Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer (raw, json)
Hash identifier:          eOTLb4Y70seEZsr2QFxeWeLb8RZXRvphOozU9dSCMNc=
Subject key identifier:   86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FB0B0371E29F3922817CAD41D802B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.66.124.0/22
                          IP: 2a05:800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:b0:b0:37:1e:29:f3:92:28:17:ca:d4:1d:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:0f:06:f6:b9:37:53:9d:ee:5e:83:6c:4a:
                    f6:f1:51:f3:da:c0:e7:52:d6:1f:44:d5:e7:a8:60:
                    2a:58:ee:ba:49:9e:b7:e5:73:5c:02:44:19:56:e0:
                    76:da:7d:0f:8e:b9:31:5e:dc:4e:a9:7f:39:10:02:
                    5f:f8:e8:8a:a8:76:2c:ad:3f:d9:9b:7e:60:45:ae:
                    b1:ca:db:f2:4e:a8:07:de:b6:bf:2e:47:94:22:f2:
                    44:19:b3:8f:fc:ed:a1:cc:e5:17:84:62:87:2d:19:
                    33:95:cd:6d:91:b4:af:58:06:83:1c:81:b7:b9:7b:
                    0b:d4:e0:42:0f:8c:ff:cd:27:2b:af:c6:a6:55:ef:
                    00:6e:1e:5d:d2:9e:42:57:57:8e:bc:3d:8b:1f:40:
                    b1:62:ec:34:e1:15:41:28:ae:c2:5b:d3:31:81:6d:
                    98:5c:c1:07:43:88:57:19:c5:4e:b5:b7:11:68:e1:
                    eb:18:67:e3:d3:4a:95:19:1b:00:f5:a9:5f:17:24:
                    57:e9:79:d2:a7:90:13:00:64:49:ea:cd:d6:16:3d:
                    ba:2e:af:8e:bf:44:0b:c2:5a:ef:f6:3f:27:4c:33:
                    0d:ed:c7:30:f1:0c:ba:94:4d:26:55:62:0e:f5:4e:
                    ab:bb:71:2c:91:7c:bf:e7:f2:f9:70:7b:8e:31:35:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.66.124.0/22
                IPv6:
                  2a05:800::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:a7:c0:c6:6f:4b:d7:bb:a8:eb:9c:97:fb:1f:28:c4:ac:
         77:aa:17:77:2f:d2:a1:44:e9:fb:a2:82:20:93:d7:4b:2a:55:
         55:eb:74:3c:7b:aa:45:38:41:25:50:8d:45:be:7c:d5:99:5e:
         67:c8:64:8c:71:d1:87:a3:17:fd:f1:e8:29:be:65:a0:90:72:
         7f:20:34:b8:38:7e:38:e1:73:44:40:f8:27:f4:0a:d5:ab:5c:
         37:35:8e:c0:08:89:5f:0f:9e:7f:8d:8e:d1:aa:ff:e6:b3:3a:
         3e:17:b4:df:02:7d:1d:a3:8a:ba:a0:bf:fd:8c:fc:a4:7e:fb:
         3b:f1:35:ab:c8:89:88:f1:c9:66:ad:40:65:0b:73:45:ac:f7:
         44:aa:d1:b1:9c:eb:f8:c8:5f:4d:90:38:a7:99:65:fe:4d:1e:
         0b:68:d4:27:db:52:fc:e4:a7:98:24:86:62:8f:dd:c1:0d:40:
         df:9c:a2:25:f2:58:19:6b:13:d9:9b:9a:83:05:80:99:81:c8:
         cf:ec:4a:71:99:f9:dc:f8:87:f6:39:36:b1:c9:49:07:b9:6f:
         d8:4c:a6:3b:43:ea:f8:c2:26:96:f0:3e:42:42:5e:3f:b0:f6:
         15:f1:cb:7c:be:0b:3c:ea:f1:86:56:52:25:d8:13:69:63:37:
         91:17:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----