Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
File:                     SHJHQsP1ThebguavjjPg2dL71NU.cer (raw, json)
Hash identifier:          c5zOSP0QFoPKPBcpnGPK/Zl3SKzo2czFUthAOKFF6Is=
Subject key identifier:   48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9D299025F3398880704EBDEBFDF55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.48.148.0/22
                          IP: 2a01:99e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d2:99:02:5f:33:98:88:07:04:eb:de:bf:df:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:a5:13:bf:ab:63:7f:15:fc:34:d8:e5:c9:
                    c5:3c:61:1a:18:11:64:40:af:d7:32:d8:c8:25:15:
                    c6:77:04:e2:1c:07:24:9f:75:d5:3f:86:b3:ad:1e:
                    b5:80:f4:1e:22:19:15:14:45:e0:77:85:94:bd:72:
                    3f:ca:e6:b3:90:eb:75:ac:57:16:6f:eb:19:5a:e1:
                    fc:e2:05:1c:29:4b:e2:02:1c:7b:3b:09:06:ee:c0:
                    10:90:c5:2d:43:78:02:9b:09:f4:5c:25:ca:dc:92:
                    95:b0:06:b0:13:55:fb:3f:d9:f1:89:9a:b0:f3:5f:
                    a2:88:5d:da:0e:2e:0c:72:57:97:a0:83:ee:9f:d7:
                    36:dc:1e:ca:94:4b:4f:d9:bc:37:1d:39:cd:4e:46:
                    37:e7:bd:3f:62:3c:1d:e7:8b:0d:db:68:da:0b:f0:
                    79:85:7d:0a:98:b2:3b:b9:00:1e:92:fb:f1:45:15:
                    8a:e7:9b:f7:9c:15:a5:77:3f:a3:02:38:90:a0:c4:
                    cd:12:a4:e0:7f:11:3d:55:ef:dd:6a:28:b5:ed:d6:
                    b3:4f:0c:1b:e2:ac:70:0e:c3:e0:c6:93:4b:4e:9f:
                    99:df:d1:2c:20:da:b1:7b:12:30:79:25:ed:f7:3c:
                    f1:7e:14:dd:e2:ee:ef:ab:d8:36:db:0b:40:17:77:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.148.0/22
                IPv6:
                  2a01:99e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:84:98:98:c2:1d:d1:65:be:c7:19:f0:eb:8d:9f:86:b4:
         ad:ab:fb:24:58:77:52:20:48:fe:be:49:3d:f9:32:52:b5:0c:
         e3:93:ab:ae:32:6f:08:a6:7e:02:88:f3:c7:9a:91:6a:09:e0:
         da:c4:a5:92:66:fb:a1:74:ca:d0:56:ad:14:9b:12:74:46:be:
         c6:07:12:70:5e:ab:16:c3:e1:c4:3a:17:82:16:f6:64:93:33:
         9a:71:d1:07:87:91:5e:3d:8a:99:c4:e3:72:7c:0d:9e:df:d7:
         33:a0:66:c2:d6:3a:57:be:94:16:9a:49:d7:8d:55:f5:3c:c2:
         c7:aa:1b:07:e0:7c:5e:bd:74:d1:c6:df:49:90:b9:83:a4:2c:
         09:fe:a8:17:80:8a:ec:4b:88:4c:ec:13:b6:8a:43:77:46:d2:
         b0:86:8a:f6:10:b8:67:3a:68:9d:f8:4a:b1:15:66:a8:b6:c6:
         78:08:60:46:e8:88:c0:19:74:79:cb:ed:e3:eb:ae:af:cd:c3:
         10:d1:7b:f5:54:83:d4:73:ef:ad:a7:eb:69:b3:ab:7b:87:c8:
         1e:ee:45:56:3d:ae:87:13:33:97:b1:83:30:1f:26:41:83:24:
         dd:c2:a0:b4:52:ac:90:86:49:19:70:98:b8:73:9a:d3:d4:18:
         94:0a:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----