Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
File:                     cHjnVjWgncwD9iWoC_pVKyLjZiw.cer (raw, json)
Hash identifier:          N+l+H3zzurUdL4Z0RQOGadNlCaGHSqs5lJBxQ2ah4lE=
Subject key identifier:   70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6121A6B2CFE16D90AF1C6CA56284B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.174.16.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:12:1a:6b:2c:fe:16:d9:0a:f1:c6:ca:56:28:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:af:82:9a:69:63:95:ac:28:c6:b0:d6:bf:
                    d5:b9:e7:36:62:2c:ea:64:30:0b:47:95:34:12:cb:
                    11:69:39:c5:96:7b:4b:c6:79:19:3c:bd:6a:ab:d1:
                    bd:89:21:2e:e6:6a:7a:4d:12:6e:9f:c1:1e:da:bd:
                    e3:81:5d:c4:a7:64:f4:19:ff:26:4f:2b:cc:30:7c:
                    65:64:c7:c6:d3:54:6f:4b:cc:05:a8:e6:17:23:cc:
                    b8:11:ac:9d:78:24:57:a8:b0:1a:70:dd:3e:36:05:
                    72:23:ba:32:5f:d2:ed:49:f9:68:14:c7:39:6b:2f:
                    e3:ea:ef:1e:8d:4b:7a:19:38:36:5a:e9:03:88:63:
                    68:fd:35:f7:0c:60:6e:60:d6:d6:fd:54:0d:9f:06:
                    f5:e2:32:55:1e:87:02:38:5f:23:a5:e2:d5:7c:ce:
                    24:70:c1:81:db:b9:ef:0f:19:94:01:b4:36:0c:96:
                    3f:d3:a2:3b:68:44:04:4b:a9:a1:a1:4c:88:fa:a6:
                    9f:08:69:93:b9:e0:8d:af:59:f6:f5:b1:cd:a9:4e:
                    dd:ac:6c:a8:d2:e8:7c:a6:7a:b2:3e:07:42:d5:d0:
                    a2:42:2a:af:bb:55:60:48:6c:8c:a6:b9:f7:09:28:
                    f2:73:77:81:78:38:c6:f8:fc:5d:9e:91:28:38:4f:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.174.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:01:90:8e:e8:f7:db:bb:fd:74:c4:d0:79:e3:d5:e2:09:01:
         ca:b7:ec:34:d4:38:d8:da:3b:8a:1b:76:ea:43:d8:a5:21:45:
         de:fc:2b:19:c3:5a:fb:e3:a7:51:f2:90:ea:69:9f:b5:e5:b1:
         8d:38:f2:a2:8d:94:6a:4e:76:1c:51:53:f3:3d:a7:6c:89:34:
         d7:13:d9:13:ab:d5:b9:8c:bd:6a:e7:b4:bd:61:69:f0:09:1e:
         eb:bd:3b:9e:e2:ee:70:da:f7:ec:b2:5d:2b:e4:80:c2:cc:66:
         c8:48:ca:5c:9a:d4:9c:2a:a8:2e:f4:6d:85:c4:74:fe:78:75:
         e1:19:89:94:ab:ad:64:ac:b5:4e:56:8a:96:b3:90:4a:67:13:
         0c:4b:9c:a9:7d:31:26:4a:d3:64:4d:e0:9b:00:41:70:e6:8d:
         be:d7:03:34:56:fa:ee:2e:76:c0:9f:cd:ec:72:71:b7:a0:fd:
         10:4e:ee:de:3e:e6:37:3a:b5:2a:f8:33:0f:d9:59:24:99:e4:
         0f:d7:66:7a:ba:d2:03:07:4f:f6:97:d1:cd:c5:21:39:dc:4c:
         75:61:f6:76:ea:54:24:7d:74:01:72:d8:a8:90:b4:6e:dd:5d:
         cc:1a:ca:74:f4:be:8d:42:89:ef:43:96:c2:b3:c7:6b:25:35:
         50:55:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----