Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
File:                     M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer (raw, json)
Hash identifier:          3sDp3Sis65vKwhI0IlOHM/2XCyYS6c4CPmgKa0SNMQg=
Subject key identifier:   33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FBDAD41046199F5A33DF6D43BC949
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.13.28.0/22
                          IP: 2a03:9b40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:bd:ad:41:04:61:99:f5:a3:3d:f6:d4:3b:c9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=33d2d885477d0280264e458eb071f45d91691520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:e6:b3:c0:7c:cc:df:62:f1:d8:ae:12:2f:
                    b9:a4:f0:37:3e:f3:7c:8f:8d:a3:3d:97:22:31:0c:
                    8e:95:a4:53:05:76:88:66:ec:2f:1b:ac:bb:8d:4f:
                    dd:fe:31:e2:a0:9e:74:c5:2f:1e:6f:c6:b3:da:59:
                    9c:9d:b7:b8:dc:83:b9:3d:76:cf:22:eb:29:44:e3:
                    be:a1:22:78:6d:01:81:34:17:30:a1:49:5f:fd:52:
                    b7:70:43:9e:fa:59:81:1e:fe:39:17:4b:fc:2c:20:
                    0b:61:dd:68:14:40:82:ba:5c:cd:90:14:ba:e1:cb:
                    4d:d3:13:a2:eb:b5:98:d1:ac:17:ed:a4:c2:3c:88:
                    e9:6b:5f:54:92:cb:d5:db:d2:6b:68:2a:e1:ec:b7:
                    91:92:ab:2a:49:c7:44:19:f3:2f:c3:b5:93:cb:b8:
                    a8:a6:25:de:7c:09:31:51:1e:50:25:88:cf:1c:46:
                    41:56:03:a3:2e:cf:71:c4:09:e9:f8:e3:d1:f9:e0:
                    93:d0:0f:85:b7:8a:e3:2c:6a:13:fa:83:0a:56:92:
                    86:03:0e:c5:a2:68:81:f6:5b:84:c3:10:04:7b:4d:
                    09:dd:5d:56:36:a4:0e:ee:56:24:d8:46:f9:15:8d:
                    c4:e0:cc:ff:a0:02:10:9d:28:35:cf:18:af:61:16:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.28.0/22
                IPv6:
                  2a03:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:6d:b4:03:ca:93:85:fa:7b:af:77:03:14:e0:14:42:ff:
         d0:84:3f:13:45:a8:c9:68:87:95:75:e8:8a:73:b7:0f:f7:f4:
         b8:57:19:f3:57:6b:ab:06:5f:2e:fe:ba:41:5f:d9:f2:8b:a7:
         04:7f:b3:c2:79:51:2f:d6:e7:3f:d1:e0:4b:a8:17:47:bf:f4:
         a2:d0:62:e9:ef:a7:bd:e7:05:75:99:45:1b:f8:e2:44:82:f9:
         2e:1c:3d:43:c4:f8:69:cf:46:c5:82:39:36:52:5a:31:bc:16:
         03:3d:33:53:30:cc:d2:6c:23:a0:4e:0c:43:fc:48:c9:8a:08:
         a2:5b:70:ed:13:d9:c9:0b:c8:9d:16:c0:28:cd:13:37:b9:6c:
         09:d0:b7:90:8f:e3:cb:fa:49:00:34:02:5a:f6:8d:c6:d8:20:
         10:b7:3a:08:6f:5a:23:71:18:a5:2b:ad:94:62:8a:ab:ac:29:
         58:65:a2:ea:ce:1b:6e:28:2e:e7:5a:5f:ca:4b:a9:2d:9c:7a:
         cb:b3:81:6d:f8:61:43:48:47:00:b4:08:6a:7e:cf:f5:72:66:
         6d:69:3b:6c:0a:ae:80:02:31:84:8c:fb:83:f4:5a:68:fe:00:
         5a:b9:48:1b:b0:95:fa:1b:5b:51:f3:04:29:7b:7b:40:ec:6b:
         44:a1:bb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----