Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.cer (raw, json)
Hash identifier:          Q83GQvcZop3fSf/EXdPibCHZuZVrWLvkikdrUF8MB+I=
Subject key identifier:   07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA71BBC52A01646BEC23B149ABD798
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 146.211.0.0/16
                          IP: 2001:67c:19b0::/46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:71:bb:c5:2a:01:64:6b:ec:23:b1:49:ab:d7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:63:2a:61:91:60:63:bc:e0:25:4a:5d:64:
                    dc:dd:a3:92:ec:2c:fc:ec:5d:0f:d4:71:96:7f:e7:
                    60:4d:0b:8f:7d:8e:e3:91:bc:49:71:05:1b:d6:1a:
                    f1:38:46:e6:e1:b3:3b:db:a7:95:78:6a:4a:6a:c5:
                    62:9d:c4:eb:4b:2f:5c:86:96:5a:b7:d8:5c:54:0f:
                    e5:f3:9f:af:8d:99:90:f3:6f:2e:39:7a:1e:54:d4:
                    02:c1:df:6a:30:d8:f8:f1:ba:bc:7c:20:e9:fa:5f:
                    ab:9f:52:8a:d3:e3:6f:2c:c4:ad:79:a8:65:12:2a:
                    39:e4:07:34:2b:2e:c5:e0:3f:65:26:8e:91:4a:59:
                    f0:f3:6f:37:8d:e0:84:a4:46:e3:6b:41:2d:49:ff:
                    b1:e8:50:ef:d5:83:d8:32:59:ec:d4:66:3a:02:74:
                    ca:7d:57:30:6e:bf:4a:e0:a8:44:c7:03:c0:10:d6:
                    31:55:95:93:73:8b:5a:3e:a6:59:9a:b7:fe:3e:3a:
                    a2:d4:8b:74:6a:b3:a1:db:0c:c7:61:45:3a:dc:d2:
                    a2:af:62:3c:b5:11:fc:43:c2:a5:37:a0:51:9f:33:
                    b4:ca:96:6c:92:dd:af:7c:80:a5:85:16:3f:dc:c1:
                    98:e8:39:9c:2d:57:ec:8d:66:c8:c2:38:b6:c3:54:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.211.0.0/16
                IPv6:
                  2001:67c:19b0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a8:82:ad:8f:58:4f:4a:97:25:58:56:aa:5a:89:8f:42:9f:ff:
         ed:62:63:28:63:6f:fb:e1:af:52:c9:a2:b0:88:79:4d:77:64:
         a0:3c:60:12:dd:3e:43:de:ad:39:80:71:83:b6:ce:81:c5:0d:
         73:09:ca:57:e5:57:5a:00:42:93:9d:fd:16:14:fd:89:fe:80:
         5f:b4:c3:4f:53:fa:40:b1:91:e8:01:1c:a7:32:cc:d3:da:08:
         fb:d4:8b:f7:a7:93:6c:b9:15:d8:16:4c:73:9a:98:52:9b:62:
         ff:1a:0d:01:a0:34:d8:8d:d8:48:43:da:44:3b:17:c1:a4:3e:
         65:98:27:8e:b3:0e:22:be:f6:f6:09:3e:7e:ae:20:68:95:cf:
         26:a6:3a:46:ef:5a:0c:6e:c1:d9:f0:6c:87:c0:6f:48:46:20:
         a9:3a:bc:87:a2:98:d5:33:ad:c4:20:17:32:7c:56:2e:50:a7:
         0c:22:4a:a4:af:c4:6f:13:a2:dc:26:98:5b:5c:9c:dd:e7:eb:
         8c:0c:56:6f:8b:a4:6f:c0:f1:e5:f1:8d:90:15:df:a3:2f:98:
         ec:40:a6:7d:68:4c:02:59:94:72:e5:e9:8f:71:0c:f5:a6:84:
         ce:31:ce:91:a5:79:a0:e6:89:04:44:5f:3e:52:db:cc:ae:c0:
         6a:4b:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----