Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
File:                     nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer (raw, json)
Hash identifier:          GVQm9ypOnTMVamSgN2aGQEWYHqxZFqPRp39Gw5iW6vA=
Subject key identifier:   9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206845F4141ED0F430ECE53526D720E8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 94.124.73.0/24
                          IP: 2a11:7c80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:45:f4:14:1e:d0:f4:30:ec:e5:35:26:d7:20:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f1:7b:61:db:ad:c3:2d:08:37:ac:25:20:fb:
                    0f:e2:49:38:eb:e1:11:fb:eb:60:af:b7:63:e3:5d:
                    56:eb:73:76:1c:82:0d:a6:f9:98:8b:68:2d:7c:ea:
                    d0:b7:5a:c8:5c:20:6b:7b:5b:60:a4:27:e7:a7:5d:
                    2b:62:af:e7:b1:18:87:58:ba:42:67:3f:a0:7f:98:
                    d5:5c:3e:78:5b:59:c0:9c:ba:e5:34:aa:cd:ef:c9:
                    2c:89:13:14:bb:f0:96:7e:3a:76:17:10:68:24:20:
                    08:ee:0b:99:54:aa:b6:97:1e:9d:6c:e2:1b:95:2a:
                    a4:0d:1d:d0:94:7e:dd:36:e3:44:c2:4c:73:f7:3d:
                    9d:87:1c:1b:22:9d:4c:b4:32:11:d0:4f:55:58:c4:
                    b2:ca:a9:dc:54:a7:09:51:dc:d7:bd:ac:fd:eb:e5:
                    06:6d:96:2f:6c:3a:d8:e1:1f:8e:f2:82:f5:0a:8c:
                    48:54:d3:38:00:89:51:f8:e3:13:cd:f4:0d:f4:c3:
                    06:a3:25:2e:30:3d:27:61:b1:59:56:ce:f1:85:d0:
                    05:86:52:30:aa:46:78:5e:7b:e8:ae:c1:e6:c5:bb:
                    25:6c:01:7d:0f:7c:4a:25:15:e1:d6:ef:b5:2d:26:
                    1d:5a:90:c0:8b:72:18:3b:52:68:43:64:91:fd:58:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.73.0/24
                IPv6:
                  2a11:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:df:23:2e:7c:57:4a:ac:2f:1c:fc:d2:76:e7:be:92:54:c1:
         ae:bf:e4:7e:8d:ea:d4:8d:6b:55:61:e5:0c:69:5e:b4:ea:69:
         ff:a1:e2:23:d8:5e:74:29:41:c6:dd:9b:b4:1a:61:40:e9:ec:
         6a:b1:be:c0:4a:fd:a1:2d:94:f8:4e:dd:e3:be:58:77:14:5c:
         e2:79:65:6f:f8:84:3d:6f:f6:c2:14:0a:08:df:d8:9d:0d:15:
         01:39:2a:f6:e6:a3:48:42:8e:b8:1a:ca:aa:61:b0:d8:44:22:
         fc:bb:f7:3a:26:8c:4c:f6:3b:45:e4:7d:46:f3:e1:16:4f:aa:
         3f:56:2c:bc:47:9a:65:ec:ac:26:0f:bf:29:e8:34:e5:88:17:
         46:78:3f:5a:cd:f3:51:e4:a4:9e:b6:d2:46:b6:c0:b0:48:fe:
         ca:24:61:7f:93:da:2c:e7:61:f4:a7:2d:e1:88:22:de:ca:f8:
         a1:77:dd:40:e7:86:01:54:db:52:39:03:9d:56:9a:c5:e3:8d:
         b2:49:1b:16:b3:62:65:bc:1b:69:38:06:dd:6d:e5:47:03:ce:
         d4:9b:80:85:35:fe:45:bd:c4:e3:70:eb:8d:10:fd:83:f4:53:
         94:41:01:6a:5d:bd:1a:17:9d:02:52:18:80:0b:fa:ba:6c:47:
         f6:df:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----