Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
File:                     nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer (raw, json)
Hash identifier:          NNIb92LeaBFg6TT7o+v6uy2q3BfqNjQ40fimFXDkYVM=
Subject key identifier:   9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954702111306537C376EB8E0FC28C0068C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 10:44:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 212.105.224.0/19
                          IP: 2a02:2a98::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:02:11:13:06:53:7c:37:6e:b8:e0:fc:28:c0:06:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 10:44:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:db:1f:c3:fa:5b:0b:4a:8c:a0:56:77:21:
                    fa:28:01:8d:28:30:bd:6b:c8:92:04:ca:af:03:dc:
                    da:0a:ae:43:f5:39:a9:74:99:2f:99:a9:55:5f:de:
                    f1:6f:cc:36:07:5a:60:bd:8f:64:a4:b2:69:74:6d:
                    24:8e:76:a8:99:a0:36:6b:11:8f:d5:e4:3e:5c:a6:
                    5d:5a:ad:81:2b:70:30:ae:35:c0:ef:c8:68:4a:a2:
                    40:b5:fe:91:f4:93:c0:8b:de:36:aa:43:6c:f9:f1:
                    5a:a7:93:29:38:0c:c4:d8:ff:9b:fa:fe:4c:c2:34:
                    ff:86:ce:5d:7c:cc:fa:4b:f6:4d:90:bd:bc:96:2e:
                    0e:3d:04:8c:af:a9:af:39:42:07:11:5f:0f:f9:0c:
                    21:21:d4:73:0a:ac:1f:0b:38:85:fe:2a:73:f0:38:
                    fa:f9:93:46:a5:da:18:da:b0:c9:56:bd:ae:56:c6:
                    a4:71:a8:8f:2a:5b:08:8b:c0:63:60:cb:f8:75:3b:
                    c7:60:ec:09:8e:6c:b7:51:bd:39:84:3b:09:a2:12:
                    cd:24:d9:24:3b:5a:4a:d0:4f:68:3f:99:ca:1e:3b:
                    d4:47:87:c4:0b:03:d6:35:1c:5c:a8:17:ca:1e:d6:
                    21:90:be:a3:eb:e1:7a:40:a9:7d:4d:90:b4:37:19:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.105.224.0/19
                IPv6:
                  2a02:2a98::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:ce:13:d1:d6:0c:26:7e:77:e6:83:a0:2b:56:1d:fd:18:2a:
         36:b5:46:3c:8e:75:c4:a1:57:25:cf:65:a4:cb:91:24:04:12:
         b0:9e:23:b7:41:f7:f1:5f:24:dd:c1:1a:7f:5d:ea:e0:39:80:
         ae:db:bc:ff:37:6c:aa:e2:9e:41:0f:47:0d:1d:f1:f1:f0:fd:
         a3:01:22:a4:ed:99:cf:24:f8:17:2a:f6:fe:c5:12:9e:fd:fe:
         53:de:6e:35:3d:92:6e:a9:63:4a:88:a9:89:ee:21:7b:25:e6:
         bd:e8:42:34:26:33:f1:a3:10:52:67:88:61:90:7c:ee:74:4f:
         e5:01:6b:0d:d5:ea:25:8f:bb:df:e6:18:3e:8b:ae:30:09:b1:
         30:7c:e6:8d:94:af:88:27:c4:42:7e:fc:b3:8d:53:94:d7:9f:
         83:49:9b:dd:4b:51:0e:bc:c5:1e:4d:e2:97:65:04:3d:34:7c:
         5e:be:a6:13:af:8f:51:f9:92:59:48:55:6a:df:34:a5:35:96:
         3d:76:51:7d:f9:47:d4:d0:9b:be:35:7e:f2:80:2c:84:0f:eb:
         69:7c:ba:c7:a6:4b:72:81:db:34:a2:56:70:e1:6b:fd:95:33:
         be:89:66:30:ec:46:f4:a3:a2:a8:60:60:a6:d0:45:08:a1:ad:
         25:76:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----