Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
File:                     d0HROhWph91gAZwCZdLs7EhAlEo.cer (raw, json)
Hash identifier:          HiN5lviZyo6Qtw5Q7432ntEwIJg6P+voopgl3B+O2n8=
Subject key identifier:   77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC966E33B29A8E0C67E57383C52F4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 81.161.62.0/24
                          IP: 91.227.193.0/24
                          IP: 2a01:fd40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:96:6e:33:b2:9a:8e:0c:67:e5:73:83:c5:2f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7741d13a15a987dd60019c0265d2ecec4840944a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:51:f3:ec:55:4b:9c:0d:7e:62:23:ae:e7:
                    3a:af:7d:bd:bf:29:19:b9:c3:73:59:c5:9c:b2:96:
                    33:f4:fc:d1:43:c7:dc:08:f7:29:c1:e2:b7:80:2f:
                    30:8c:f9:bd:47:9a:c6:7f:ef:90:25:2f:e0:2b:68:
                    54:8e:d1:4e:15:f1:dc:fe:93:1f:51:d5:cb:5d:1a:
                    94:2b:b3:e0:33:a1:c5:a2:59:09:69:0c:18:ba:a5:
                    72:ba:e7:eb:5f:50:a9:34:0b:3e:7c:8d:37:65:7f:
                    00:8f:27:3e:cc:80:06:d9:18:4c:2f:a7:6e:77:5b:
                    0d:5e:4e:27:4e:42:59:06:8b:e8:84:b6:d1:3b:07:
                    44:f9:4c:6b:8d:f1:64:bd:94:ae:f3:38:6e:4b:2a:
                    75:2e:b9:4b:b9:67:0b:15:5c:11:13:4b:ad:27:9a:
                    3e:82:f6:bf:27:01:c6:da:ee:3f:88:af:1e:f8:b6:
                    6b:cd:36:81:62:71:89:d5:46:5a:bb:59:9c:50:86:
                    92:59:00:d5:af:f6:a2:29:66:d3:0c:5e:d1:13:3b:
                    ae:4a:2b:5e:53:77:fc:e2:ec:f5:ca:4a:c6:f1:2a:
                    f9:b4:cf:17:9b:fb:e4:15:96:8a:36:8a:22:28:f4:
                    c4:05:c6:26:7d:20:b3:78:47:92:22:2c:8b:ad:7e:
                    64:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.62.0/24
                  91.227.193.0/24
                IPv6:
                  2a01:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:e7:e7:7e:02:56:ad:14:76:9d:2c:41:3e:5e:2a:2a:02:
         98:a8:3e:90:f9:4a:e9:99:19:7b:7c:f9:69:6a:63:e6:4f:83:
         e5:80:d5:86:03:7f:80:b7:7b:62:43:e8:9a:47:12:58:db:ce:
         8e:08:be:43:46:54:27:08:cd:4d:b3:08:5b:d6:00:15:66:95:
         89:fa:a6:1c:05:63:23:d2:78:7e:01:2a:37:a8:24:fa:1c:91:
         06:15:a5:e4:d9:c2:9a:5f:22:ed:0c:dc:db:ed:d3:9e:43:6d:
         f7:68:ee:d5:44:10:d9:83:90:f4:6b:62:6e:12:a3:20:89:6b:
         b6:c8:37:3c:9e:98:b6:6b:f1:c4:0c:2a:e7:96:9b:80:b8:21:
         d1:14:72:97:80:59:1a:43:28:a1:0d:0e:7f:a2:5b:49:cc:2d:
         f6:a4:2e:5e:81:f7:a9:66:03:17:10:98:6a:5f:86:85:73:0f:
         1e:5f:49:ad:63:8a:c2:52:b0:68:50:fe:c6:0f:59:0e:50:e2:
         da:81:b7:9a:e5:b9:ae:9a:7b:e0:9a:98:77:ff:75:1e:b7:30:
         95:89:bb:97:93:fa:96:0c:46:44:86:20:0f:ce:b1:08:6b:08:
         52:31:77:e4:cc:1b:e4:0f:d6:30:38:14:d4:75:f9:9a:4c:81:
         91:d1:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----