Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
File:                     anosbb5RGgdHJDepoPtPzNEr6J8.cer (raw, json)
Hash identifier:          hsVYvBU9BG4G700r+993PCWUyiBqQKScTtI/iLfVZ+Y=
Subject key identifier:   6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BB4FCFEA78B5365AB77436F3BA42B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.218.36.0/22
                          IP: 2a0b:d240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:b4:fc:fe:a7:8b:53:65:ab:77:43:6f:3b:a4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:24:6d:d0:11:4a:81:f2:f6:ff:70:3a:52:
                    4e:71:0d:24:c2:b5:10:58:a4:80:04:e2:f1:7f:76:
                    b7:db:11:64:35:93:10:79:35:5c:79:bb:a6:ad:81:
                    39:09:e0:9b:47:82:74:21:d1:08:c5:94:8b:d2:8e:
                    ac:24:37:b1:6b:cb:e0:06:ab:58:b4:86:3b:97:7a:
                    00:22:25:53:b1:7b:a0:07:c7:ab:ab:23:cb:2c:e6:
                    9a:46:d4:25:0f:f8:af:b8:55:eb:87:9a:6e:90:c9:
                    a5:bd:13:40:3a:63:26:12:2e:12:05:b7:a5:41:e3:
                    ac:35:7a:44:99:94:2d:5d:da:f3:99:d7:05:ca:74:
                    f4:8f:f3:a6:20:72:bd:da:d8:e6:c3:9b:a0:a2:81:
                    ef:45:0b:65:5e:99:4c:78:8b:c2:a0:e9:18:2d:2e:
                    eb:81:20:35:82:da:b9:25:ab:9a:ae:64:20:93:5f:
                    70:aa:d0:d2:30:bc:a7:46:10:87:28:ca:51:9b:99:
                    b9:f4:13:df:2e:d2:33:46:c5:56:39:ef:6c:9b:4c:
                    e9:f6:8b:ab:cd:41:31:3a:fe:9e:57:a7:25:7f:69:
                    b4:f7:d2:e1:09:ff:c5:91:3d:23:8c:91:b8:40:f2:
                    c3:f3:b4:6d:3f:52:a5:0e:68:08:fb:9b:c4:9d:a3:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.36.0/22
                IPv6:
                  2a0b:d240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:b3:d8:6f:a1:38:85:29:29:35:89:0a:1c:f7:d9:ce:92:
         72:ad:dd:af:50:85:56:1c:ec:a0:41:ae:a0:85:08:b9:62:79:
         27:ec:a1:d1:0c:62:93:f7:0c:6c:0d:ca:0a:bb:0e:01:03:65:
         de:fa:e6:e7:f5:c2:09:e3:d2:65:50:d7:4f:b5:a1:5e:32:c1:
         80:0f:77:43:6e:27:60:d3:20:7c:33:41:b6:65:cb:47:04:46:
         21:1f:5c:bf:e1:ba:5a:3f:0c:03:6e:00:d2:60:cc:59:86:fb:
         81:f2:53:88:4d:09:ee:21:7d:a5:24:7d:20:04:7c:cb:a4:41:
         13:7c:90:44:a9:34:0f:3d:d6:36:18:d2:0b:0d:30:fe:ce:34:
         21:74:02:6e:2e:b7:95:ac:1a:50:da:c0:93:79:42:c9:4f:da:
         75:a8:65:4b:5a:dd:97:04:9b:0e:28:c2:e5:28:70:cc:9c:4b:
         ad:32:a1:4e:65:03:c3:37:2d:5e:2b:1f:1d:bf:f4:4b:30:9c:
         e4:21:21:a4:8e:c2:ad:a6:1e:a5:5f:00:7a:44:6a:88:22:fb:
         76:54:08:b7:0b:57:ff:c9:65:55:eb:1d:ab:60:1b:0b:04:d2:
         7f:74:91:27:23:89:04:00:de:85:a4:9d:45:7d:6e:15:58:f6:
         ce:ea:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----