Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
File:                     4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer (raw, json)
Hash identifier:          oA4D1cFgSobj9h2lV/F8qhn+oxCZEvZp5BUgXxTOg30=
Subject key identifier:   E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6C59EC9CBD7C41DC283609B932D39
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:1590::/47
                          IP: 2001:67c:15a0::/46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:c5:9e:c9:cb:d7:c4:1d:c2:83:60:9b:93:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:19:90:54:f3:29:16:32:83:71:8a:4a:0c:
                    f2:84:9e:6f:e6:0b:d0:97:29:db:e2:44:83:b6:4e:
                    29:f8:ff:ef:d3:98:3b:1c:b3:35:e8:04:12:20:d2:
                    38:8e:de:c4:9f:aa:33:7a:ac:07:a3:6b:ce:2d:20:
                    63:ff:35:30:fc:48:8b:e7:7f:18:45:df:5c:f2:c1:
                    42:d7:27:75:75:f1:00:23:e6:9a:cc:de:b3:9e:c8:
                    2d:02:b3:ce:d9:01:96:4f:fe:92:50:d4:93:3e:18:
                    c0:01:b8:39:b5:8b:18:cc:e7:6c:9d:cc:85:28:74:
                    1b:aa:71:44:72:bc:fa:a9:07:db:5d:26:97:f4:7a:
                    8a:8b:97:c9:c8:8c:08:0d:7d:27:81:f3:8a:be:b8:
                    29:78:2b:94:72:38:11:b5:bc:19:09:6c:07:41:ef:
                    f1:94:fd:0c:90:85:13:40:3e:c7:29:aa:08:ad:b7:
                    e6:75:a8:6e:81:ab:6f:96:ed:38:ec:bc:ce:b4:c5:
                    40:49:63:55:14:a8:3f:ff:44:d2:24:03:79:fa:b6:
                    23:50:1b:54:3e:05:dd:88:c6:e1:82:81:ab:d2:e9:
                    13:c1:b0:5d:67:27:2f:95:db:e7:e3:a6:43:81:63:
                    fa:aa:e5:32:14:af:48:94:0d:b3:00:84:5b:3a:b1:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1590::/47
                  2001:67c:15a0::/46

    Signature Algorithm: sha256WithRSAEncryption
         81:65:9c:6c:4e:4a:f2:f4:49:d7:13:ac:87:95:f7:53:f7:cd:
         37:62:52:64:9b:97:56:be:5f:05:14:7e:63:a1:05:a7:56:9f:
         8b:e7:ed:f0:9e:59:62:fa:af:47:0b:18:09:1d:82:7d:88:1d:
         b6:0e:47:1f:18:51:f9:21:5e:1b:a0:3e:e2:ba:92:c6:81:17:
         a3:93:ac:fb:da:58:9e:04:5b:11:db:4c:ce:d9:ae:ca:a1:e6:
         c5:96:38:b9:82:99:f4:de:b1:42:92:95:18:23:f0:fd:b4:e4:
         78:5d:26:bd:37:26:bd:7a:e5:d0:95:52:3b:e0:aa:b6:42:ec:
         10:66:a4:70:ce:97:66:4f:0b:28:7d:75:5c:05:23:9c:08:29:
         50:b5:38:b7:98:a8:b0:ed:41:11:5c:41:99:e8:ea:66:cf:e0:
         08:52:28:e9:00:b2:8e:6d:42:e0:d7:1a:a9:88:d4:64:10:7d:
         ad:55:9d:de:08:95:59:9c:e5:b1:3c:5b:43:9f:fb:2e:27:27:
         de:d9:e8:f6:b7:d4:bd:78:ac:a3:62:c6:70:d7:9a:03:28:f5:
         2e:c4:56:5d:ad:0b:0f:ae:7e:fe:25:40:5d:03:3e:6f:35:8b:
         1d:78:d9:3c:95:a2:6e:5a:9e:62:e5:69:7e:48:fe:ee:e6:4c:
         40:19:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----