Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
File:                     MHoDlQLUamuZCREM4qsTlod70I4.cer (raw, json)
Hash identifier:          UgLKlIbFxAmZSyThBDhf3Y4R7x9eRLg8gfKV+BOPURc=
Subject key identifier:   30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B4A1FA79E813DA947AE06BE2B46080
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.15.143.0/24
                          IP: 194.45.144.0 -- 194.45.153.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:a1:fa:79:e8:13:da:94:7a:e0:6b:e2:b4:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=307a039502d46a6b9909110ce2ab1396877bd08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:bf:ad:9c:a6:6d:fe:a1:d2:92:c0:b8:f4:
                    aa:26:cb:9f:24:e7:af:a2:e9:3b:a5:42:74:96:2f:
                    7d:1f:b1:39:db:a0:80:5a:43:a3:75:26:a8:ea:41:
                    70:94:8e:e0:6f:ea:f1:d9:a1:18:63:f9:65:96:08:
                    04:2e:80:12:ff:62:86:94:55:0d:1f:67:09:3b:e2:
                    78:ec:96:de:f9:2f:02:82:19:b6:fa:58:3f:75:e8:
                    6b:2b:4c:70:8e:e1:64:37:99:d6:83:9a:45:1b:01:
                    89:12:e1:a0:51:03:0d:60:dd:b1:50:78:b4:38:01:
                    d3:e4:3b:83:1c:91:e6:c7:bc:1c:3d:02:6a:21:3d:
                    75:25:a1:86:3d:ac:80:a8:c2:15:63:18:42:4b:ea:
                    ce:cc:11:46:bf:09:da:a6:ba:4a:7c:52:7e:29:be:
                    75:0a:d3:32:dd:a6:24:68:aa:6f:e1:da:d5:29:06:
                    c9:58:1d:c1:85:da:75:c3:06:72:f3:47:ef:a4:7f:
                    ae:37:a3:bc:eb:01:c9:cf:e1:6d:98:c3:03:a0:13:
                    31:40:05:7f:06:c9:25:c7:89:41:7c:6f:e4:39:e2:
                    81:b5:08:b0:5e:ae:e9:31:b6:8d:a0:9a:a7:36:db:
                    6f:7b:f3:9e:4b:3e:b6:b2:86:dd:b7:4f:d4:07:ca:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.143.0/24
                  194.45.144.0-194.45.153.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:53:bf:65:3e:97:34:99:12:52:82:87:7b:c0:0e:12:1e:
         53:2c:85:97:8f:b6:89:dd:e9:77:58:35:f4:91:ad:92:3b:1f:
         50:f3:8d:49:6c:55:27:af:74:88:51:1b:83:98:b7:cc:36:64:
         7f:de:fc:54:2a:b0:be:c7:a4:50:80:e1:9c:a4:54:05:13:36:
         0d:a8:6a:67:b8:b6:a2:29:43:3c:d5:c9:b5:69:9f:6d:1e:4b:
         22:fd:4c:41:55:3c:97:2a:34:be:09:f7:8d:62:85:e5:ed:bb:
         c2:92:71:5b:09:c3:ce:a7:5d:cd:c5:41:5f:70:69:9c:4e:40:
         a0:27:4d:64:42:c1:96:f1:53:99:29:8d:ea:fa:7d:8e:a7:ee:
         34:11:5a:fc:87:66:a4:2b:0e:dc:f7:69:e1:24:27:1d:d6:84:
         95:f5:e6:d5:67:46:d1:d8:23:1d:5f:a0:0e:34:65:aa:be:c3:
         4b:57:5a:69:f2:8a:58:a6:68:1f:be:45:eb:cb:16:fd:5e:06:
         89:07:17:6a:18:b3:57:fc:3a:9b:fa:79:ef:9c:99:14:48:66:
         df:88:70:3f:39:bd:2f:4e:7d:cd:6c:e8:b8:9a:7d:74:75:d7:
         99:b7:81:2c:16:d7:5f:94:b9:e5:33:d0:b8:43:93:1d:7c:07:
         b0:ff:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----