Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.cer (raw, json)
Hash identifier:          DiCHMBV5fmaYZAwyhfGKSYcDIZMoxShm+GGAnosBoJw=
Subject key identifier:   7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274834062CBFD73A188D810596779613
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.94.24.0/22
                          IP: 2001:38c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:34:06:2c:bf:d7:3a:18:8d:81:05:96:77:96:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:e1:ad:1b:57:2c:8e:18:d3:b1:a0:3d:c7:
                    f8:1c:25:1d:6d:38:36:c1:9d:ca:9b:53:d7:35:7c:
                    25:82:6c:75:4c:f3:76:58:d3:ce:7c:c1:7f:b8:8d:
                    88:70:10:22:08:0c:b2:24:2b:6b:38:60:3a:2a:5a:
                    77:18:e7:5b:05:c8:86:7a:4f:c2:6d:df:24:f0:40:
                    0d:2b:65:ea:f3:8a:99:c4:b0:fa:e1:13:e6:da:a9:
                    c9:42:a3:80:ba:84:67:0a:c5:71:3a:63:88:d3:8b:
                    58:ad:e0:8d:1c:cc:44:64:f9:6f:6a:8a:10:29:71:
                    dd:f1:aa:79:16:4b:8b:5a:72:dd:73:8b:fa:14:eb:
                    33:f3:ac:e5:98:1b:ba:10:2e:14:06:c9:e6:e5:55:
                    f2:3b:73:cd:27:92:d3:24:af:7c:ea:47:e7:bb:1e:
                    c7:87:58:f7:ea:dc:df:18:8a:5b:c5:a3:a5:ad:d6:
                    81:5a:7f:a5:f3:7e:7e:c0:d2:f9:a5:75:b4:c7:d5:
                    c1:64:dd:8c:92:81:b3:56:0f:fb:15:1c:cf:03:3e:
                    66:fe:dc:83:bf:2c:0c:5b:43:ce:c2:5a:1f:e2:79:
                    ca:58:9b:bb:d9:b0:58:7f:bc:67:03:86:06:9a:cf:
                    2a:ac:11:6c:5d:71:8e:66:b3:72:15:a5:e0:0f:7a:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.24.0/22
                IPv6:
                  2001:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:1e:a2:81:39:00:22:31:4d:2a:85:09:f6:5a:1f:a3:78:be:
         c2:d3:b0:8c:06:db:f1:3b:88:0d:5f:e7:ca:86:75:00:bb:52:
         4c:75:d5:45:1b:a0:d0:a7:a1:63:d8:ac:83:92:02:8b:ab:5e:
         6c:f3:77:ce:45:db:f3:b3:8a:45:d9:c6:ef:6d:2b:95:68:3d:
         63:83:ba:42:b6:0d:9b:b7:f3:dd:f5:5e:08:9d:98:29:4d:a4:
         44:7b:d3:48:d6:b1:fb:ba:c9:92:0f:70:8b:1b:7b:fd:18:50:
         58:03:27:3b:b6:6d:0d:22:ff:b6:31:d6:65:2d:2f:3d:fb:b6:
         59:2c:0e:dd:3a:76:d2:0a:a7:f2:ae:03:70:11:bc:13:f2:26:
         03:25:d6:84:9e:90:d3:66:43:f8:33:c4:95:3e:4b:fd:b0:0c:
         7e:79:7f:df:74:78:c4:52:35:c9:e7:70:73:2b:67:bc:f5:aa:
         4e:97:60:54:2b:66:e0:5c:0f:fb:62:1f:e0:74:08:e9:62:1f:
         84:14:d0:55:b2:4e:1d:17:ca:e1:93:53:4b:72:b2:4f:20:97:
         83:e8:bc:6b:a5:8c:ae:8e:06:74:fe:36:66:63:84:77:e1:0b:
         d0:c4:d6:03:7e:da:63:66:f8:e9:4f:77:88:19:b0:dc:51:70:
         6b:e8:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----