Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
File:                     h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer (raw, json)
Hash identifier:          rIfCXbdA9rEJZn8l+MMq797DE+vGeBu3L9iGjafVz6s=
Subject key identifier:   87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422202AC32CE97496E7AB7D0D5EBBE91A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.159.204.0/22
                          IP: 2a09:db40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:2a:c3:2c:e9:74:96:e7:ab:7d:0d:5e:bb:e9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:8e:50:55:cd:c0:48:a2:81:1e:4e:0f:5c:
                    34:bb:7a:07:d7:a1:b8:28:28:78:bd:9c:5f:a6:62:
                    45:9b:44:56:35:37:68:a5:b9:e2:89:ee:ec:a0:6c:
                    9b:36:6e:e7:f8:e0:dc:6a:92:2f:95:54:e5:ce:9b:
                    e4:4c:98:2c:b5:6c:46:2e:bd:c0:97:e0:33:2f:6c:
                    d5:9a:c5:43:11:a3:11:05:90:46:18:e9:82:87:f4:
                    1a:12:bb:91:a4:8e:e4:b1:88:be:2a:92:ac:b7:dc:
                    19:18:03:3a:a7:00:ef:af:09:9b:3e:3f:bd:f0:89:
                    51:f2:30:88:ad:f0:be:41:54:16:71:37:d8:22:54:
                    59:a2:90:89:da:6f:d7:4b:60:2d:ae:4c:98:c9:eb:
                    35:f5:55:ea:ed:d6:71:63:a4:ba:0a:2a:30:b5:d0:
                    b7:ea:43:81:58:ed:58:07:7f:33:63:60:5a:4e:81:
                    88:22:93:79:80:fe:ca:f2:29:31:49:87:6b:93:0c:
                    18:11:21:a5:79:04:b8:db:ee:44:ef:29:27:cd:da:
                    37:19:76:85:87:3a:85:a5:b0:27:8b:77:dd:10:23:
                    08:ab:a5:5b:d5:b6:2c:e4:49:e4:6c:51:12:d9:92:
                    f6:8d:5c:fa:9d:14:51:eb:7f:9e:cc:4c:7a:d5:b1:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.204.0/22
                IPv6:
                  2a09:db40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:3d:f1:8f:25:30:e1:e3:07:12:37:d4:ad:d0:e0:79:62:
         18:a8:c7:e4:a1:8a:04:0d:f3:d7:7a:60:a1:0d:68:08:4c:57:
         0e:c7:78:57:36:fe:8b:ce:e2:b1:34:ec:f7:32:4d:15:73:6e:
         14:4e:78:6e:f2:a0:8f:a0:35:37:25:9d:e6:e5:51:4d:ff:cb:
         cf:11:b5:c9:20:3d:bf:4d:4d:b5:68:9e:71:11:5d:d9:86:93:
         59:b7:1d:ed:9f:75:4a:0e:39:d3:1a:09:d0:b2:22:ff:16:87:
         2d:85:f7:cf:0b:ba:79:25:7d:1f:a3:3e:73:31:63:61:02:ff:
         ef:df:98:06:06:03:d7:3e:b4:eb:93:d7:91:35:93:81:7f:c9:
         4b:cf:41:72:04:4f:cd:c4:bf:d2:f7:d0:54:7c:e7:7d:4e:c8:
         4d:a2:52:07:e1:23:5c:77:2c:fc:99:43:9d:06:4e:73:af:45:
         25:f5:38:2a:bb:ba:41:3d:c1:42:85:c2:54:66:ee:df:e3:5b:
         20:31:a3:ed:68:0e:b0:a0:e0:a2:49:92:c8:c6:d5:47:01:80:
         b5:a7:80:ed:d9:58:4d:9b:d0:ae:a6:4b:f3:8d:ac:08:62:cb:
         99:c8:61:9b:0a:de:c7:94:ef:a2:01:42:0d:81:89:6b:74:40:
         d5:67:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----