Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
File:                     jHFLbLK61OdjmoqicQKPWqG8asI.cer (raw, json)
Hash identifier:          g2myg0fHS4HP8LzRHPY3/OHyMPahGdSJrW+O/x9uov0=
Subject key identifier:   8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD2D007EA15AC330F14BA09A569EC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 217.26.222.0/24
                          IP: 2a13:5140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:2d:00:7e:a1:5a:c3:30:f1:4b:a0:9a:56:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:c0:b5:21:67:2f:55:1a:c8:e8:05:af:6e:
                    7c:1f:89:35:14:c9:92:84:94:ab:e0:2c:ce:bc:59:
                    40:34:77:f8:f4:5a:ee:4d:df:ab:f5:08:7d:f3:96:
                    82:77:d0:6c:3d:11:ef:d4:e7:99:7c:ec:d0:09:fb:
                    ea:a5:ea:9c:6d:dc:0b:9c:93:30:6b:db:4d:e2:29:
                    57:4f:06:fd:b2:b9:a6:ec:6c:9d:8f:a6:22:50:8d:
                    04:3f:8b:a2:7d:ca:53:f2:31:84:93:fc:ce:3b:a7:
                    c9:5b:fb:58:e6:61:ce:f6:26:82:5e:86:73:07:cf:
                    ab:e4:ff:de:3a:e8:14:9e:1f:b5:05:b5:62:f6:d9:
                    18:d5:0b:87:d3:57:35:74:2f:2b:4e:2f:d3:b9:8d:
                    7d:f9:65:21:ef:55:5d:53:17:2f:13:6f:ca:0a:a1:
                    af:df:d4:95:d9:98:0c:cc:1a:53:e3:3f:3e:d7:5d:
                    f1:46:48:80:91:c4:43:68:b8:a7:c4:7e:56:f2:bf:
                    46:6b:37:ec:6f:89:11:8e:70:1a:20:a6:5a:9e:8c:
                    9b:0b:03:67:a5:90:b8:1b:c3:41:41:7d:6e:d8:9b:
                    c4:47:b2:91:fa:7d:0a:81:20:09:06:32:10:c3:2f:
                    1d:5e:63:bc:fd:cb:22:b6:03:af:0c:5a:0c:2f:b2:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.26.222.0/24
                IPv6:
                  2a13:5140::/29

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:65:b6:0a:77:09:6d:f7:0e:72:05:f2:a3:07:92:96:87:
         76:e5:60:8b:44:f3:5c:68:3b:d6:4c:52:51:f5:a0:98:f8:3d:
         f5:d5:7c:37:db:8d:94:34:c7:e7:50:90:ff:32:c7:ca:94:7e:
         2e:06:41:62:2d:77:8d:83:b7:08:f0:0b:0c:50:f8:9e:f4:2d:
         c9:a3:45:e6:1b:15:66:12:ff:0d:27:14:a0:5f:f0:2f:e4:90:
         ae:62:c7:b3:04:fa:f0:09:cf:ed:70:23:04:b7:6c:a6:e1:4c:
         55:8a:92:ac:08:c8:e7:dc:d8:9f:20:78:71:5b:b0:67:81:03:
         06:68:96:20:71:d7:a8:51:33:0b:52:1d:68:ea:07:77:d3:a6:
         2f:31:0b:27:44:08:e9:65:71:1a:3a:37:8d:c9:25:7c:ad:d3:
         db:0d:9b:7b:1f:68:da:f5:06:31:7c:15:72:c5:02:e5:e8:e4:
         c0:d2:72:37:d4:e6:23:20:7f:ee:c4:c9:9e:67:e7:87:59:89:
         2c:87:74:36:44:f0:eb:5f:6f:dd:25:2f:0f:68:84:5a:80:0c:
         e5:7c:69:d8:b5:03:76:70:60:5a:a9:9f:93:7a:b8:83:70:0f:
         55:32:ef:94:77:6a:ab:ff:3b:03:01:bd:a4:c9:96:62:43:5d:
         77:6b:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----