Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
File:                     eXAA1nyN62Ji4Ampr_QioQOPRIk.cer (raw, json)
Hash identifier:          FAMPTT50zAQVrdQVPePk8vMlHLUd2SuzgCOamHB2Mbg=
Subject key identifier:   79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F3B33475ADC244B8D76863D2C1C4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2.57.160.0/22
                          IP: 2a09:ce40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:3b:33:47:5a:dc:24:4b:8d:76:86:3d:2c:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=797000d67c8deb6262e009a9aff422a1038f4489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:ee:aa:26:f9:32:66:ad:88:a6:f6:46:c4:
                    4f:3a:93:5c:37:61:ee:99:da:ad:0e:ca:33:63:7f:
                    cc:86:72:e7:39:41:40:f7:8e:fe:eb:40:ef:c3:09:
                    6c:f8:95:f6:ea:d3:aa:ef:f4:71:1b:6a:7c:b6:e9:
                    fc:57:df:50:e9:9b:92:0e:1d:d4:11:1b:eb:af:d2:
                    96:3d:37:b9:12:94:96:83:d5:5c:b7:66:db:8a:89:
                    a9:92:17:fc:93:e6:66:47:58:dc:b7:48:69:da:9f:
                    2c:c5:b2:dc:51:98:7d:08:8c:6c:05:ef:6c:82:b5:
                    e3:58:91:51:88:9b:14:66:d3:cc:9b:7c:3e:02:7c:
                    a5:c0:c0:8a:3f:48:9f:11:a4:ce:14:ed:4c:ba:60:
                    83:15:b7:ee:b6:6e:d8:50:45:41:d7:10:87:2d:33:
                    08:6a:84:bc:b7:49:b9:19:36:2c:62:a5:bb:d7:25:
                    b4:1c:5f:c2:aa:27:86:b3:47:11:46:93:7b:73:18:
                    35:46:ba:95:6a:08:7f:a6:f4:1a:4d:e0:27:bd:fe:
                    58:c0:02:61:4e:ee:cf:ae:88:a7:7a:10:8f:94:25:
                    24:1b:d0:33:64:d3:c7:12:93:2a:b3:fd:7f:70:c6:
                    f4:b0:22:69:d3:d6:e3:ef:d7:44:72:fe:55:e7:a8:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.160.0/22
                IPv6:
                  2a09:ce40::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:8b:27:55:93:66:12:8c:43:93:d8:b9:af:0b:e7:47:24:7d:
         98:03:f2:d1:6c:23:03:4c:27:94:87:a3:b4:8d:63:cd:e3:b0:
         25:c6:20:cf:4d:bd:c0:36:c0:cc:c2:f6:3b:b1:b6:e5:05:42:
         ba:f0:6c:30:0b:92:3d:60:8f:ee:53:61:a3:fc:52:4a:df:5d:
         4b:26:7a:b1:9c:60:03:df:e5:e7:71:c0:75:8f:6c:b9:e3:cf:
         01:7b:60:e4:5c:1d:8b:e3:fc:af:bd:43:9d:61:fb:a4:e9:7d:
         09:f4:b3:24:1f:e3:81:5f:b2:10:71:04:bd:43:46:ff:83:7b:
         c1:a5:ba:d2:71:40:0d:81:c2:28:14:9c:98:1b:a7:ff:96:1b:
         db:88:43:15:e7:37:be:2e:09:5a:7a:09:e0:5b:84:b8:18:7c:
         f7:4d:1a:b8:44:1c:67:c6:00:81:f3:40:c5:ff:04:22:87:50:
         86:00:50:3b:f2:a3:93:b4:8e:03:f1:f6:2e:d4:e3:dd:3a:d9:
         bd:94:cb:a3:70:68:a4:14:11:de:94:7a:37:fb:d5:03:13:ad:
         12:1d:7f:7d:b6:d9:ca:bc:f9:87:02:13:c5:96:4a:4c:2d:84:
         87:16:06:77:89:04:3b:d3:eb:50:e4:cf:cb:e2:96:b2:f0:24:
         6f:24:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----