Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
File:                     rjjDnx4hTH7N8vDslXhHAfLRKI8.cer (raw, json)
Hash identifier:          FBzc67fyb26AHMVlEzUblhBWItN9nup5MB1B41D/C+U=
Subject key identifier:   AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424457E8FD9B3C687CB90574E5D154888
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 77.240.18.0 -- 77.240.23.255
                          IP: 185.58.32.0/22
                          IP: 2a02:5de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:7e:8f:d9:b3:c6:87:cb:90:57:4e:5d:15:48:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:24:71:ee:3c:19:38:95:7a:ef:4a:1a:1d:
                    b0:9d:6f:81:44:20:16:58:73:de:df:19:4e:86:77:
                    d7:e2:53:43:d9:fb:41:77:f7:91:79:82:ad:c3:d8:
                    b4:c8:a8:b6:c1:17:a0:d5:42:b7:db:b2:4c:e6:fc:
                    2f:f6:f9:88:7c:1d:56:db:da:38:87:4d:85:b9:12:
                    22:7a:a8:ec:ae:5e:04:31:da:5b:54:fd:0e:fd:ab:
                    7a:6d:3c:3a:6e:c3:07:5a:8b:17:27:db:5e:e3:33:
                    63:81:e6:31:25:d0:6d:1f:94:71:90:85:30:52:32:
                    6e:c7:ab:45:ca:7b:4d:c7:8c:a3:9b:a6:37:99:3e:
                    e2:74:b8:68:75:61:b4:4a:bf:6f:11:cc:87:59:cf:
                    88:8d:2b:f3:9c:71:3d:4f:f1:3c:47:b6:5e:7a:fb:
                    7e:61:48:5d:e4:aa:dd:69:86:dd:22:a3:6a:78:96:
                    1e:61:0a:14:d1:74:e2:b7:99:c4:5a:2f:e2:a5:59:
                    e8:6b:89:79:8e:cb:a4:01:38:30:33:58:6f:ac:ef:
                    28:a2:06:d5:47:aa:67:cf:ed:d1:c6:9f:3f:a5:ce:
                    e6:03:d6:9b:2b:76:1e:69:ed:cd:14:e6:b4:8c:78:
                    14:22:3d:e9:8b:ce:a3:ce:ff:be:d9:38:6e:22:11:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.240.18.0-77.240.23.255
                  185.58.32.0/22
                IPv6:
                  2a02:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:09:7b:2e:0f:f3:61:c0:05:8d:01:6b:52:b8:97:66:41:
         b2:14:f1:62:67:95:3e:13:9a:7d:28:f8:50:5f:26:87:19:f1:
         9c:61:c4:98:91:b2:da:71:e0:2a:fa:4a:fd:38:6a:68:a3:28:
         0c:18:1c:1c:55:90:98:16:4f:99:51:36:ca:06:f7:f7:18:13:
         71:26:bf:33:e0:6b:7f:6b:28:6a:f6:ba:d1:80:e8:2c:97:18:
         4e:d2:36:58:91:d2:e7:44:24:7d:5d:6a:3a:9c:81:ce:14:f7:
         27:b0:fb:77:a4:85:64:db:65:2c:7c:a3:6e:e5:10:3c:4d:94:
         24:18:53:70:26:c6:fd:b7:49:24:dd:9e:ff:e9:79:85:e6:33:
         78:c1:07:1b:aa:dd:b2:5a:9d:d0:5d:78:37:33:d7:0b:f5:bd:
         16:e9:13:41:92:38:21:15:0d:6b:bb:1b:c5:06:ec:21:5b:76:
         d7:00:9f:32:ab:84:33:54:38:60:2a:62:02:2e:8c:8a:4b:4d:
         cf:6f:87:81:4c:2d:02:7f:1c:29:6a:dc:fc:98:d6:cd:bf:b5:
         11:14:9f:a8:bb:f2:58:43:98:12:b4:98:d6:dc:17:df:5c:3d:
         c2:fd:e2:bf:c9:34:f5:16:ec:b2:ad:98:2c:42:5a:fc:f3:b0:
         11:b7:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----