Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
File:                     zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer (raw, json)
Hash identifier:          edJ9R6TF+c0wuX49mRb7pMcqPou8A44kXSZhVqZlieg=
Subject key identifier:   CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823373E3F4C4666CD7AA1EE129B7D2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:49:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 46.226.126.0/24
                          IP: 2a11:7b80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:37:3e:3f:4c:46:66:cd:7a:a1:ee:12:9b:7d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:49:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:d5:c3:84:ba:6b:5a:cd:97:bc:e0:bc:d0:
                    e6:81:78:28:9f:20:3f:68:36:01:ab:18:22:3f:21:
                    6f:06:cf:61:d0:02:e5:04:5d:b1:c1:a2:00:6e:2b:
                    94:d0:9b:77:15:fe:c8:c5:33:30:b5:32:b8:6c:1d:
                    25:bf:78:76:0a:98:b3:4d:49:2c:04:8d:b1:7a:9a:
                    cb:6e:32:04:96:b7:da:e3:8b:29:a8:6c:d2:7e:ce:
                    d0:e6:f5:18:60:9a:4e:d7:8b:5b:48:b7:3e:94:6c:
                    79:80:42:f4:8d:f6:50:8f:b1:19:7e:62:64:a7:1e:
                    e1:36:56:08:d9:75:9a:1b:f7:e1:19:a5:42:4f:cc:
                    8b:80:cf:05:ce:3f:cc:79:5a:07:49:c8:7d:ab:77:
                    34:f9:fa:ed:03:f2:1e:cf:2a:b2:66:ef:d1:80:c8:
                    8d:50:bc:97:81:d2:b4:52:7b:1d:a0:f9:41:70:77:
                    fa:3e:3e:01:db:72:35:24:fd:06:22:33:c3:85:59:
                    fe:14:17:55:ad:95:c5:9e:33:f6:40:de:64:41:0b:
                    31:6b:10:9e:56:fe:f2:d5:8b:04:5d:61:1b:98:b8:
                    94:49:ee:b9:35:bc:a9:2a:06:1f:aa:70:7f:99:cc:
                    d2:61:f0:35:64:77:86:03:9b:a5:84:b3:2a:c5:87:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.126.0/24
                IPv6:
                  2a11:7b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:a8:c8:11:0b:ed:5c:04:e6:c4:79:f1:40:a5:22:1a:7c:
         f2:d3:aa:b9:1a:ea:12:df:a5:c0:53:68:af:00:e4:3a:fd:39:
         d4:61:20:99:20:6c:ef:ea:90:68:28:cf:71:0b:5a:46:44:b7:
         13:a5:1a:fd:b4:43:dd:07:8c:05:2d:a8:e6:2d:27:db:b2:fa:
         5c:22:ef:11:09:04:be:ea:26:a9:0f:d2:f0:99:8f:8e:a7:f9:
         a5:a5:4d:f9:6c:4a:f2:0d:22:5b:d0:27:18:d1:b0:9e:c2:09:
         3f:55:0c:18:65:da:25:df:d9:f7:0d:1a:e1:92:b6:54:41:17:
         66:e9:89:9d:5a:08:18:a5:a3:9e:12:65:57:bd:d2:29:b2:e0:
         f8:03:88:ce:87:e7:c0:0a:91:11:36:01:9c:08:69:65:b7:87:
         22:89:90:51:47:34:82:b7:70:da:96:42:44:9e:88:a1:0a:a3:
         59:38:1e:0c:3e:99:5a:e1:d2:b1:06:c3:81:b3:9b:99:78:2a:
         f5:13:64:64:59:1e:5a:03:2a:11:2b:93:11:4f:8c:6a:59:31:
         9d:bf:79:51:4f:e1:22:4d:83:0a:3b:cf:00:d6:9b:4b:c7:83:
         3b:11:c4:95:01:d0:f1:07:55:19:7a:b0:35:f3:a1:ce:df:fb:
         f0:f6:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----