Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer (raw, json)
Hash identifier:          wL+Tze5bbXyn9vl15F6X8kaABpMoWx92A8May+PvyIE=
Subject key identifier:   ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBA864C099BF6CD4C55BCDB86E1BAA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 78.41.128.0/21
                          IP: 2a02:dc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:a8:64:c0:99:bf:6c:d4:c5:5b:cd:b8:6e:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:3e:dc:c6:0b:06:0a:ca:75:a5:8e:3b:51:
                    a6:0d:ee:bb:37:f3:6b:2c:b9:2a:e5:11:6f:d7:57:
                    2a:d6:09:eb:bf:46:76:55:dd:9e:7c:a1:94:2f:83:
                    ec:86:b6:01:e3:1e:33:73:7e:a9:78:8a:4c:40:7d:
                    30:1f:73:cb:36:79:c1:16:dd:8c:59:e3:65:01:e1:
                    2d:ea:9d:5d:24:eb:31:48:4e:83:27:dd:0e:d6:97:
                    1e:4d:b4:36:d6:52:d4:e7:dd:6e:70:aa:65:b9:f6:
                    84:3c:f0:97:bf:b2:17:f8:c4:0d:cc:5f:49:c8:a4:
                    a6:4b:ae:da:95:93:3b:ae:1c:7e:69:e8:23:69:f3:
                    9e:be:9b:5b:ad:54:64:75:2d:bb:bd:2d:a2:98:bc:
                    45:b7:2f:d6:02:bd:98:54:9d:04:8f:fd:72:fb:c1:
                    c7:e5:b7:38:c2:35:aa:b4:cd:2d:f0:03:02:99:8b:
                    fb:e9:4e:a2:19:33:76:9d:21:e5:34:ec:f0:30:4f:
                    a9:27:15:95:51:a7:09:c1:9a:34:91:83:ea:1a:17:
                    d5:02:e2:5c:44:e7:45:30:24:b4:f2:11:a2:c7:5d:
                    2d:c6:c7:66:27:f0:b6:ef:f8:9a:96:72:9c:67:35:
                    4a:62:d6:da:33:77:62:94:21:7e:68:c1:19:92:4c:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.128.0/21
                IPv6:
                  2a02:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:33:07:2b:be:94:7f:70:2a:37:3b:6b:da:14:39:77:ba:
         ac:4e:81:62:89:bb:cc:5e:6e:00:af:83:df:20:03:af:7e:49:
         47:95:f5:6e:a0:0a:29:da:2e:c1:44:71:94:47:ce:de:60:35:
         ca:c6:07:50:ff:a8:fa:a3:30:92:49:74:a6:8d:4d:8d:75:d4:
         c9:2d:9d:df:14:bf:25:bc:93:d9:bb:5a:f2:12:46:3a:8f:79:
         4b:20:d9:1b:30:a7:a3:b6:83:4c:27:4a:9a:4f:40:4a:52:83:
         e7:1b:b9:4a:87:f0:1d:59:1a:f6:61:7c:54:f6:55:c5:67:45:
         78:ff:7a:99:98:7b:45:59:3e:6f:97:8f:64:13:c9:97:11:c8:
         c3:83:53:e0:79:90:99:db:15:b4:08:4a:11:7b:bf:c0:65:af:
         17:1b:80:4c:a1:39:f4:50:7c:72:58:4f:0d:36:65:7a:10:e8:
         97:53:61:82:51:57:87:ee:3e:52:1e:6a:83:c5:c0:84:fb:41:
         49:95:0b:1d:06:ea:6c:55:41:60:23:9b:96:c4:d2:b2:83:0c:
         3f:89:b2:f4:ec:84:c6:4e:53:83:c1:41:d2:a4:49:8f:02:ec:
         3f:1f:58:83:18:82:3d:6e:cb:72:0b:3c:d3:a8:0a:f9:02:2e:
         51:4c:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----