Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.cer (raw, json)
Hash identifier:          J06VDDeLQMua08gc8/Iazr7aUgMBiyRxEx8zG1nhi8c=
Subject key identifier:   78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521D56DAD8B7A8C46E66438B045A280
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.87.224.0/22
                          IP: 2a0d:f700::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:d5:6d:ad:8b:7a:8c:46:e6:64:38:b0:45:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:35:b2:ac:05:f0:14:03:67:fb:38:af:ff:
                    49:2c:52:7b:f5:c7:b8:5e:15:2f:90:8a:4c:c3:68:
                    d3:7a:71:67:c5:76:e3:dc:8b:2e:b5:93:ae:b3:c0:
                    98:a2:7c:c0:af:fc:96:db:83:cc:b2:90:f7:4e:b0:
                    ca:e1:73:84:9a:8f:d0:0d:00:6a:15:b4:60:4a:54:
                    23:00:3e:f9:8e:76:92:5e:6b:c7:c4:a7:6e:de:d1:
                    db:f6:fb:3f:52:40:e8:5b:73:a0:1a:e5:06:1c:1c:
                    cd:73:ad:70:e7:07:2b:fa:e0:8a:4d:a0:c0:f6:a3:
                    db:83:f5:c8:36:80:1c:c5:18:db:91:66:5b:98:51:
                    3c:19:d9:47:30:45:46:19:3c:73:8c:a8:77:68:3c:
                    1b:02:48:e8:05:8c:c3:a5:b3:11:70:04:0e:3d:a8:
                    0c:7d:dc:04:df:27:e6:19:ea:f2:0e:e6:b7:ae:86:
                    60:a6:14:2a:3b:04:15:ef:19:c7:8f:d3:89:b0:50:
                    bd:4c:3e:50:4a:7a:d5:f0:df:2a:ca:b3:65:0c:e3:
                    19:5c:d4:d6:cf:34:99:33:df:6c:eb:f2:ad:9f:8c:
                    ae:05:c9:6d:71:1f:dc:ea:15:99:82:43:e6:28:d2:
                    dd:5b:df:b4:c2:d6:4e:fc:fb:f3:4b:f4:64:29:57:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.224.0/22
                IPv6:
                  2a0d:f700::/29

    Signature Algorithm: sha256WithRSAEncryption
         96:28:11:8a:f8:64:8e:7e:92:80:6c:74:d9:88:97:b2:37:71:
         88:6c:b9:11:48:b3:f8:11:6f:07:17:3c:35:74:e8:dc:9e:9d:
         19:20:f4:34:6c:b4:b3:21:9f:2c:21:74:be:c5:e3:b3:18:c8:
         2a:3f:e6:39:39:24:71:af:80:93:fe:15:15:c2:5c:13:c0:76:
         da:77:5c:c0:bf:b2:ba:92:f8:11:5f:ce:1e:ed:da:7d:58:b0:
         38:15:a1:18:17:cf:87:2b:77:bc:40:c8:dd:45:a4:46:19:6e:
         24:1c:31:95:e6:b8:d5:91:cd:6f:11:3f:70:2f:f2:f6:af:47:
         56:09:a0:27:c8:fd:bb:bd:47:ff:eb:e2:af:f9:4a:3c:22:b8:
         d7:01:6b:4e:1d:80:0b:01:b5:52:9e:4c:c4:32:9a:ed:4a:bf:
         82:a9:09:6d:0c:b5:a8:9d:dc:4c:6f:15:80:c1:27:df:9e:26:
         bc:a7:89:86:15:87:03:e5:91:ce:e7:9a:f1:3a:05:f2:65:64:
         43:ae:39:b1:09:e1:64:8b:93:8c:cf:fc:1e:31:22:37:15:26:
         28:ce:2e:71:ba:37:d7:04:24:a6:b4:cf:b5:60:ca:73:9e:03:
         44:b8:9f:20:1c:db:b0:58:bc:bd:e0:28:72:fd:ca:5d:77:b2:
         67:e2:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----