Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
File:                     NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer (raw, json)
Hash identifier:          dJ/do535Q7bX9Iy3DPnkMSfFM5224o5YViJ8iYOp/lE=
Subject key identifier:   34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425215318569DEB81C2CD7EA40C6D636F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.195.150.0/23
                          IP: 2001:678:2e0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:53:18:56:9d:eb:81:c2:cd:7e:a4:0c:6d:63:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:7f:4e:5f:be:6c:ed:8a:47:87:2f:f4:7a:
                    45:60:80:95:ae:e9:06:84:c0:45:0b:d0:99:f7:11:
                    98:27:78:ef:2c:4f:4d:ed:f9:06:57:a8:68:7c:d7:
                    e4:cc:7b:42:f6:0a:1e:c2:57:f4:f5:6d:e0:e5:4b:
                    55:f7:c1:02:72:dc:ab:12:b0:0c:66:b1:0f:9d:8d:
                    49:bf:5e:89:49:f0:0c:b4:f1:51:29:82:63:30:81:
                    3b:4b:b5:4e:6c:54:f1:5b:92:ac:79:52:08:d4:43:
                    7f:3f:46:30:9f:e2:5f:58:76:0b:c4:da:95:da:be:
                    6c:43:9a:50:8a:cb:50:1a:d9:f0:c0:6b:29:02:5b:
                    c1:7a:43:b4:8d:04:91:12:91:a0:25:bd:ac:4a:d2:
                    b3:16:d1:7b:fd:dd:e6:0a:0d:42:25:19:a8:9d:1b:
                    4d:cf:3b:14:94:6b:3f:5d:27:4d:1d:d4:80:e8:a0:
                    dc:2a:87:6b:7b:75:2e:96:8b:e8:ee:43:bd:ab:12:
                    bb:09:de:8e:68:f7:b9:07:64:8d:a9:97:ef:6b:a3:
                    b8:27:ad:09:79:a3:ad:4e:0f:04:73:ac:90:31:d7:
                    35:00:30:71:de:b2:06:75:11:bc:bc:14:3d:df:5b:
                    3a:b0:ca:81:44:af:fc:79:4a:e8:c3:c0:11:e3:0e:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.150.0/23
                IPv6:
                  2001:678:2e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:f0:6d:cc:59:b1:3f:d0:03:c3:35:3b:1c:91:25:50:4c:
         07:8c:02:0d:7e:45:d6:c7:03:00:f8:ca:c9:c2:21:e7:5d:38:
         94:fa:df:49:cf:2b:a2:da:47:74:75:d2:f5:db:f2:16:3f:b8:
         5c:5c:78:9a:f1:4e:84:8c:71:e8:e0:f6:81:60:a3:2a:4f:4d:
         cf:f2:e3:26:05:72:84:7f:e4:96:61:7e:22:79:e1:b9:73:89:
         a0:31:66:df:48:9d:c1:0e:69:f3:84:9e:ed:ab:9f:80:6e:07:
         7e:f1:3e:75:ee:ce:2b:d2:d8:5b:43:d7:96:1c:b0:f9:51:08:
         b3:84:e1:18:2c:e5:24:cb:ce:86:d0:7d:27:01:23:67:f0:e8:
         b5:29:87:bf:32:4a:f3:6d:5e:22:4a:ca:53:4c:04:53:db:71:
         8e:da:79:7e:9e:b4:3a:94:2b:d0:f0:76:1f:0d:ea:ac:97:a1:
         69:c5:80:1c:7d:46:05:95:c8:6f:1c:e9:3e:dd:b3:14:2b:8b:
         38:1f:87:c3:42:35:44:36:42:c8:94:31:f0:9c:aa:b0:45:61:
         33:35:96:de:b4:ff:12:98:88:e3:3a:19:aa:43:c6:d1:c4:28:
         f0:1b:88:1d:b3:1f:52:29:2e:cb:6f:b8:21:af:c9:34:cf:7b:
         17:41:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----