:4b:84:43:cc:3a:be:06:8b:14:ba:de:82:3d:
                    94:e2:92:44:c6:04:1d:48:37:4e:53:95:a0:d9:7a:
                    a0:cf:93:84:4d:31:89:d0:0f:a1:cd:db:a7:d5:95:
                    56:6a:a6:bf:46:8a:b2:7f:8e:cc:d1:41:6f:e4:5f:
                    59:5b:14:46:51:b3:f5:c6:a0:bd:08:ca:d0:c2:68:
                    a1:f0:33:c3:64:91:a5:c6:41:be:56:98:58:21:4f:
                    80:b5:3e:79:7b:d4:b5:7b:6f:75:5b:f4:41:ae:8f:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.188.0/22
                IPv6:
                  2a05:ed00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:13:1e:e4:96:e7:33:9f:1e:45:e2:1d:3f:ac:40:fb:9d:
         b4:62:5f:ff:dd:c9:2c:ab:67:49:f6:2f:64:a7:ae:19:49:f9:
         08:5a:59:52:22:ea:89:cd:f6:8e:7f:7f:76:40:66:88:d5:12:
         60:d8:d5:d7:e6:a0:11:fa:87:3c:80:57:60:fb:4b:20:99:a8:
         30:04:6d:0e:2f:ae:90:a3:f5:cc:f4:3e:35:8b:d9:a4:4f:fe:
         d2:3b:58:61:79:cb:93:5a:92:3c:c0:b9:11:11:7d:8e:6e:b3:
         73:4f:80:ba:1b:e3:98:b1:89:08:c2:07:f6:d5:f5:92:12:6a:
         31:67:3e:cb:0c:01:49:03:9a:ca:93:7f:70:95:86:56:a2:8d:
         a3:c6:90:bf:fc:86:0b:3c:64:97:5a:a9:b7:5c:44:91:0f:d6:
         a6:ed:e1:15:41:92:6d:8a:c4:1e:70:9c:29:58:82:60:db:8a:
         78:25:39:5b:b2:fc:50:55:0c:05:e2:77:b5:43:f5:e7:cc:70:
         26:8f:49:67:90:20:d2:9e:de:a8:2c:2f:87:e4:6d:f3:f7:24:
         41:36:7b:7f:7e:5c:df:55:50:7a:cd:f9:a5:92:11:01:ae:55:
         b8:b1:92:e0:8c:55:8e:b5:a6:24:49:a2:e4:be:50:8e:a6:8c:
         1e:3d:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----