Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
File:                     h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer (raw, json)
Hash identifier:          wk87QGrA+wl0k4aAFv0PGHctPfNrOWtEnmytGzd8ZqQ=
Subject key identifier:   87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427470D9D6546782ED27F07FFCAF876AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.46.143.0/24
                          IP: 2a14:7480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:0d:9d:65:46:78:2e:d2:7f:07:ff:ca:f8:76:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8794395ac822dfe01165216c7781ffd61db28d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:21:6a:32:72:9a:f8:5e:e9:a0:f4:d3:72:
                    b9:05:a8:d4:48:ee:40:6e:70:61:df:88:f0:40:30:
                    c8:48:d6:3b:d8:d6:9d:b6:1a:9d:ac:44:c1:80:a8:
                    72:32:be:0b:6c:92:92:38:8b:14:68:22:6b:05:b8:
                    0c:2f:0c:cb:0e:2b:63:f6:71:fb:ba:9b:d0:e5:24:
                    79:49:fd:4e:9d:aa:33:8c:08:41:0a:ba:75:91:13:
                    2c:0e:fb:d0:86:7c:56:7c:5e:1d:e3:2f:91:fc:6c:
                    a8:09:b6:57:8c:5f:aa:88:ac:1d:0b:18:48:84:65:
                    5d:cb:ac:43:75:19:a0:05:3c:52:95:54:e4:c2:c0:
                    a6:75:f8:1e:5a:05:95:de:2b:85:77:26:d1:53:c9:
                    bd:9e:48:3a:1e:85:9b:a6:77:f3:5b:62:5d:71:6b:
                    57:07:32:7f:f9:c5:e3:0e:f7:eb:6a:2b:5d:d0:31:
                    01:ce:37:9f:b2:6d:46:46:76:51:2a:9b:06:56:49:
                    56:fa:6f:37:d6:07:51:4e:01:d8:0d:38:49:ca:b2:
                    9c:f2:3a:1b:65:d6:d4:a1:62:5d:ae:44:ac:10:5a:
                    5f:07:81:45:e0:d7:b1:01:eb:94:85:4e:bf:75:34:
                    97:bf:a7:df:a9:d0:be:d4:15:ce:a8:0d:15:85:53:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.143.0/24
                IPv6:
                  2a14:7480::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:de:85:eb:8c:ae:5d:9d:a4:44:e9:e5:e0:dc:24:69:c8:
         72:7b:48:aa:58:eb:b3:82:0a:5b:69:cc:38:50:72:d7:7e:24:
         c7:53:19:af:e6:11:7e:d8:a2:21:69:4b:30:1a:7c:cd:1c:17:
         f7:12:43:52:c1:20:95:99:29:7a:a1:2a:78:ff:e5:b9:9d:5d:
         95:d1:26:a5:c9:dc:27:66:a6:fa:a5:48:20:4e:45:6e:c0:f1:
         58:2b:9c:8e:ed:b6:6c:17:27:d4:21:d9:86:00:d2:9a:94:5c:
         36:cf:ef:ab:ec:1a:71:58:af:92:15:e9:34:0f:fd:29:fe:d7:
         32:54:85:15:70:a0:db:50:88:b9:21:69:cc:2b:43:fa:23:a7:
         e4:35:7a:50:2a:ae:96:f3:14:a5:03:ac:8f:01:7d:0b:c6:78:
         29:f1:80:09:70:91:c2:da:20:12:e0:08:87:84:42:a6:02:47:
         da:d5:f7:d5:5a:20:d0:a4:2d:01:a3:e2:e3:c3:6d:52:f7:b9:
         fe:ef:02:f2:29:81:21:6e:59:8e:63:97:35:bd:a2:ab:db:00:
         93:b3:26:ef:7d:7a:23:af:e5:53:61:ca:5c:1f:26:e8:d8:c7:
         98:87:fc:2e:3a:4a:55:e0:74:bc:de:53:5e:df:0e:51:ab:3e:
         57:f8:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----