Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
File:                     EJsFo11BCaHkqDTMrazdLG9WsFo.cer (raw, json)
Hash identifier:          5cJFn5RKk6K+0r1F02wvsR07S5kL3TuuAm6bgd6pAhI=
Subject key identifier:   10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067F7EA07E108DB50585DC128914A3C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.139.40.0/22
                          IP: 2a07:13c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:f7:ea:07:e1:08:db:50:58:5d:c1:28:91:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:25:b1:4f:ee:fc:fb:b5:a2:3d:3f:7e:ad:
                    61:a3:c3:a9:d4:e4:8b:1c:70:84:a0:cb:52:b5:62:
                    5a:d1:f8:87:9a:bf:79:06:73:1c:a8:af:18:10:b9:
                    30:c5:73:fa:90:7f:32:ae:e5:d7:57:76:15:ae:7a:
                    a3:f6:f4:b3:98:b6:bf:da:0f:4b:18:fc:ec:3f:e5:
                    db:5d:7b:9f:3f:88:b9:18:2a:d0:9e:c1:db:21:ce:
                    4f:23:f4:4d:67:2a:80:00:28:a2:b0:8a:d5:1e:94:
                    09:4c:18:8c:71:3f:a0:0c:c1:8a:73:e3:2c:92:0f:
                    cd:66:0c:b1:7b:3a:43:09:15:27:90:41:8e:99:53:
                    64:c5:90:8f:79:c1:d1:18:73:05:89:6e:9d:3b:d5:
                    f0:3c:9d:4b:5a:fe:e9:63:b3:53:cb:d3:a1:0b:74:
                    3d:d6:97:45:fe:24:bb:10:77:cd:a9:c8:6f:b3:68:
                    18:58:a7:91:46:8a:d5:62:90:b0:a7:73:e8:c0:ee:
                    ef:cf:af:ec:71:59:5b:c5:48:22:e1:74:6e:c7:8b:
                    0c:3d:c7:9d:a6:b2:5e:68:0d:9d:22:4c:90:54:7e:
                    87:b6:81:78:b5:c7:45:e0:8f:85:12:e5:af:6f:ad:
                    5f:23:74:06:9e:db:50:64:58:bd:15:c4:5c:33:ca:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.40.0/22
                IPv6:
                  2a07:13c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:cd:f9:ad:b3:54:e6:34:6a:bd:39:7c:e9:27:b5:27:0c:
         4d:08:00:8b:f0:0a:f0:2b:1c:73:0a:5f:45:fe:e8:2f:89:0a:
         65:b3:71:89:ff:ff:f7:63:65:96:53:53:f5:78:e9:f8:e4:02:
         52:47:76:50:c2:67:e1:28:db:ba:10:fe:4e:57:ab:a7:39:84:
         a9:86:d2:4f:3f:c7:9e:9c:06:30:15:d5:38:6e:e9:60:8f:c2:
         11:34:da:79:11:61:99:db:79:33:a3:2d:50:ae:ac:8e:92:17:
         0c:19:ac:e7:26:4c:f1:70:01:ae:69:6e:8a:e0:36:bf:25:7d:
         ca:2b:fd:f6:45:15:fe:3e:20:d6:44:b8:12:27:41:b5:0a:be:
         66:81:34:2f:27:a3:9f:9c:e8:39:98:2c:b7:2c:ae:9e:54:66:
         cb:bc:70:67:e4:63:6b:3a:85:74:30:ad:8d:b4:03:b5:a5:05:
         00:93:2e:d4:3b:cc:15:61:43:30:c4:9e:00:fb:36:da:3e:5d:
         af:e9:bc:0b:b8:f9:e4:f6:05:34:76:c4:e4:2d:5e:1d:73:aa:
         97:8d:44:16:22:02:4f:55:4c:f6:3c:a8:33:90:14:d9:5e:a6:
         ad:e9:bc:bc:4f:d1:89:2e:94:1b:ef:a7:d8:2e:cc:03:d8:dc:
         56:f9:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----