Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.cer (raw, json)
Hash identifier:          pxPHiTk75ijxStSQd9c6b2FiSr/AUxWzL80RVGj9kGs=
Subject key identifier:   6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942144369B0C454DF6499BF00C4EC1EDF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.130.192.0/22
                          IP: 2a0e:57c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:36:9b:0c:45:4d:f6:49:9b:f0:0c:4e:c1:ed:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:b9:72:cd:22:8e:42:39:6f:d0:1e:b0:6a:
                    58:37:1c:6e:db:56:3c:06:2d:4f:72:da:db:29:e8:
                    b1:e2:e1:c3:70:43:a3:99:62:2f:70:75:93:8d:ad:
                    94:87:be:ba:f0:fc:3b:e9:43:58:a6:f3:fe:2e:c5:
                    aa:d8:ef:1f:4a:7b:7e:fb:82:f0:f2:60:a6:5c:3c:
                    82:e0:40:bc:21:07:00:76:48:9d:cc:76:c2:d5:11:
                    a6:c7:c2:b2:7e:37:33:0c:90:7a:ec:d0:90:de:2e:
                    58:ca:8f:fb:44:2c:2e:a5:8d:bc:88:b3:f1:ae:7e:
                    ff:bf:30:a4:ae:7e:15:23:62:48:9b:c6:ed:6a:cb:
                    d6:ba:24:01:b2:54:bc:6d:6c:06:9b:23:ac:f9:8c:
                    bb:39:8c:a0:d0:5f:bb:b8:2f:d6:aa:03:72:2b:6f:
                    a0:fa:be:23:35:7c:e8:cb:d3:e1:ab:c2:0b:76:e3:
                    1b:65:8d:9d:da:9f:60:47:29:73:ed:8d:ed:6d:8d:
                    0b:17:e3:d1:ae:f4:cb:96:cc:9e:40:37:f4:02:30:
                    a2:17:1e:3e:5e:f9:6e:f2:2d:5a:64:1a:e5:c4:b2:
                    9a:72:47:e0:b8:c8:11:de:ae:22:6c:d9:65:ec:a7:
                    80:67:dc:f8:51:a4:b6:7e:6f:a0:ef:91:a5:61:90:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.192.0/22
                IPv6:
                  2a0e:57c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:be:b2:35:90:4a:23:21:fc:de:25:46:3e:fd:23:54:7e:
         90:01:ba:3e:2b:5d:2e:ae:f4:51:d4:e2:ca:e8:64:ab:b2:ae:
         2e:2e:9a:cf:61:97:38:eb:75:42:c0:93:a9:4f:d3:27:72:0c:
         c0:58:ca:79:2b:ab:ca:98:a2:25:01:1e:73:ab:ba:bf:67:43:
         c4:b2:f4:17:a6:b7:d1:42:56:00:7a:43:18:43:21:e6:57:8a:
         7e:d8:f5:91:58:75:d8:24:8a:a9:7e:92:f0:29:b6:b9:bf:6f:
         91:d4:a4:61:88:77:1f:e2:44:c1:19:14:59:8b:0c:db:71:22:
         5b:18:01:c6:e7:73:1a:6c:4e:29:37:44:50:46:40:5d:60:73:
         6e:05:f2:8d:22:45:d0:a8:c1:22:ef:6f:ea:8c:cb:37:66:5c:
         71:38:c8:38:fe:56:1d:88:b7:92:f5:02:d8:02:e2:85:b4:af:
         b2:77:22:a9:f8:df:ef:fb:82:5d:ae:8d:3e:35:2a:70:8c:29:
         b2:17:81:e2:0c:0f:0a:3d:86:55:ac:dd:1e:7f:49:f7:a0:5b:
         6b:f2:1c:e0:dd:7b:9f:e7:d5:b9:f3:78:81:cf:0a:aa:1d:6b:
         14:b1:db:45:7d:77:7d:c5:fe:e4:29:18:43:f4:40:17:8c:aa:
         cb:6d:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----