Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
File:                     bRRgVvD7veYYv_ARwPIrp0pYMrc.cer (raw, json)
Hash identifier:          YjLgHxiM+zWjsoP38BdfKi8MlfY1/V2ytnbwUwijPI0=
Subject key identifier:   6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266A37EB013FE85A3F3FE991D54EBD85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.101.8.0/22
                          IP: 2a00:abc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:37:eb:01:3f:e8:5a:3f:3f:e9:91:d5:4e:bd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:1b:29:2a:54:0e:47:2a:91:1a:bf:38:62:
                    dd:38:14:0b:7f:a1:f2:fb:84:73:43:89:9d:26:c3:
                    f5:2c:c7:7c:0c:8e:68:ff:80:1f:39:74:f4:e1:90:
                    1a:b7:68:3d:ff:14:f0:2a:e8:57:c2:98:a7:05:57:
                    ed:89:50:84:b9:92:db:1c:32:c7:1d:16:88:a3:45:
                    4f:6a:fd:36:0b:a3:13:63:82:d7:d6:6a:af:01:f9:
                    ce:63:b3:c7:7d:db:e8:e3:22:e9:2f:fb:17:2e:90:
                    48:ab:5c:ea:3c:62:eb:5c:3c:6a:c0:4e:d7:67:6f:
                    0d:e8:6c:28:65:b1:45:6c:eb:5a:56:8b:01:f4:68:
                    1d:9f:75:89:6a:c6:23:32:85:81:2d:d6:8d:98:ba:
                    fa:bf:3b:ed:26:2e:0e:cb:c2:03:fd:e6:18:b8:2d:
                    73:dd:1b:97:ab:a8:7f:9f:63:07:5a:4a:77:70:06:
                    fc:d2:26:c0:58:d7:6c:28:d7:2c:4a:03:63:ee:44:
                    49:2c:53:e2:31:34:04:67:f4:d8:58:9f:df:88:4b:
                    0f:69:d7:4d:19:0d:3d:1a:a0:d0:92:15:25:ab:44:
                    5f:1c:29:42:93:30:e4:79:aa:53:14:d3:08:0f:bd:
                    45:df:87:1b:e7:95:ab:79:c4:a0:e8:83:5d:eb:b0:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.8.0/22
                IPv6:
                  2a00:abc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:7c:50:5f:8a:3e:85:14:e3:be:6f:72:0f:3f:23:46:3f:
         45:fb:45:4d:cf:03:a1:f8:c7:7b:6f:59:bc:d7:36:db:e0:ed:
         d8:b3:d0:0d:b9:3c:64:52:1f:67:0a:8e:2f:b4:cc:f3:9b:ce:
         33:0c:cc:1d:eb:89:d8:90:15:fa:a7:b2:df:ca:81:bb:94:e6:
         0f:d8:b8:94:10:db:1e:7b:2e:06:5b:e3:2a:83:67:2b:ad:40:
         a3:0a:ba:94:04:a1:48:cf:6b:35:4e:a9:f2:25:e8:8f:d3:c9:
         04:9e:1f:ca:a4:09:1f:4b:e9:73:87:0f:1a:91:2f:a7:6a:56:
         50:22:2d:84:c9:77:d4:14:dc:5a:3c:11:c1:3e:1c:67:92:16:
         b4:51:9a:ca:62:be:b6:fa:0b:a1:84:54:74:f2:d9:6d:84:3c:
         6c:5b:45:a8:12:9f:b3:0d:c6:b1:a1:e1:c8:27:63:57:7f:2b:
         32:15:1d:8c:ac:85:76:39:a2:0c:2e:5b:1b:e1:43:fc:fb:17:
         ab:9a:93:f3:8f:50:f9:47:04:42:93:62:cc:fa:dc:88:cb:d7:
         ff:57:6b:b6:66:97:69:d6:d3:ca:e8:e2:d1:9c:db:4e:f9:72:
         cf:1e:52:be:54:b7:b6:3e:29:6b:d3:1e:8d:cc:3d:b1:ce:e5:
         61:e4:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----