Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
File:                     WNh9kviQwtNllt7KHLCwu4sHoSI.cer (raw, json)
Hash identifier:          a8wZT51mnbKq7NCt+eDvMf2+M4y07MWmvqK7uG4XIgs=
Subject key identifier:   58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01959632D21F0208CA72ED04B8E9719C5477
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 14 Mar 2025 19:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 80.255.32.0/19
                          IP: 82.206.128.0/17
                          IP: 213.185.96.0/19
                          IP: 2a00:fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:96:32:d2:1f:02:08:ca:72:ed:04:b8:e9:71:9c:54:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 14 19:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:78:3c:ca:d5:6f:a1:bb:a9:a2:13:72:71:
                    2b:80:71:0d:16:bb:94:00:56:b3:9d:57:f2:53:81:
                    06:9b:53:12:c2:ca:98:21:1f:98:df:87:9c:19:73:
                    bb:f0:22:fb:0c:d8:dc:6e:bd:e2:f4:0a:dc:df:96:
                    1b:a4:c5:68:4e:d6:81:38:10:a2:13:2b:10:67:c4:
                    8a:82:78:28:06:35:db:42:68:7b:75:5e:bf:c6:be:
                    a9:37:66:4a:37:a7:c2:80:7c:79:b9:bd:bb:ba:4d:
                    5c:88:7e:5a:03:58:fb:5f:3b:aa:ab:dd:3d:4f:f8:
                    60:d8:59:35:07:90:18:98:08:94:48:0a:32:20:a2:
                    7e:ac:d0:92:68:4a:12:a7:d9:83:5a:d8:53:10:da:
                    6f:73:19:0e:4a:fe:3e:34:68:bb:0f:6c:f8:b9:0b:
                    dc:d2:1b:6b:eb:98:71:7d:7a:a9:85:f9:2b:7f:23:
                    8b:20:f7:76:be:5c:21:ee:57:89:ab:04:68:13:55:
                    86:e0:cd:07:85:83:0f:26:e4:07:9e:ab:1b:f2:e2:
                    af:15:ef:d4:70:f9:be:fc:dd:6f:b3:53:07:52:83:
                    ae:46:b5:db:0c:91:19:10:8f:3f:79:5d:f2:ca:73:
                    73:65:69:44:1f:f5:72:b6:0a:d0:a6:26:7d:4d:35:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.255.32.0/19
                  82.206.128.0/17
                  213.185.96.0/19
                IPv6:
                  2a00:fd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:a5:e5:41:6c:cd:30:92:6c:57:1c:25:c7:67:94:07:73:
         38:3e:c8:12:1a:b3:09:40:b6:98:52:8c:1f:ea:6a:49:47:b8:
         0e:86:12:3f:d4:9b:79:2b:40:1b:c1:19:67:85:b2:5f:92:85:
         97:e0:ae:9f:7c:f7:36:e3:e8:a8:00:71:c2:0c:91:34:03:c2:
         e2:1a:44:ff:42:da:ab:f3:dc:dd:68:8b:e4:0f:cc:13:1b:13:
         c2:67:42:40:ce:f0:52:53:ea:27:b7:5d:3a:99:f2:e2:db:93:
         52:84:03:fc:27:15:ff:06:b4:3f:ca:b6:86:14:5a:49:f2:30:
         4b:34:bf:8d:d9:9f:e7:95:ed:bc:51:03:ea:ca:b5:c2:41:88:
         66:23:78:8d:61:f6:a4:84:5d:df:40:99:6b:ac:17:7e:8f:d7:
         61:04:de:06:60:ff:a3:3e:0b:f5:3c:cc:83:22:db:bb:c9:7f:
         a1:d3:b1:86:a3:52:40:38:22:15:80:55:a2:aa:d1:29:db:69:
         2a:2e:99:26:34:41:16:84:e7:c8:09:8e:c1:b3:cd:fc:df:08:
         3a:48:3a:7c:6e:76:ec:f3:b9:64:8f:bb:1a:6e:3a:03:f8:3d:
         18:b5:6d:d6:b9:3e:f7:73:8a:ad:8c:63:31:26:97:a3:a8:e0:
         3f:df:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----