Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.cer (raw, json)
Hash identifier:          VjR/anF2ac9oRE7VFiTuxAfATvWVs0ynQoU0EvVSehE=
Subject key identifier:   45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B579C7876D8794C0A952B428636455
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.193.224.0/22
                          IP: 2a14:5300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:79:c7:87:6d:87:94:c0:a9:52:b4:28:63:64:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:ea:91:ea:5d:03:8c:2f:e6:a8:19:1c:1d:
                    72:39:20:12:b4:b2:93:81:98:0e:8c:cb:69:cc:5d:
                    f4:06:d9:76:8c:ad:30:d0:dc:52:53:c0:49:46:24:
                    12:7d:f5:3a:6c:62:57:72:40:4e:5f:b9:c7:68:86:
                    29:c8:a2:bb:87:03:6b:a3:7c:e3:2d:2c:10:08:07:
                    22:b5:2c:0e:e3:59:8c:e0:dc:05:d9:83:47:a8:90:
                    42:92:7b:23:7e:a2:30:1b:4d:f2:67:35:e3:9e:79:
                    29:8a:b9:f9:68:4f:e4:5a:6c:f2:2d:1a:2c:b6:75:
                    98:e8:62:e0:63:1e:79:69:91:c6:7c:b8:ec:63:34:
                    8c:49:ee:e4:34:81:97:25:56:49:84:99:0f:03:b0:
                    f2:d1:ed:54:7d:bb:34:21:de:87:a7:d0:3b:3c:bf:
                    b2:02:c9:ff:d4:42:49:14:28:b3:e4:e4:88:26:f5:
                    20:3b:c3:eb:33:87:32:09:d3:3c:a4:9b:c6:97:8e:
                    74:28:e3:a2:f2:f8:5f:54:5c:56:05:b7:7b:72:d7:
                    08:65:80:df:51:8d:51:22:1e:d8:b5:7e:04:26:9e:
                    9e:38:e8:2f:a9:39:e1:28:c9:17:13:61:80:ec:31:
                    a0:8c:80:d8:78:5a:88:8e:60:f1:bc:ce:c9:db:ac:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.224.0/22
                IPv6:
                  2a14:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:19:e1:b3:5b:38:bf:c8:6a:a5:3c:17:d0:91:c6:8c:e5:cf:
         ab:24:89:9c:ce:29:14:e0:47:8d:12:6b:ed:27:b5:32:c7:58:
         df:ae:f7:9d:bc:c7:73:84:69:c8:ee:03:54:e9:b3:1e:52:91:
         11:35:db:06:07:44:37:00:d0:26:56:44:4a:a9:34:f1:23:e1:
         23:aa:d0:d4:f3:05:1e:76:42:10:5a:2c:66:6c:a0:cb:89:89:
         cd:94:68:b7:fb:b0:51:ef:75:d0:5b:78:7e:cd:aa:d0:66:55:
         b7:57:9d:9f:85:dc:0f:47:2f:cc:de:f4:be:da:c7:bb:8e:05:
         57:13:ad:d9:ee:9a:d2:1b:11:21:13:16:f9:7d:c3:90:2b:37:
         f2:ef:5b:4d:0c:ab:b2:10:7f:5c:56:f0:d7:11:2d:aa:93:6b:
         41:5b:71:72:7d:2a:a4:e4:3e:e8:31:3c:22:b6:43:87:44:63:
         c7:f5:5b:9c:3b:8b:c4:0b:d2:c8:8b:e5:b4:bb:7e:70:3c:bf:
         6b:a5:aa:db:a7:ca:d3:41:83:8d:96:8b:b9:5c:2c:e1:e1:e2:
         9f:d7:f1:56:78:52:13:e2:2b:24:14:fa:e0:79:bd:f4:37:9d:
         4a:c1:da:b7:36:8a:c7:82:69:2b:4f:d5:c7:4f:82:e8:f6:2d:
         52:4f:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----