Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
File:                     hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer (raw, json)
Hash identifier:          lgod45eVwphA4UbPELXSi3mRuBsjAgyTqjdAzP2MYek=
Subject key identifier:   86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747AAE879742B6017E6DEA3424AC649
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.121.112.0/22
                          IP: 2a06:9e00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:aa:e8:79:74:2b:60:17:e6:de:a3:42:4a:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=863841506d026131965057409a1604a5671f0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:67:8e:37:0f:2b:4e:70:d0:55:94:76:6f:
                    66:67:e5:fb:13:4c:bc:ea:76:f9:dd:f5:f9:d4:88:
                    34:56:b9:33:be:12:ff:af:c8:e0:e6:27:76:f0:f7:
                    5e:1b:90:65:6a:c7:f7:e4:06:7c:f1:05:06:8a:f0:
                    2a:43:1c:52:a5:b3:9b:cf:58:a0:7c:fe:48:42:4c:
                    7b:09:03:c2:5f:46:02:18:5f:39:b3:c9:9f:72:06:
                    fc:3d:23:b9:3d:2c:7a:9f:5d:b9:e5:1e:af:cc:a7:
                    c9:68:e2:3d:c7:e9:da:99:c0:44:31:39:a9:e6:4e:
                    28:6a:8e:b4:62:b8:bf:fb:85:c4:9c:de:7d:8d:1a:
                    1f:05:9b:17:bb:d1:fb:eb:a0:7c:0b:25:34:5c:7e:
                    5c:a5:e2:6d:dc:40:8b:dc:89:e2:df:fb:6e:ed:d5:
                    75:87:44:6d:ea:dd:31:96:ad:43:14:0d:aa:77:73:
                    48:45:bc:4e:c9:28:cc:2b:07:74:0d:06:b7:31:e0:
                    42:01:fd:27:34:8f:a7:3f:0a:94:14:ee:b8:ff:94:
                    18:51:ea:40:ec:bd:c5:20:0d:d2:e0:f4:5c:75:6a:
                    99:cd:3a:6b:25:c7:a0:40:01:20:d4:3a:39:63:fb:
                    d3:74:91:9a:4a:d2:7d:6c:0d:1b:ec:29:b0:b7:c8:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.112.0/22
                IPv6:
                  2a06:9e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:f7:74:1e:4c:d2:37:d5:a3:35:4e:88:77:47:f6:0e:af:
         45:8b:38:ba:cf:91:20:e6:7c:e5:66:ad:d8:54:a1:80:e2:db:
         33:11:03:ba:19:40:c6:91:6f:23:c6:5c:c4:58:5c:e3:45:81:
         46:d3:c2:e5:26:d4:e7:d9:b7:d8:a1:af:10:15:9c:a6:b0:57:
         a9:64:51:21:68:3e:4d:9d:9b:2b:3e:f0:1d:ea:c8:8e:c1:1b:
         a8:b4:0f:90:d1:14:b0:ce:ad:d6:28:0e:91:9a:eb:69:91:2d:
         33:4d:eb:91:33:e0:d3:2b:e8:5a:92:03:ca:dc:b7:65:3c:30:
         1c:db:4a:b4:d8:16:0a:b7:9e:85:0a:39:f2:aa:a9:51:a8:fb:
         5a:24:be:3d:88:9f:cb:8f:2d:2f:38:40:14:74:4f:c6:ef:44:
         12:0b:92:29:47:42:14:44:c4:75:8b:69:68:a6:a5:72:e8:56:
         42:0f:2d:3d:d4:b0:d6:00:68:86:c0:ac:b1:a9:89:53:24:8d:
         b0:17:58:15:0f:15:10:fa:6f:df:b8:25:11:84:3c:4a:72:a5:
         e0:2c:3e:50:95:de:44:6b:40:89:33:78:07:45:70:89:23:ed:
         26:72:c6:7f:26:a5:15:f4:c1:8c:0e:33:82:86:c1:56:8a:d6:
         a3:56:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----