Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
File:                     Mu0BRXesc_-H7yDKb3V5XkyTf84.cer (raw, json)
Hash identifier:          73//zMHikiuiPmSm4PHtcAJtUrn7Zlf46OHQmzQ5z8Y=
Subject key identifier:   32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823FAAF6835C6698ED73B91DA167D20
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.90.64.0/22
                          IP: 2a0c:ab80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:fa:af:68:35:c6:69:8e:d7:3b:91:da:16:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:d1:d0:90:0f:91:d9:1c:9b:e8:5a:18:59:
                    ac:e7:97:4b:ff:77:67:ea:b6:6c:7d:c7:f2:d9:2e:
                    b4:0f:b0:af:f5:81:1d:a5:12:54:9a:71:c0:24:f8:
                    9a:a2:87:e7:a4:22:a2:41:09:3c:7b:9a:14:d2:a8:
                    ae:85:a1:56:6a:ae:d4:f6:9a:32:dd:c1:07:dd:61:
                    26:39:11:83:fe:4e:96:0f:39:86:47:3b:40:b9:23:
                    a5:e8:37:46:0a:61:76:10:32:93:27:37:8c:4f:27:
                    d3:9f:0f:fc:93:c7:08:21:26:c6:3a:71:d7:a5:29:
                    ed:b1:89:0a:14:81:38:dc:9c:cf:45:e6:c8:fb:25:
                    01:06:8f:bd:8b:59:4a:e3:39:2b:8f:77:af:36:5a:
                    1b:03:d0:e5:01:9e:c6:fd:c3:d2:c6:13:fc:80:d0:
                    ba:fc:be:52:c5:b8:10:df:c6:c0:4a:e3:37:0b:82:
                    46:79:ff:f5:00:c2:79:bf:90:c7:2d:29:72:dc:46:
                    34:c8:f3:1f:dc:fc:53:ad:e8:4a:22:0c:87:3f:0a:
                    24:e7:aa:f7:de:b2:ae:de:ea:de:90:40:64:f4:fa:
                    9a:61:d8:8d:3b:59:3c:e2:a6:fd:03:d1:50:34:76:
                    e6:2b:37:5b:82:2a:e8:3b:49:79:51:92:c8:76:6c:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.64.0/22
                IPv6:
                  2a0c:ab80::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:d6:fc:8b:5a:78:0e:06:ef:fb:4d:fb:6e:c0:70:51:08:
         59:35:13:f3:c8:f5:52:4d:92:db:49:f6:9d:ef:be:96:50:4f:
         8e:10:b5:dd:f1:ec:56:7c:20:c0:cb:c8:96:c2:f7:27:10:e8:
         d6:d9:4e:d2:d1:3e:55:65:2b:32:0a:1b:1c:82:06:43:14:57:
         a6:dc:5f:ff:94:9f:86:c7:1c:53:f7:9e:18:21:73:ce:19:64:
         12:28:ff:c5:3a:ec:3b:1a:aa:88:5a:fc:ee:ec:97:69:49:24:
         9b:1d:6f:70:5a:2c:0a:30:51:a8:ed:8e:57:38:6d:3c:f8:13:
         80:00:75:f0:4e:16:3d:ba:1f:43:cd:57:98:51:bb:ca:36:67:
         fb:dd:39:92:cb:c8:d4:2c:f5:06:c6:dd:4f:35:a5:e0:d3:7a:
         78:53:f9:f1:83:bb:89:0b:14:6d:4e:45:ee:53:2d:df:3e:fe:
         c5:36:19:94:aa:68:f1:7f:e5:9c:85:54:16:9e:a7:d9:97:fa:
         89:ae:eb:6e:c3:0c:b8:d3:eb:22:20:b2:ed:cd:31:27:02:bd:
         0e:b6:81:7f:ec:ed:53:75:2b:00:2e:41:98:22:a0:59:52:4d:
         47:d7:f5:8a:81:07:ed:36:7c:37:61:d5:4d:9d:5c:07:42:83:
         6e:ee:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----