Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
File:                     g60oliGDPa6G_dpi5LmwningeKA.cer (raw, json)
Hash identifier:          aSgj4d6NySWwud0RzXmA1igTbLL7h/IDbzXxlJznEa0=
Subject key identifier:   83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B53D76BC93B4486CC9F4A39A6209B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.227.88.0/21
                          IP: 185.98.56.0/22
                          IP: 185.144.204.0/22
                          IP: 185.146.196.0/22
                          IP: 193.34.116.0/22
                          IP: 2a0d:9100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:3d:76:bc:93:b4:48:6c:c9:f4:a3:9a:62:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:f7:6f:5a:f6:2b:08:0d:de:a2:c4:2a:21:
                    7b:4e:29:82:73:44:6c:f8:69:3e:87:94:ce:69:b3:
                    e0:e4:72:9e:43:21:bc:45:6c:33:d7:e3:d1:74:f6:
                    93:e5:cc:e6:dc:9d:bc:fd:84:cf:ee:e8:61:0a:57:
                    ae:0d:25:b7:69:9b:cf:be:14:20:0f:97:60:5e:73:
                    6e:99:e5:34:09:ca:70:66:1f:f3:eb:df:14:0a:f5:
                    40:13:59:8a:36:5a:bb:8c:cb:21:1c:ab:e4:01:97:
                    95:dc:4b:f4:9f:f9:31:fb:13:17:86:42:d1:76:f9:
                    63:b1:d0:64:6e:aa:4e:e2:5b:d9:1c:0e:86:52:01:
                    85:a9:56:a0:18:2a:e3:8f:4b:8e:28:6c:2f:98:76:
                    35:56:36:69:bd:af:ba:3f:f1:eb:f5:f9:0e:af:1f:
                    0f:0b:64:2f:e7:5c:0d:9d:25:cd:13:9d:2a:19:ff:
                    56:90:10:d8:58:88:bc:36:33:63:f4:25:40:f4:3a:
                    2f:23:00:b8:89:7f:9d:1b:ae:ec:db:c4:a8:d3:e8:
                    48:56:77:92:bf:e5:ab:1f:ca:bd:2e:1e:4d:00:58:
                    69:d2:94:c5:c4:0d:16:c3:4a:66:71:fb:d5:7e:5a:
                    ea:70:fc:08:f1:39:7c:2e:e1:17:d2:d7:ed:e3:e0:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.88.0/21
                  185.98.56.0/22
                  185.144.204.0/22
                  185.146.196.0/22
                  193.34.116.0/22
                IPv6:
                  2a0d:9100::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:1b:b4:7e:36:4f:e9:6a:86:9d:57:d8:01:3a:f0:b4:3e:
         22:5c:a9:ab:07:57:43:87:3c:2a:cb:0a:89:ea:87:6d:58:d8:
         4e:f0:93:73:51:28:e9:79:1c:e1:a0:c0:a5:cd:2b:3a:ff:50:
         e2:f2:65:4c:11:9f:83:dc:08:b6:a0:1e:52:22:08:b0:fd:5e:
         52:22:32:f8:21:87:4e:cf:da:79:0d:31:83:54:73:80:de:07:
         f4:be:a2:5d:7d:b1:26:3e:b2:ad:62:7b:5f:5c:23:6a:51:45:
         b6:02:65:3b:8d:7c:e2:ab:1b:cd:0b:52:68:8f:46:cd:b1:d1:
         a0:a3:22:20:91:d3:30:62:07:20:bb:73:ad:04:96:6d:e3:f1:
         73:d0:0c:4e:a1:5c:d2:38:e2:33:ad:9d:1b:d2:1f:64:46:53:
         f4:e8:d2:51:24:bb:9a:87:79:d5:b4:a3:a1:61:82:38:72:28:
         ed:10:1e:da:80:5b:9e:0f:2a:1b:e1:3a:a0:72:57:11:92:fc:
         5f:fa:c2:dc:7b:a6:48:66:f7:cb:b7:4c:77:8c:07:67:8f:b8:
         e7:6f:26:5c:10:f0:b6:6f:a7:23:90:55:94:71:13:e0:18:30:
         1d:22:0f:7e:91:45:ac:ac:af:a7:81:b4:e1:34:a5:24:f6:83:
         42:54:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----