Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.cer (raw, json)
Hash identifier:          F6ogFwHXTPzUHW2I8ODjw/QuPC66c18g+hkK9Q6HJt4=
Subject key identifier:   74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5B3B4BF350D167FFF8C2C9B16CEC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.184.156.0/22
                          IP: 2a0b:3880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:b3:b4:bf:35:0d:16:7f:ff:8c:2c:9b:16:ce:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:80:5e:81:32:2c:e4:89:b6:43:f5:1a:87:
                    09:6e:61:5c:cb:0a:03:90:e2:ec:d7:ce:7c:46:c1:
                    4d:d2:bf:61:de:52:c0:ff:28:97:30:8a:e0:a2:77:
                    66:8e:fd:15:50:5b:96:e8:84:ea:e9:0e:14:f1:5b:
                    44:37:21:3e:33:45:ef:32:10:13:54:45:c2:1e:34:
                    58:11:45:68:fa:5f:28:d5:97:81:20:23:9c:e6:55:
                    18:27:22:93:d4:94:f7:cf:51:24:5d:6f:30:ea:85:
                    b7:5e:42:c7:ab:08:84:f7:61:2b:cd:a2:64:8b:98:
                    3d:b2:21:ac:fe:6d:9f:48:d2:1c:14:40:3f:9c:e4:
                    00:81:5f:72:87:d0:dc:c4:1c:4b:f3:99:f0:ba:a4:
                    71:ce:9a:bd:74:e0:8c:d2:cc:12:a5:cf:5e:2c:68:
                    2e:fe:c0:38:ff:74:4c:18:fc:9f:bb:71:ab:e1:31:
                    aa:e7:9e:6c:3d:65:b6:d5:ee:ea:4a:f5:56:7d:a0:
                    c6:15:3a:f6:07:e5:2a:c5:d3:f0:6f:ae:38:af:6e:
                    9d:8f:88:ec:16:bc:cf:1b:0e:e4:a3:ac:47:16:8f:
                    18:62:b2:0d:45:6c:9b:cf:76:87:3b:c0:47:0e:b2:
                    8e:e0:93:ab:47:e6:72:81:fc:43:75:94:8a:ee:ef:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.156.0/22
                IPv6:
                  2a0b:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:15:f8:c2:4a:ba:9a:ea:04:05:03:a1:c8:e3:41:f0:f0:f0:
         e7:29:18:9b:19:a5:f2:08:d8:f5:85:78:af:7f:e6:77:27:9c:
         14:35:f9:e3:e2:16:29:92:95:9a:46:c0:4d:c8:94:41:35:8b:
         39:3f:96:dd:9b:3c:73:5c:69:8a:37:a7:91:14:ef:09:44:7d:
         5d:c2:7e:a4:b0:b8:31:eb:ba:3a:bc:39:1e:b5:32:93:60:76:
         09:5a:71:e8:d1:4f:8e:25:ec:cf:05:e3:f8:18:81:ff:33:27:
         0a:b6:34:17:e6:93:fe:0d:a7:ff:6c:59:06:5e:0f:98:c7:b0:
         60:b6:20:2c:72:39:30:75:93:7d:b2:ae:0e:ad:f9:63:49:58:
         41:2b:a3:9e:63:6c:6c:27:1b:26:ce:4c:32:81:f2:96:9f:82:
         ad:bd:98:7b:15:f3:85:f5:aa:fe:0c:2b:6b:36:8d:3c:ea:04:
         75:7b:86:da:57:50:19:89:3f:f9:81:0f:3c:5c:a1:d6:db:1e:
         0b:4d:8a:ba:8f:10:a2:1f:12:97:1a:ca:a5:84:7f:7a:37:62:
         99:1d:1a:b6:e8:fb:7e:db:44:0e:e0:e9:50:73:e3:aa:c5:64:
         b5:33:99:cd:80:f8:f6:5d:79:06:8b:ce:30:05:4e:d4:fb:a9:
         4c:d7:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----