Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
File:                     guS0v-5FTQqkcKXAqUEDSdSh13Q.cer (raw, json)
Hash identifier:          +Zao822MKAGjJ8BkRkHPFhiy/9s4fSfxfC9yBcu0h98=
Subject key identifier:   82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D96D181BCB03A8FBDD98002BBD6EE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.113.228.0/22
                          IP: 2a03:3080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:6d:18:1b:cb:03:a8:fb:dd:98:00:2b:bd:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:5b:cb:aa:ec:f2:07:20:5f:bf:b7:5c:1c:
                    09:4b:43:5a:06:49:87:6f:42:48:5c:15:c8:13:de:
                    09:01:7a:67:89:8f:6c:ee:aa:19:e8:10:a2:da:b3:
                    c4:7f:bf:0d:59:53:f0:95:87:ef:28:f8:71:d7:99:
                    67:eb:63:62:70:73:4e:74:d8:2e:3e:e3:b5:87:06:
                    28:27:0c:05:2f:49:2b:2a:f3:bc:e5:b4:f4:56:aa:
                    c4:6d:45:96:81:65:cd:be:e5:ca:d7:97:14:fe:22:
                    ea:f9:6a:b0:17:2c:39:d4:cd:a1:07:ff:cf:b1:55:
                    69:96:2c:bb:3e:78:ba:04:be:98:9a:cf:a8:42:45:
                    3b:a9:b6:d5:d4:59:0d:c2:04:ae:01:da:99:0d:e9:
                    45:28:e3:ff:7c:2c:7e:3c:98:ca:a2:6a:9a:19:3a:
                    ab:8d:02:c1:05:50:b1:90:30:32:a7:12:ac:90:10:
                    2a:bf:b5:80:96:70:17:81:59:ca:1a:e7:99:9d:27:
                    88:45:af:53:c6:5d:2f:c6:d4:17:cb:b8:96:8d:80:
                    6d:45:6b:9b:83:1a:bd:4c:3f:5d:fd:2c:6f:54:e7:
                    d6:6f:0d:00:0f:51:30:4e:2f:85:72:9d:75:e2:8f:
                    03:5b:1d:82:2d:af:9b:e0:bc:80:d9:ec:89:db:5e:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.228.0/22
                IPv6:
                  2a03:3080::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:0b:90:05:91:8d:7f:72:f3:1e:4c:27:6f:1f:e2:da:69:
         82:34:af:89:f5:1b:20:41:4c:4f:ac:6d:56:63:25:ea:4f:1e:
         b1:57:d6:b9:6b:c9:a0:4d:96:3e:5e:27:65:ed:1c:9e:cd:c7:
         93:85:5e:bd:b3:12:91:f7:78:38:6c:ee:5a:47:56:c2:3c:03:
         ce:79:d7:48:37:9c:25:7d:4f:ed:0b:a4:dc:79:8a:fe:49:b7:
         ff:a8:0b:7b:a7:df:c8:f7:8f:96:92:b8:f4:8a:b0:46:52:ad:
         8f:f5:db:28:8d:ba:4d:b1:ca:a6:4f:49:53:8b:78:60:97:13:
         00:e6:90:d2:ce:3c:39:8a:b2:02:92:05:e1:3d:ee:de:e2:ac:
         6a:87:8b:20:b8:00:23:ea:aa:7a:0c:ca:f8:7c:fc:d4:a3:f3:
         0b:96:4e:1e:92:4c:57:42:38:83:27:51:89:e4:d6:9c:30:10:
         b0:8a:81:98:12:69:c3:ad:8e:f7:22:d6:ac:56:01:c8:d6:2e:
         c2:c7:6f:ef:0b:0a:50:14:53:f4:d2:fd:39:0f:35:9d:ab:a2:
         a6:d5:07:c8:9c:42:b2:9f:9d:81:9a:ff:62:d6:0c:ab:9a:1f:
         41:82:f1:66:f0:22:c7:7c:92:f3:ea:46:a6:ec:95:06:a7:dc:
         f1:7d:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----