Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer (raw, json)
Hash identifier:          VnqzDHDNy9cU2Ni2LWjOeb5Ik5z2rPXGCja6szFv8nI=
Subject key identifier:   57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427473F18E49EF9E38B1F8E38D438BD9F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.9.24.0/22
                          IP: 2a03:46c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:3f:18:e4:9e:f9:e3:8b:1f:8e:38:d4:38:bd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:94:31:a2:42:f0:a9:c2:3e:43:78:a7:6c:
                    d3:c7:e0:82:9b:86:05:f7:4e:48:37:b1:3b:df:29:
                    be:9b:81:82:50:1f:50:da:b1:fd:c9:f3:7d:5d:da:
                    0e:5e:2c:6e:74:49:d5:60:99:19:32:e1:51:57:51:
                    ee:88:e0:0e:11:88:5f:74:5a:23:d2:34:28:e6:f4:
                    80:d2:3e:76:c2:70:96:65:a5:ff:46:23:e0:17:86:
                    46:83:81:c5:c2:35:79:60:d4:3b:f6:f1:95:b5:e5:
                    10:f7:17:9c:2a:e5:23:0c:e0:8e:e9:b8:66:bc:63:
                    72:e6:a7:73:28:8f:51:6c:6a:66:dd:ea:49:3e:5f:
                    ca:46:f8:c9:8f:43:0e:8b:2a:0d:a0:b9:52:f8:21:
                    b9:b7:32:78:7d:e1:5a:dc:a8:48:69:f8:ce:a8:f2:
                    fc:63:41:6b:95:07:8e:04:5b:d2:39:8f:c6:17:8c:
                    76:e4:6c:4c:41:6b:9b:8c:8a:6d:96:ba:a9:07:0a:
                    bc:ae:16:92:d5:00:4b:12:4a:02:b5:a2:18:96:1a:
                    1a:48:f4:4f:24:f7:0a:a1:a6:2b:81:16:19:3e:3d:
                    0c:ff:bb:62:b7:1e:e4:57:30:23:13:3f:ad:5b:f6:
                    1c:20:27:b8:80:94:db:3d:ff:5f:8d:bb:0a:40:8c:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.24.0/22
                IPv6:
                  2a03:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:2f:70:40:de:42:b3:63:6d:38:33:0c:21:23:d0:56:94:
         e4:f5:92:c5:04:b0:77:17:a4:9a:52:48:b4:35:a2:73:81:72:
         04:e3:11:1a:f6:1f:10:6f:ad:ab:78:b9:a9:16:35:0b:f8:33:
         08:8b:48:f7:b9:c4:e2:89:a0:c5:b5:20:45:89:19:b7:08:de:
         83:d7:a2:a2:db:40:52:d1:20:b5:25:04:9d:03:a4:86:16:2d:
         90:26:db:81:d8:79:d2:14:59:f1:1c:e5:b4:dd:80:10:db:69:
         12:96:3c:92:3e:22:35:cf:48:62:80:8e:a0:83:09:a4:cc:ed:
         b8:7d:6e:38:97:2e:d8:b3:9e:27:b9:5f:b1:41:b9:82:91:58:
         d0:10:8c:20:4b:cc:5d:b5:a4:c1:59:5a:62:e4:3b:24:ef:2a:
         86:3b:94:c9:53:84:f6:b1:bf:3f:d0:06:30:93:05:8d:08:d9:
         04:56:57:2e:df:25:b7:bc:47:06:ad:e4:71:aa:60:7f:f8:70:
         af:e8:9f:88:a8:e1:e1:ae:1d:10:42:ae:dc:ef:8d:97:33:20:
         db:87:3e:ee:e6:72:43:b7:a3:a3:4f:c6:82:ea:0c:fe:78:74:
         71:a7:97:be:06:5d:53:69:67:68:0a:3d:3b:d4:43:31:65:06:
         35:62:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----