Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
File:                     MN0LcIUOH5iVZY7avii52NnqAXw.cer (raw, json)
Hash identifier:          YyXtz6mr7EITbaQNK7RxbE0mlYaPeaUl8EUHD3HN0xw=
Subject key identifier:   30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425217BA9794FDF912F2F64B6D2454A7F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 141.37.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:7b:a9:79:4f:df:91:2f:2f:64:b6:d2:45:4a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:05:aa:66:b8:cc:d9:4d:5c:0d:c7:0a:d1:
                    f5:b8:d9:65:f9:8b:1f:54:3f:c2:7f:f3:71:a3:86:
                    f3:44:5b:4a:7d:75:dd:c7:4c:75:56:22:59:63:97:
                    6c:ee:54:13:52:74:70:48:87:66:69:47:83:46:22:
                    02:a2:7f:a8:33:0a:2e:10:6b:1e:1e:bd:ab:0d:ef:
                    8d:d6:5d:7a:61:6f:f9:75:4c:2b:16:31:79:93:ec:
                    da:af:a1:c8:fe:e0:f4:58:ff:3a:84:88:c5:c0:e7:
                    7c:fb:ac:45:92:1d:62:f3:f1:d4:7f:bf:a8:89:f1:
                    2b:3b:3e:86:f4:74:19:9a:f6:52:7f:3c:b7:02:18:
                    e5:de:aa:f7:5b:a3:33:2f:2a:17:2d:6b:18:69:04:
                    21:3f:1b:a8:eb:4e:a4:bb:28:66:5d:0b:38:46:cd:
                    b5:cf:d8:d3:14:21:e6:48:17:b4:89:d9:b8:eb:20:
                    01:47:5d:83:13:ab:1b:9d:b4:81:76:d6:87:f7:6f:
                    a3:58:e4:1d:2b:31:4a:ad:43:ad:d2:53:90:d6:3d:
                    31:21:7d:31:36:9b:1a:59:18:eb:30:89:b1:3c:14:
                    51:3a:40:63:89:82:dc:57:ad:b9:20:56:88:7d:3f:
                    a9:9f:84:a8:de:03:32:88:59:b5:08:b8:a2:74:f7:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:d3:08:6b:28:e6:39:29:37:d8:7d:95:27:40:c3:89:38:
         e1:1f:96:4d:2f:6b:5d:9c:1a:29:6d:a8:95:2a:c1:f9:ef:13:
         e2:e5:48:cd:11:66:95:93:af:d3:df:65:1e:b2:3f:e4:e5:3c:
         6a:0d:36:97:1f:05:64:ce:93:c5:77:a1:ce:d4:62:b7:0e:2b:
         07:dc:fd:8f:b5:3e:a4:4b:10:a1:77:28:d0:e1:42:57:45:54:
         8c:36:40:e6:de:ef:fb:92:83:6a:d4:d3:72:13:82:d7:ed:7b:
         e1:28:ca:01:bb:46:a9:12:5c:68:4e:77:7d:38:e9:bc:91:17:
         58:48:44:84:01:1b:0b:f6:f9:4e:ee:18:44:5a:dd:cc:fb:eb:
         dd:5b:6a:c8:7f:bc:e7:ab:ee:4d:95:24:62:80:d9:a7:2c:19:
         9b:51:d1:82:ba:ce:56:11:53:27:49:d2:ca:1f:18:62:bc:26:
         fe:66:27:d8:f5:27:e8:f4:e0:8a:21:38:ad:b4:51:26:2c:7f:
         5c:b8:62:b7:d3:b0:79:b3:82:52:e5:3f:0d:ca:ed:a1:85:58:
         3f:db:5f:77:29:cc:d2:19:87:70:e6:54:5c:07:58:00:ec:c8:
         2d:83:6a:97:9f:91:82:8e:e5:0b:bf:ae:01:8f:4f:25:6e:38:
         53:23:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----