Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
File:                     4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer (raw, json)
Hash identifier:          yhjmMeqNne8ccxSvnjwGD7YG7avI0Oczx71yhM95NWQ=
Subject key identifier:   E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B387D8998091AF90214E6A0CEE9C9E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.29.72.0/22
                          IP: 2a00:a3e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:87:d8:99:80:91:af:90:21:4e:6a:0c:ee:9c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8a:3c:39:07:17:06:36:f6:f9:f6:98:22:34:
                    e1:11:24:89:e4:e5:21:31:ba:dd:f9:46:45:8f:02:
                    65:b9:2a:d6:0e:52:16:9f:81:0e:97:b8:d3:4a:51:
                    ad:bd:dd:5f:af:e6:1b:09:3b:ee:71:29:2b:ed:64:
                    d7:7f:01:3f:41:df:7e:13:03:8a:66:3d:b3:fa:83:
                    2f:58:dc:1d:5a:a0:76:3d:6f:9f:e2:57:09:f9:ac:
                    4d:5a:6f:fb:61:8a:61:1d:6e:11:74:ad:bc:28:98:
                    57:3b:64:87:97:7a:b0:9c:d7:49:4f:d2:f9:d2:42:
                    6a:d9:27:bf:a0:81:a9:3e:dc:28:8f:b5:c8:cc:25:
                    a0:71:d9:65:00:9d:c2:17:c5:34:0e:14:2c:22:32:
                    1a:b6:c9:eb:70:85:10:07:be:d9:11:23:aa:a0:1f:
                    0e:7c:39:53:4c:75:66:51:f4:5a:a2:90:22:7d:8b:
                    e8:17:4c:5c:97:76:d3:a5:34:e0:57:68:6e:4b:b4:
                    6a:3f:a6:2c:f0:b2:6b:a7:10:d3:38:e0:e6:f5:50:
                    3b:34:bc:3f:27:e2:4f:66:90:61:a8:f4:68:d3:3b:
                    c1:2a:82:b1:8f:12:e7:46:d6:66:19:61:5b:84:4f:
                    d6:4b:b3:30:ab:9b:1a:01:fc:41:6e:ed:7d:40:71:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.29.72.0/22
                IPv6:
                  2a00:a3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:05:4b:7c:a8:99:88:ff:af:0b:ac:2e:ee:38:aa:47:f9:
         60:3f:5a:ad:01:3f:01:29:7a:c3:a3:ee:d8:b2:e5:3c:8a:47:
         7b:fa:0b:9c:16:1e:37:b8:37:7c:68:1c:19:57:6f:62:87:28:
         be:f3:8a:d4:04:bf:6e:f4:4f:c3:a0:4c:f1:3d:6e:7a:19:db:
         58:b5:66:c0:70:9f:8d:77:99:d9:e6:66:d3:77:e4:68:13:e6:
         bc:a3:f3:73:ec:ad:4f:39:38:8b:34:09:4e:fa:00:2f:5d:b0:
         22:f5:ec:17:7a:0f:fa:da:be:e5:3b:c8:26:e8:c0:ed:cc:73:
         89:87:6d:35:0b:50:f8:2e:d1:4f:da:ab:55:ca:bc:b9:4a:f8:
         1a:3b:93:4c:cf:0b:8d:5e:cd:ce:5d:62:41:5b:b7:26:31:c3:
         f3:db:29:c6:df:b9:85:b4:39:07:da:24:b6:93:58:49:6c:ba:
         74:2a:cd:ba:0f:7c:18:89:28:77:5f:c4:eb:ff:1c:cc:69:ce:
         54:3b:c3:19:89:a1:bd:78:c6:b0:24:de:7b:74:a5:72:6a:3a:
         03:71:d3:8f:f9:ea:ac:e1:12:59:3b:ee:c0:e7:8f:e7:9c:d9:
         1d:d3:cd:e4:2a:ea:6a:27:9d:3a:be:c9:69:34:2b:1f:66:c1:
         ff:de:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----