Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
File:                     iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer (raw, json)
Hash identifier:          nBckx7iwq5uyK2dot6GYb9boHKxHJ79TbHgFX70cSqM=
Subject key identifier:   88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D716D4E2979E2B14794E41E597608F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.134.180.0/22
                          IP: 2a06:ee00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:16:d4:e2:97:9e:2b:14:79:4e:41:e5:97:60:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=88e719f426793b1e9063771460abd311a3dff116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:dc:74:24:87:1e:7e:6f:fa:86:d5:78:53:
                    28:a1:ae:43:b5:3e:f3:e8:87:66:1d:0b:9a:b7:f8:
                    7b:85:c5:b1:6a:e9:f7:2a:d7:3a:43:e4:c5:f2:c2:
                    80:f2:37:67:e0:57:2e:7e:7d:9a:b7:e3:56:84:f9:
                    49:17:9f:c1:05:4c:08:4a:55:86:4c:16:4f:3f:b6:
                    66:35:51:c9:db:3f:2b:62:ce:19:70:c9:97:31:3f:
                    04:56:8a:9f:95:2d:9f:ae:5f:39:49:33:6c:95:d0:
                    e1:f3:0c:49:8f:1e:1c:99:de:96:d9:cd:86:7a:01:
                    a7:b3:89:94:bb:15:12:f3:59:6d:ac:4d:92:b3:e2:
                    2e:b3:4c:84:fb:77:d8:e7:18:25:14:8e:39:93:d9:
                    c4:81:6c:bf:8c:c5:b5:e5:e2:1a:7a:05:76:46:79:
                    10:46:0b:5b:43:9e:8c:72:a8:2e:72:14:73:71:f5:
                    e9:2c:1f:45:6b:7a:5b:bc:d5:e3:1f:9b:3e:a6:fd:
                    04:37:76:54:22:ff:40:e7:0d:bf:89:27:9f:d7:ba:
                    ce:f1:7c:81:1d:3a:36:a3:bb:3c:53:ec:d8:7f:eb:
                    aa:3f:23:50:fa:e1:32:7a:e0:e5:13:54:9b:3f:b2:
                    fa:e9:4d:e2:9c:c8:67:2c:ec:a2:61:55:db:f2:7e:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.180.0/22
                IPv6:
                  2a06:ee00::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:91:2a:f0:43:de:5d:77:f0:89:3e:e3:5f:ba:d3:a3:a2:3f:
         7f:fa:97:3d:49:5f:4e:51:58:63:61:8f:17:be:81:9d:53:3c:
         51:ff:5b:f6:21:84:4f:e3:86:70:9c:81:54:79:1b:de:42:b2:
         42:3e:4d:1a:a3:ae:ef:a0:7f:39:79:4f:3c:48:9c:fa:a3:04:
         57:a0:d7:86:67:6e:df:38:4b:90:3f:b8:4b:bd:3c:00:b2:48:
         5b:6c:4c:9a:7f:0a:a4:2d:ec:8f:15:76:4d:ef:be:f2:f9:21:
         6b:e9:9d:63:48:22:66:63:34:3d:c8:d9:c6:16:4c:14:40:3b:
         0b:d0:70:60:f9:7f:9a:8e:b7:45:71:27:81:e6:4a:2f:48:bf:
         18:2b:0e:44:86:87:03:c5:2d:45:57:11:9e:20:07:2f:65:63:
         8c:48:56:cb:5c:18:dd:01:fb:0e:cc:08:4e:70:70:8c:27:6c:
         87:f9:15:c9:07:32:9d:8b:0b:dd:bb:59:33:7a:23:7d:60:25:
         ae:10:28:d0:4d:b3:f7:6f:91:d9:e0:be:21:8e:e2:b6:68:86:
         3d:ec:da:2b:de:b9:b3:81:d5:58:fb:f2:0c:6a:00:7d:a9:eb:
         2b:56:a9:0b:30:36:d5:ad:50:fb:18:40:31:78:70:58:c8:19:
         04:74:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----