Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
File:                     dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer (raw, json)
Hash identifier:          IvP9RQj62uszx31rd4omgvYikz3XD8iC5AzfhO2/xYg=
Subject key identifier:   74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252228B78D8CA87EC04F8BDEE55B9342
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.216.44.0/24
                          IP: 2a10:a580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:28:b7:8d:8c:a8:7e:c0:4f:8b:de:e5:5b:93:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=74b975898d10f1a5052133e1e25036c6114d8876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:cb:a5:7f:56:c9:50:15:bd:1d:02:25:9f:
                    3a:bd:e2:a8:e8:c2:bf:f2:25:b2:94:18:cb:44:6b:
                    de:85:52:88:c4:81:e5:c5:76:6b:89:35:8a:61:99:
                    b3:b5:a0:1d:d9:67:f4:19:20:94:3f:64:4a:ff:e9:
                    35:c1:be:cf:c5:b6:d6:32:4f:b9:79:7c:e5:02:95:
                    87:f9:ea:98:e2:f2:97:9a:67:c8:9a:03:39:00:fe:
                    eb:19:bb:9c:72:8e:0a:81:89:eb:ff:ed:2b:6f:70:
                    bb:80:db:22:a8:39:eb:04:dc:3a:4d:0b:29:73:90:
                    ef:2e:38:39:a0:69:b1:09:5e:87:9a:5d:2f:50:53:
                    7d:c5:d5:39:78:71:bc:d3:41:dd:75:67:16:41:27:
                    90:4d:1b:14:48:6c:8f:34:65:8c:2e:6c:97:23:44:
                    77:70:cb:e4:dc:a1:a2:c6:9f:4c:25:d1:e7:d5:d2:
                    60:9c:a6:82:95:af:8e:b0:65:65:7d:b9:e7:b4:eb:
                    8a:36:1c:10:07:cb:dd:e1:fd:54:cf:6f:ba:14:12:
                    84:3c:8c:51:48:24:f5:7d:a5:ea:0f:0c:f2:87:89:
                    5a:a9:11:d0:5d:16:44:1c:8d:51:e6:06:1a:56:83:
                    3a:90:8a:b8:2b:0b:36:d8:e0:0c:fe:9c:88:72:29:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.44.0/24
                IPv6:
                  2a10:a580::/29

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:f1:34:e3:d9:2d:e8:d4:89:75:c8:2e:5f:10:9b:9b:2f:
         01:75:18:a0:cf:39:9f:60:79:6f:16:6c:4d:31:de:80:f6:94:
         ba:d1:ab:a6:ff:79:5d:77:c5:39:d5:cd:3c:e0:47:e2:41:45:
         f2:d3:51:51:4f:f8:4c:b0:12:21:bd:5c:93:15:71:fe:ab:36:
         57:ca:c2:2d:b4:06:09:eb:1a:0c:ee:ed:46:f9:07:7e:74:bb:
         ad:88:0f:af:6e:28:38:72:52:db:7d:c6:3e:64:de:83:8c:69:
         18:9b:d7:0e:ff:9c:e8:b7:a5:08:8b:74:f8:16:60:5e:5b:a9:
         01:2a:fa:75:11:a2:cc:51:1b:a5:6f:de:c1:fc:d9:03:c2:21:
         fd:08:b6:0c:52:48:8a:99:59:82:4e:a1:dc:8c:f2:8c:c6:57:
         7a:e6:14:c8:c8:79:5e:23:11:5e:31:0d:e7:40:14:fb:9b:6b:
         50:47:b7:4f:3b:23:92:06:5d:59:27:3a:e3:d3:75:ab:9e:8e:
         a7:88:f5:4b:f4:30:db:72:0e:5e:2e:4f:a1:b1:a4:b2:87:f9:
         b9:19:40:5f:bd:7b:af:36:4f:06:07:eb:80:b5:ce:ca:fb:44:
         b6:9d:ab:e7:33:1c:e5:47:7a:c2:a2:a1:8d:6b:55:2a:2c:d5:
         72:b1:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----