Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
File:                     WtERZRPCPYeqy_Wxu-45mBx2McE.cer (raw, json)
Hash identifier:          gLKdnkMjdkfAzSaHNouPJ6289vOUNU9kH6RneiclOV0=
Subject key identifier:   5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B37A5E32E6ACEF3022EDC8A05F783E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.6.180.0/22
                          IP: 195.60.204.0/22
                          IP: 2a02:d200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:7a:5e:32:e6:ac:ef:30:22:ed:c8:a0:5f:78:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e5:4f:45:c5:a8:85:38:4e:7a:c0:10:e0:d8:
                    73:b4:2b:ff:62:3f:d3:1e:16:89:17:85:16:b9:31:
                    2c:2b:3f:99:ba:bf:01:38:49:7d:b2:81:b4:15:b7:
                    fb:cf:94:26:4d:58:f1:61:38:59:07:72:9c:3d:74:
                    52:56:ad:30:41:e3:95:c5:1d:30:f5:fa:db:27:73:
                    49:db:94:2b:b1:94:fa:bc:25:c2:40:83:41:50:70:
                    0f:c4:d5:1d:48:81:10:c6:d1:f3:41:72:25:f0:5a:
                    63:7f:31:09:29:3b:ce:95:b3:75:e2:c0:f0:e0:4a:
                    e8:44:a2:f7:6f:da:76:93:8a:e4:89:6c:ef:3d:72:
                    0e:a5:d9:cb:89:d4:f2:df:69:90:67:04:98:f1:11:
                    b6:2b:6e:4e:4d:04:e9:75:d7:1d:56:5d:b0:64:c4:
                    90:0a:ea:85:71:93:97:e9:26:53:40:da:40:3b:af:
                    ea:32:bf:90:cc:9a:14:3e:6a:35:de:5a:59:0a:37:
                    47:36:89:12:66:ab:17:36:03:91:a2:76:6c:99:87:
                    8c:fd:15:cc:0d:39:25:86:d6:8e:2c:21:42:84:49:
                    1c:c6:86:e0:3a:4d:cb:62:17:25:6b:27:ba:06:ba:
                    d7:2b:24:28:65:1b:39:e5:20:89:e1:36:05:ba:97:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.180.0/22
                  195.60.204.0/22
                IPv6:
                  2a02:d200::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:db:79:7b:ba:4f:b0:ab:d8:e7:9d:5b:e9:15:70:7d:65:
         a9:ab:2a:fb:58:f9:b7:0b:45:46:eb:f2:36:ae:c3:f4:4e:36:
         ee:e8:05:70:eb:99:06:70:d0:4a:76:cb:bf:a8:44:37:41:8f:
         9f:59:4d:d4:52:8c:1d:fb:62:37:a3:de:e6:b4:b5:9f:cd:d9:
         18:9a:a7:20:ac:b4:23:e8:47:22:2b:b0:ae:6a:aa:a6:e1:41:
         8b:c3:2d:ee:d7:3a:8a:3f:2e:4a:2d:60:58:2d:d7:d2:ac:5a:
         77:d3:e1:bc:4b:4a:5b:3e:cc:d7:a4:9a:47:07:74:5a:d1:9b:
         7a:2c:74:94:45:b6:8f:0b:55:60:87:be:2f:8b:bf:7f:06:8e:
         f8:cf:cd:b7:34:c4:4d:0f:a2:a4:9a:be:cd:98:83:8b:8b:50:
         66:e3:00:64:df:4b:b5:d6:2e:c5:34:97:5d:9a:40:58:3b:13:
         06:40:63:7a:68:ea:1b:73:3d:2e:2e:f8:3a:68:3f:49:71:04:
         20:dd:e3:53:e7:0a:43:bf:c8:49:f5:ec:11:9f:75:d2:86:c0:
         0f:92:7e:c8:4b:48:30:ec:c7:54:e9:31:b9:fc:70:93:6d:dd:
         6e:9e:87:68:2e:81:50:c0:eb:55:2f:93:ad:c0:9f:5a:57:c6:
         4a:53:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----