Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.cer (raw, json)
Hash identifier:          NjbfWT0uqXIY2syFzgRpWdH++P7cN7Bj0B1DmQi+rf0=
Subject key identifier:   6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D986CFCB8B9A194D2A4401D86B11E8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 31.209.96.0/20
                          IP: 185.37.184.0/22
                          IP: 2a00:f9e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:86:cf:cb:8b:9a:19:4d:2a:44:01:d8:6b:11:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:de:ef:25:a7:be:8d:75:47:87:d0:51:41:
                    3c:48:69:03:3f:67:e6:16:86:ee:57:78:e8:68:96:
                    e7:b6:ff:07:6f:ee:db:b1:06:4c:12:65:df:4d:2f:
                    bd:2c:7a:f0:56:cc:51:3d:31:ae:43:3e:37:26:8f:
                    db:63:9d:3a:97:19:3b:b0:d9:03:9d:8d:f3:be:89:
                    0e:4c:8b:cf:a0:bc:78:d5:93:ee:89:fd:a0:81:e0:
                    ea:d0:ab:85:58:ce:c9:8e:84:40:e0:94:51:a6:23:
                    39:41:7a:ea:b6:ac:16:73:8c:15:7c:f3:53:88:f7:
                    fc:ec:ec:ae:5d:1f:55:75:4b:56:7a:a9:f0:29:26:
                    76:29:30:b0:19:44:00:0f:00:8f:15:e1:17:63:f7:
                    8f:26:70:61:e1:90:44:1b:56:f9:89:9c:3c:01:fa:
                    09:08:b0:b9:3a:16:51:5c:0c:66:70:3c:d4:5a:10:
                    df:e3:2e:67:bc:aa:88:94:01:57:a7:a7:93:57:83:
                    73:7d:9c:e1:d9:2b:b3:04:3e:4d:b3:45:d2:12:69:
                    10:e8:16:b7:30:c6:0c:dc:9c:e0:14:a9:dd:4a:7d:
                    1c:09:74:14:11:fe:d1:00:7d:d3:60:af:83:cb:d3:
                    7f:0d:6c:0f:64:73:6a:96:8f:63:35:a8:b4:b6:ca:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.209.96.0/20
                  185.37.184.0/22
                IPv6:
                  2a00:f9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:91:b6:fd:ef:d2:50:bc:1a:7c:86:aa:5a:f9:fa:e6:2c:
         44:d5:80:a6:fc:f4:cb:ae:71:45:ba:41:6c:ef:e3:4b:69:19:
         35:c5:33:8e:67:09:91:5d:f1:35:bf:ec:04:0b:6e:f3:02:be:
         9e:f5:ab:27:ca:d0:59:a3:f2:0b:6a:3c:e0:c4:a7:5a:61:80:
         2d:22:fe:70:0b:8f:d9:af:55:21:80:ca:69:40:92:6d:56:47:
         b3:a1:5e:f5:e0:f0:6a:b5:7e:9d:18:c8:10:95:99:25:eb:6b:
         08:6a:ed:5e:f6:2f:88:44:c9:78:f7:12:fa:8e:f2:f1:a7:44:
         38:f5:19:db:66:27:f1:2d:5f:ab:fd:29:2f:8d:39:37:a8:06:
         85:d6:27:4f:89:3d:05:fd:9f:63:8c:67:38:ff:23:90:b7:1e:
         17:0f:a6:64:1a:1a:de:7b:dc:de:db:5d:73:1d:18:28:79:66:
         b7:80:8a:fd:39:27:4e:20:b4:19:75:f0:37:80:de:59:ad:5a:
         5d:97:13:b1:01:10:1f:2b:f5:07:9c:07:5c:71:43:6f:f0:5b:
         08:a3:e1:70:c3:ef:e9:94:d7:d9:ee:5e:93:a3:c7:b7:29:8c:
         41:7e:08:59:d4:1c:2b:65:45:63:5f:b6:61:45:36:8c:3d:20:
         60:a8:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----