Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
File:                     KT0QRM1I1hcW11ngIN29qoFNXNU.cer (raw, json)
Hash identifier:          XH212StvOtRLgS3P5W3Li5nnbUnsOkCd2zbaBAvLnO8=
Subject key identifier:   29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5D7A43B710DA49B69F5F946BB915
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.230.112.0/22
                          IP: 2a0c:7300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5d:7a:43:b7:10:da:49:b6:9f:5f:94:6b:b9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:ad:a0:c4:96:f1:1e:0f:33:ba:9b:0a:d3:
                    db:e9:89:f8:8d:d1:38:5a:1e:2d:21:14:8f:13:68:
                    4d:ac:b0:8a:63:f8:74:1e:9b:50:74:bb:34:e8:fd:
                    cf:95:f7:2f:67:94:58:fc:5d:e4:bf:16:f0:49:2a:
                    d9:71:23:93:a6:b2:fa:0c:df:f7:4e:4d:7b:d5:a9:
                    4c:e2:ea:ad:2f:66:ec:92:94:df:61:c6:fe:3c:ae:
                    37:75:7b:9b:26:4d:6c:44:b8:07:81:e8:1c:0d:2a:
                    38:82:dc:6c:82:e8:f8:4c:98:86:0a:c0:90:d1:cd:
                    c5:54:37:6c:3d:0a:3e:1d:d9:38:b8:19:3d:67:79:
                    18:5d:d4:39:32:38:77:13:df:d2:b8:6f:ba:80:06:
                    89:91:ed:40:93:d4:50:9b:f9:32:b8:82:ce:d5:86:
                    33:94:1e:d2:2d:70:8e:a0:1e:b3:b8:35:af:22:9d:
                    e7:1d:9d:68:c0:a2:7c:73:31:fc:37:b6:12:29:67:
                    8a:97:95:e8:2d:34:2c:4e:71:8c:4e:38:bc:fd:e3:
                    39:93:75:4b:1b:6b:23:68:a3:4a:21:dc:84:13:d4:
                    86:ad:18:a7:03:e1:c2:8a:52:5b:7f:ea:b0:fe:ad:
                    ff:2d:07:17:bf:ec:2a:6e:ca:f8:e1:5d:86:89:a6:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.112.0/22
                IPv6:
                  2a0c:7300::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:7a:bc:ff:f4:ca:6f:1d:50:bd:0b:fc:58:b0:45:fb:19:
         b8:e2:3b:d1:2f:cd:e3:3b:a2:fc:41:1e:f1:e2:35:31:16:92:
         9b:bc:ae:b0:95:a5:1e:44:ae:cd:c8:7f:18:2d:6d:01:2d:21:
         0b:b2:5f:0e:c9:2a:58:3a:46:77:a8:2d:51:7d:30:76:38:d7:
         ac:06:40:13:f1:52:66:9f:dd:dd:44:d5:ad:b9:b3:bf:29:86:
         17:a3:88:0c:8f:ae:dd:cb:e8:60:f0:81:31:a1:a0:5b:08:65:
         27:28:56:36:b2:88:e4:f5:be:66:de:4c:57:87:cd:59:6d:54:
         ac:ad:7c:b1:1c:82:57:76:f0:14:a9:09:c9:71:85:2d:ef:cf:
         6e:58:14:d6:c3:44:95:7b:0b:dd:a6:f0:6f:0b:34:ac:af:7d:
         01:03:a3:8e:0f:ea:ac:c2:da:ff:4f:af:16:a9:13:fd:64:ac:
         d4:3e:7a:1d:9e:ee:b4:df:71:08:bb:d8:d8:15:67:67:03:a3:
         64:5a:a9:5d:ce:0d:c4:c3:15:a2:c6:b8:49:f7:87:00:21:97:
         d5:77:a7:ca:75:3b:28:5a:6f:df:6a:80:50:e3:a0:c5:93:33:
         2e:3c:b1:07:3e:1e:c9:71:81:6c:e3:95:16:27:7c:37:d4:bd:
         97:97:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----