Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
File:                     bSPOewwQBo-8RMAhlD4zkBPyruA.cer (raw, json)
Hash identifier:          dphVd/+rcggTSIaYbryd3c6Vvp0oTcgz+1fLdEKuLfQ=
Subject key identifier:   6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5C04EA01B9D4479BD55A0921C4B99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.11.28.0/22
                          IP: 2a0e:5700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c0:4e:a0:1b:9d:44:79:bd:55:a0:92:1c:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:6a:5d:6f:44:a1:0c:dc:da:b4:26:d6:db:
                    a1:a6:07:03:05:54:eb:ee:38:a5:5e:4f:5c:34:f8:
                    cc:a0:37:fc:f6:95:76:ab:83:0f:bb:8c:aa:0a:cb:
                    c8:6c:31:8c:e6:5d:ff:b2:91:61:b2:5d:80:14:78:
                    00:6f:ab:f0:8f:2f:67:c6:97:71:c7:84:65:68:56:
                    12:e4:54:d5:00:b2:08:44:85:43:e8:0e:75:b3:b7:
                    1b:2f:02:d8:97:10:e3:5c:80:cc:90:6b:c1:55:38:
                    70:54:b9:8b:b2:20:b1:d1:11:98:b4:02:45:19:51:
                    98:d8:a7:3f:33:15:97:c1:79:18:09:44:9c:a5:b6:
                    a7:db:00:86:32:f0:ec:22:1a:b4:13:ad:d8:57:0e:
                    6b:58:49:e7:05:29:56:e2:fe:b2:3b:94:3e:7c:91:
                    5a:29:e8:d9:9a:f0:34:56:2d:0e:b8:ef:7d:24:a7:
                    30:93:8c:b2:e9:c8:e2:22:7e:f7:0c:ad:9c:45:de:
                    19:d1:43:1c:9d:c0:d6:67:90:04:c1:3f:a6:32:6e:
                    5f:b3:64:ed:99:ec:2f:a8:af:ed:b1:89:62:bc:52:
                    73:1a:e4:2d:21:b4:93:84:a6:4d:53:13:cd:74:53:
                    83:62:83:1d:86:f8:f9:17:63:76:1a:7c:56:00:41:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.28.0/22
                IPv6:
                  2a0e:5700::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:48:5a:c8:f8:e3:13:ed:a8:00:19:81:3a:bf:9e:53:b8:7e:
         15:99:ae:25:5d:49:a8:e0:cc:b6:1d:7e:1c:2b:14:9e:ca:f1:
         78:74:04:e0:94:8e:77:a6:4a:12:c1:4d:ad:85:a2:35:5f:80:
         f4:9f:2c:d4:26:a6:08:1a:e6:27:91:76:27:b3:9a:0d:97:c9:
         2e:03:ab:96:8b:98:92:c9:b0:3b:1d:ee:95:c1:bb:53:dc:ee:
         82:ef:1a:21:a4:13:5f:31:e2:49:7c:3c:3d:a5:ab:d8:b0:d7:
         16:b2:84:4e:e2:84:0c:d1:68:da:d4:3c:a6:5d:21:c1:99:3a:
         87:b2:a8:dd:6e:49:13:e8:d2:70:75:49:89:1d:b4:c6:ed:52:
         8e:87:7c:ff:f9:9e:62:91:56:47:16:a9:4e:d0:0e:5f:e9:49:
         61:70:bf:c3:84:67:02:3e:18:29:ca:ee:9b:ad:18:db:9c:d1:
         f6:b8:53:fa:58:28:b4:5d:8b:b1:3f:ea:f6:84:46:b9:bd:fa:
         b2:25:cd:98:94:c8:a9:4a:f1:22:03:43:1f:39:a0:82:f0:21:
         8b:a1:30:d1:66:76:25:94:cf:a3:33:8b:e1:f8:f7:5a:3d:e8:
         5c:6a:10:fc:cb:5a:ee:9a:1d:d0:d8:4d:18:91:2c:df:af:a5:
         bf:2d:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----