Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.cer (raw, json)
Hash identifier:          Fj2CesIlNZfx+UI6U0QbZZRL7LxPteTXHO5UlYS7FbE=
Subject key identifier:   B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428257BA0B54A012F92E174D8251212B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.149.212.0/22
                          IP: 2a02:c6a0::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:7b:a0:b5:4a:01:2f:92:e1:74:d8:25:12:12:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:40:50:8e:9d:99:77:6e:04:32:69:57:ee:
                    ce:b5:c1:67:8d:06:ae:5f:ea:84:b5:13:8a:da:1e:
                    73:8d:f4:c3:58:c9:c8:94:a7:76:eb:36:6c:44:c3:
                    22:fc:8e:8e:78:fb:b0:ea:0b:25:8b:16:e3:71:cc:
                    9b:db:49:32:ef:06:84:a4:88:5d:86:d3:ee:d3:06:
                    7a:3f:ef:67:6e:e2:b9:f6:ed:2e:73:ca:1b:c7:5b:
                    0f:a1:bd:b4:c6:5d:3a:81:00:38:8c:d3:c4:4a:41:
                    22:6c:f3:19:7a:ed:9f:0a:5d:ec:97:d9:0f:1c:7c:
                    c3:2a:2d:cf:3a:a0:15:cd:9f:ba:f8:7d:dc:96:92:
                    24:d4:38:51:dc:29:06:ce:f6:0e:7c:1d:b5:78:02:
                    25:dd:c4:f9:9f:b6:52:f4:85:8f:82:16:bb:5d:c9:
                    e8:49:d6:15:74:dc:95:d0:8f:12:dc:39:3f:5f:9c:
                    0d:be:d8:85:9d:68:2a:02:a0:c9:75:8f:32:d9:fd:
                    75:b6:bc:f3:40:c6:a2:2e:ec:76:a8:b7:5e:0f:fd:
                    00:9b:b8:df:b6:11:1a:26:38:d4:dd:70:e5:cd:f5:
                    98:77:9e:55:97:aa:7d:4e:0a:b9:6b:74:a4:7f:87:
                    86:d7:46:36:f1:60:f0:99:3a:40:db:cd:ea:0a:70:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.212.0/22
                IPv6:
                  2a02:c6a0::/30

    Signature Algorithm: sha256WithRSAEncryption
         af:5e:b0:af:9f:67:c9:fb:b3:2d:57:98:dd:fd:04:30:ea:71:
         9e:59:72:fc:47:51:52:99:83:74:89:f1:15:b8:3d:ee:18:0c:
         26:dc:f9:96:23:ca:b9:12:df:5a:37:2e:a3:a3:3d:5b:c1:09:
         1d:71:34:ed:ac:df:a3:33:f5:2b:d6:8a:c9:07:d2:2e:23:45:
         69:0b:48:c5:b7:31:b6:20:18:b2:e0:c4:96:5a:05:cd:5e:ef:
         f8:c2:05:80:be:95:e9:99:33:0f:fc:13:00:5f:ef:ec:67:8e:
         2b:c1:35:c5:ba:7c:0c:13:8a:fa:88:f8:c3:5c:16:15:77:da:
         6d:1a:4d:28:fa:de:d9:76:07:03:a8:f2:37:48:cd:f1:19:2d:
         51:6c:25:b4:47:ab:0c:4f:09:64:66:56:54:e0:1a:01:de:44:
         a0:97:ea:b7:2a:6c:22:1d:24:e6:ba:e9:46:f6:d4:5a:e3:15:
         d0:9f:1b:ef:24:30:65:fc:5e:84:1c:ef:91:d4:c5:d7:8b:20:
         77:91:07:df:e7:12:2e:1a:05:b6:67:4a:a7:5c:11:0b:c1:8e:
         a7:f7:33:84:96:18:69:db:96:b3:ac:0f:a9:3b:c9:c5:7d:96:
         07:f4:10:98:4f:37:6b:9c:bb:a4:be:23:03:3f:c3:60:d2:9d:
         2b:a0:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----