Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
File:                     nkJ08Tm9Zpqu93TWUDso2ZZje70.cer (raw, json)
Hash identifier:          ROrRdINDQQH4yNU+bxBllCRXo8BUsKRCYWP39MOBFBg=
Subject key identifier:   9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D731C56C85B5D9CC09D5793C3FA6DC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.17.108.0/22
                          IP: 2a0f:4180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:31:c5:6c:85:b5:d9:cc:09:d5:79:3c:3f:a6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9e4274f139bd669aaef774d6503b28d996637bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:81:bc:d2:7a:47:28:2b:91:7a:80:76:12:
                    e3:ad:eb:98:0c:b6:21:29:c2:1c:92:38:3c:fe:1f:
                    95:d2:95:71:34:27:48:11:78:3a:e1:55:a2:c1:dd:
                    71:6e:7b:c2:81:23:4a:47:d4:9a:cc:77:85:fa:34:
                    45:d6:df:e0:1b:60:c7:66:1e:4b:de:56:2d:57:b9:
                    e9:71:1d:f3:bd:a2:73:8e:82:84:c3:26:41:11:3c:
                    13:3a:ec:6b:b5:d6:9e:db:4e:fa:13:20:55:24:4a:
                    c5:bf:f5:c4:58:0f:92:57:44:75:54:39:e3:ca:89:
                    8b:bc:72:82:c9:b1:91:55:f6:45:f9:4a:dd:1b:9a:
                    df:dd:a7:5d:7b:13:42:f4:49:81:28:e0:a7:96:91:
                    c5:84:88:d1:1b:66:b1:56:87:80:96:81:7f:af:64:
                    c7:76:58:0f:e2:46:48:c9:80:41:ed:eb:d8:07:17:
                    ee:df:1e:1e:fa:da:ba:3f:0d:50:80:15:b1:78:cf:
                    73:be:43:22:3b:c1:b1:ad:7e:e0:14:07:3d:ee:3d:
                    2d:1b:2a:6e:a8:89:e7:c2:c1:e6:f2:24:be:11:01:
                    1d:6d:23:e3:20:7e:57:f5:56:24:f2:7d:1c:cd:f7:
                    d1:69:37:e0:bb:c0:cb:c2:7c:64:c7:2b:2f:2d:b2:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.108.0/22
                IPv6:
                  2a0f:4180::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:4f:1d:d0:b1:58:e9:88:4d:92:93:0c:bd:77:63:8f:70:
         c6:15:b4:59:00:23:a5:dc:7f:70:e6:12:01:a3:2e:04:99:fc:
         a0:b4:9c:ad:02:c7:e3:10:54:a0:57:88:08:9a:4c:10:ac:47:
         2f:88:e2:3b:0e:a0:40:f5:a3:e6:ce:af:4a:b1:ca:f0:98:ea:
         01:5d:d7:3a:29:09:d5:94:0f:ae:37:c7:b8:ee:f5:7e:56:fa:
         77:7a:e8:51:d8:21:e2:23:89:a0:6a:20:32:d6:97:80:d8:9b:
         e4:1e:3f:3e:a9:2c:8d:10:06:9c:ad:92:59:26:04:a5:52:92:
         cf:48:30:89:5c:04:25:ac:bd:a0:94:95:95:12:44:6f:17:50:
         df:6b:15:33:76:05:15:5d:7f:56:8a:4b:65:94:8b:09:25:31:
         a9:e2:67:92:1d:45:5d:72:74:ba:55:8e:fe:c6:63:04:43:e6:
         a6:46:ca:94:08:f1:47:d5:c2:69:a8:98:d1:82:fc:09:35:5c:
         c4:24:82:6c:2c:6c:88:e2:aa:b3:27:28:aa:57:0e:49:8e:fe:
         6c:89:0a:f6:78:c2:90:8f:db:06:36:28:fa:d1:25:38:31:e1:
         4b:b3:d4:f4:f0:20:86:18:26:6f:00:70:fd:cb:2e:a4:7c:0f:
         75:10:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----