Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
File:                     kxqerhFBEi0V8KZO8HjIAp_r_jw.cer (raw, json)
Hash identifier:          19S9+f5kTbfqH1xAANjzLUMHH21bHliXN4D6/jzOQdc=
Subject key identifier:   93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB6CDB3AA6C22887BA8CC65EAA7656
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.27.204.0/22
                          IP: 2a00:97e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:6c:db:3a:a6:c2:28:87:ba:8c:c6:5e:aa:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:0d:5c:32:f1:32:d0:cf:8c:30:96:e3:f3:
                    10:e0:4c:42:88:d0:74:d4:5d:51:de:4d:a0:5b:40:
                    c7:99:da:e0:e5:e4:a4:8c:42:7f:4e:a8:fd:e7:35:
                    fe:ad:4f:88:6c:fc:5c:31:b6:0a:ff:22:a6:b9:ae:
                    1c:9a:2a:c6:05:67:ca:2b:02:7c:48:0b:5d:c2:62:
                    2c:39:17:1f:e5:0f:37:df:3b:80:66:07:38:12:a9:
                    49:26:21:c0:50:94:a6:00:d3:52:24:2d:5a:93:2d:
                    1e:fe:fc:66:18:c0:5d:c6:53:65:5b:6e:1e:e4:9f:
                    a0:69:ac:c0:fd:3e:25:7d:67:1b:af:bb:d9:c8:a1:
                    5e:5c:d7:0b:f1:ba:2f:9e:93:b8:a4:d6:49:0c:eb:
                    e3:15:82:d4:e8:7b:20:d6:ce:7b:39:e1:2c:2a:ca:
                    f9:c4:ee:e8:10:8d:99:25:07:e8:d5:31:e3:0a:c3:
                    7b:bd:26:eb:53:0c:f0:80:a3:dd:fb:87:4d:84:06:
                    8b:30:46:72:b3:7d:5d:63:7a:4b:e2:28:5c:fb:86:
                    43:0e:2e:03:0a:77:41:c1:b5:7b:33:13:0d:0e:7a:
                    a2:99:d8:bc:17:ef:a9:8b:4c:89:05:e8:e5:f7:03:
                    ee:43:7c:9c:be:ff:17:f5:95:97:c5:ad:f8:94:d1:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.204.0/22
                IPv6:
                  2a00:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:c9:ef:59:1a:ef:e8:8a:35:c4:8b:10:9c:96:17:8a:87:
         67:6d:0a:79:8d:b9:3e:40:3c:88:1c:1b:ef:2c:69:a8:3c:d3:
         34:92:9b:5d:6a:31:a8:26:dd:ce:1d:04:99:56:97:44:84:80:
         ef:cc:c8:a0:aa:95:9e:5d:91:5c:9c:6e:37:d7:63:db:22:28:
         2b:4c:87:04:0f:4f:23:a2:30:07:3f:65:fa:64:61:cf:97:ce:
         02:fb:a6:f6:29:6e:1f:0d:4a:58:6a:73:16:3c:69:a8:b2:df:
         ba:fd:57:94:83:e7:0a:4a:cd:3f:48:d4:de:6a:f6:ee:a4:35:
         b5:85:ff:e5:a3:b5:a4:77:99:42:db:a7:69:f2:f4:c5:3a:0d:
         c3:56:45:45:f7:b0:f8:b0:c2:19:c7:5e:47:b1:ab:64:76:7a:
         b9:98:d6:dc:85:6e:0f:3d:82:c0:7a:98:eb:e9:58:8e:0f:84:
         37:5c:5a:cb:66:d3:90:da:d5:8d:ac:e7:2b:e1:e6:75:57:3e:
         52:30:89:58:37:8d:03:c3:30:51:37:dd:97:9f:25:88:71:53:
         65:54:82:18:62:68:d3:ba:3e:81:df:60:19:c5:5a:ed:c4:db:
         9f:77:9f:ad:48:e3:03:cd:33:a4:05:b7:9d:4b:42:ca:32:88:
         86:c5:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----