Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
File:                     V5NTy0LgxPulyuJTpXaLwfJGW5k.cer (raw, json)
Hash identifier:          6lVJXPahawh5F3HMnfbO2u5qmSuS0g/N1D3VC1UbMmw=
Subject key identifier:   57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143FC13290EC47267AD8DCC426EC7A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.25.12.0/22
                          IP: 2a00:7be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:fc:13:29:0e:c4:72:67:ad:8d:cc:42:6e:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:a1:72:fb:bc:fe:40:8d:1b:7f:bc:d3:b4:
                    37:75:9e:e2:58:59:ab:30:0a:d0:fe:d9:84:fd:0b:
                    d0:7d:23:39:7f:61:92:7b:c0:d9:49:e2:1c:3c:75:
                    7a:91:3e:2b:d4:da:14:18:bb:66:7f:b8:8a:5f:3a:
                    2b:c7:02:53:c1:ba:83:86:d2:1a:e2:ea:36:a0:82:
                    1c:2f:5e:13:6a:70:c1:41:16:87:e4:87:8e:e1:ca:
                    ca:1c:42:47:f8:b8:0c:81:b2:19:95:4c:c3:7f:c9:
                    3d:d5:72:74:20:75:64:f8:eb:4f:1d:99:13:9d:eb:
                    59:24:d6:f0:52:42:db:99:67:dd:13:2f:2a:de:58:
                    1d:07:c3:46:24:8a:6b:76:cf:41:44:8f:90:61:ea:
                    f8:84:3c:06:fd:f3:88:06:a4:dd:4c:29:ea:30:61:
                    a6:69:eb:4d:8a:c3:84:2d:69:7f:69:27:d8:53:90:
                    bc:51:9d:44:a8:2d:6d:74:4d:5c:92:6a:f0:7a:c6:
                    56:e7:31:c7:85:49:da:ef:12:83:10:f6:a8:52:ef:
                    1e:82:ae:c3:60:80:db:32:95:34:25:c0:f0:2b:07:
                    7c:40:f7:d7:4f:2e:af:b1:0b:64:c8:7a:40:22:70:
                    2f:da:77:f1:bb:b2:28:29:94:e1:0e:04:68:4f:d5:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.12.0/22
                IPv6:
                  2a00:7be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:42:d2:e1:91:50:d7:16:03:58:9e:62:f8:ee:bb:db:42:
         7a:bd:c2:32:ca:03:c2:ed:ce:21:11:b3:65:52:15:1c:7c:9e:
         7d:bd:01:24:b1:94:61:ec:12:58:f2:82:9b:35:02:d5:e2:d7:
         00:8f:03:59:04:aa:ea:b8:b3:2a:81:59:35:81:35:77:ec:37:
         6a:95:38:08:07:70:a5:96:b4:f1:47:d5:a3:d3:40:96:39:d9:
         2b:4b:e4:68:33:2d:87:4f:d2:b1:74:98:da:d9:1b:25:cf:b7:
         b3:30:c1:de:c5:34:e9:bb:c3:1b:7c:10:14:f4:cb:e8:6e:da:
         dc:bb:d0:1a:58:80:36:f3:8c:9a:af:68:26:e4:2e:e8:58:d3:
         88:69:1c:50:c7:c8:ec:f8:db:29:d7:eb:bf:48:49:f6:a9:ec:
         db:77:a0:0f:01:db:0b:92:54:26:0f:b1:a2:42:5d:fa:b1:db:
         67:b0:d1:ed:14:7c:e2:bd:f7:6d:05:62:89:11:62:08:68:5f:
         e1:25:f4:96:5e:54:17:0d:08:4e:55:80:8f:70:60:8d:5c:35:
         2b:6a:7d:12:f1:e6:ef:45:06:a9:de:b4:b1:2b:9e:2e:b7:93:
         53:f7:46:2c:c1:a3:e5:64:5f:f1:0d:30:3c:d2:61:15:25:6b:
         f3:87:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----