Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.cer (raw, json)
Hash identifier:          E4NmTBGD0bdqyNYraN10fcG6mzNjXvUaB4D/lO43fRs=
Subject key identifier:   80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3DC1BFE2E8ED9C7AAA74F6B5A1A02
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.113.9.0/24
                          IP: 2a12:9340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:dc:1b:fe:2e:8e:d9:c7:aa:a7:4f:6b:5a:1a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:95:fa:8e:5c:c8:83:d3:32:13:75:86:f5:
                    38:ae:df:7a:7f:53:d4:e0:65:da:6e:92:62:79:d7:
                    2e:11:78:e9:e2:ff:0c:a6:3c:f2:3e:88:35:af:97:
                    e6:f1:25:6d:b0:8a:54:cb:d4:a8:ab:b2:52:ac:cd:
                    0f:13:63:dd:54:c0:04:2a:ae:b5:19:c3:8f:f4:a3:
                    39:e4:d5:c3:bc:35:c3:0e:eb:55:28:f8:38:36:50:
                    5f:bd:c4:91:60:6b:c6:9d:07:15:0b:25:8d:61:be:
                    3d:73:8c:8f:42:14:c6:3c:01:d7:48:6a:6e:1d:c7:
                    c6:13:cb:23:40:49:7b:0e:f5:b9:27:2a:25:3f:be:
                    1e:11:31:ad:97:89:36:56:87:83:fa:d8:b7:71:30:
                    81:31:8d:d2:75:c1:3d:c4:0b:78:2a:a5:1c:b1:9f:
                    cc:86:15:77:4b:92:dc:51:32:06:3a:0b:39:bf:01:
                    b0:00:9d:eb:e3:21:42:7b:70:42:f7:1a:27:cf:9c:
                    74:9e:ae:3e:c8:27:30:0b:d0:b5:83:34:4e:24:fb:
                    e2:ce:0d:b9:a1:60:73:2f:a0:a7:61:e3:9e:4f:dc:
                    6f:93:b6:1e:4b:b3:89:fe:dc:ac:88:2d:31:31:1b:
                    92:85:6f:d0:ef:bd:cb:9a:60:bb:b2:d7:9c:14:ad:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.9.0/24
                IPv6:
                  2a12:9340::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:b1:b1:72:d1:ce:7f:a9:7b:f0:98:e9:2d:81:ca:ab:9f:
         64:d1:70:b5:8f:33:6b:d8:9a:26:d1:c2:8b:4a:df:8e:68:b2:
         9b:35:a2:09:97:a6:8f:19:19:8f:6d:66:26:04:e7:06:43:89:
         d3:41:71:94:0d:f7:d9:39:41:2f:84:ef:f1:b3:62:27:86:39:
         9b:54:17:b5:c4:34:93:bb:d3:3b:af:ba:c3:5b:53:d1:5d:ac:
         57:ce:6b:df:2b:4d:20:87:9a:26:34:be:e1:1c:5d:11:0a:97:
         5d:44:ec:2f:8f:12:0f:14:78:26:20:64:a6:65:c1:9c:c1:bf:
         f9:4d:91:c7:45:3b:b0:e0:08:f1:d4:ab:03:16:bb:95:c3:07:
         69:34:0f:6f:cd:b0:59:6c:c2:6c:9f:d8:4e:a2:fd:ac:57:ac:
         96:18:5b:1b:fe:a2:30:92:23:c9:f2:97:0e:fa:9b:a1:8a:ec:
         9b:7f:96:f9:ab:cb:f2:b0:dd:bc:01:2d:43:09:a8:2a:7a:48:
         d4:c3:89:39:0e:b0:ae:c1:42:49:33:9a:1e:4c:09:d8:28:cc:
         61:32:6c:d8:9a:6b:09:1b:db:eb:a4:cb:69:40:cb:f9:6c:a9:
         eb:5d:b7:e6:f8:e8:12:53:14:43:ed:07:0b:cb:c7:c4:d5:ba:
         19:b6:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----