Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
File:                     S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer (raw, json)
Hash identifier:          clvO1RyJilhk6ctt5vHMoGwZ2YXfLdPhmFCVbhlSlzs=
Subject key identifier:   4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421441F9315C1845F22B9A34711E42C1F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.200.122.0/24
                          IP: 2a10:7740::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:1f:93:15:c1:84:5f:22:b9:a3:47:11:e4:2c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:8b:b7:a7:f2:59:3b:97:15:77:bf:31:dd:
                    32:d3:79:eb:f6:7e:e7:80:37:04:89:ac:cb:88:55:
                    f6:a1:17:19:98:6f:b4:1d:bf:0d:8b:00:3b:67:15:
                    5e:82:2b:70:93:a3:33:54:98:df:fa:10:4a:85:4e:
                    ff:da:40:c7:d2:2a:f4:4a:62:f3:38:33:ee:07:33:
                    41:f7:97:26:3e:2b:76:e7:e8:e7:dd:e3:b4:ce:26:
                    40:60:66:ec:bd:16:41:1b:ca:85:e8:a8:33:86:fa:
                    5f:73:ae:2b:33:ab:d7:4c:b7:54:cc:5a:97:60:a3:
                    7d:68:62:5d:07:fa:0e:77:c6:44:63:b6:a0:6d:b8:
                    b0:39:22:80:c3:34:84:24:6f:30:48:d5:75:de:f3:
                    4e:1a:96:d8:0f:3c:33:48:e4:03:37:19:90:df:c8:
                    18:18:cd:b0:44:0f:23:0b:bc:08:95:d6:b9:0c:3c:
                    f4:17:80:2f:f4:00:fb:21:fa:73:90:10:40:d1:34:
                    1f:18:75:9d:52:36:5f:15:f6:eb:43:ad:fc:5f:38:
                    cb:de:92:df:67:b8:82:99:2e:f3:93:b8:d7:1a:f3:
                    e0:29:a4:25:10:71:df:60:8d:0d:c8:74:bf:ab:1e:
                    11:9e:de:dd:a9:cb:44:9b:bc:b2:9e:c4:1b:3d:35:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.122.0/24
                IPv6:
                  2a10:7740::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:36:08:78:ce:3e:8e:ef:01:50:b4:fe:41:9f:72:c6:14:
         ee:bc:5c:86:d4:f7:ec:e8:a3:85:8e:31:b1:0f:b2:4f:a8:5c:
         b4:ca:fa:85:83:1d:e6:fd:6d:5e:f5:1a:95:26:0a:fc:6c:42:
         a7:f7:db:86:df:65:94:e5:2f:39:34:3e:d5:a6:f9:ca:4e:8a:
         d9:e9:36:d6:d4:fa:f1:af:b8:2a:fe:08:49:84:58:28:a0:0e:
         fa:e3:b2:76:2b:15:f7:79:69:f6:3e:2a:b9:c1:eb:96:f6:a9:
         f0:77:16:f0:5b:0c:73:52:ae:9b:60:a5:ca:89:9b:ef:41:dd:
         12:20:e4:bd:8f:de:fe:3a:32:b5:e0:b0:24:6f:69:e4:c9:28:
         55:a0:a3:7d:71:35:d3:03:7d:ec:a7:5e:d7:6a:ff:fc:eb:54:
         0e:bb:9f:a9:8b:e5:7a:1c:00:d6:02:b0:61:07:2f:b7:8f:2c:
         41:01:80:89:ca:ae:f6:3c:b2:5e:b0:43:f1:6b:fa:9c:6b:3a:
         c7:ed:ee:a2:f9:2c:bf:eb:6f:a7:0e:2a:c9:10:09:1f:4e:4b:
         3c:06:01:de:7d:df:76:8d:49:1f:53:fd:6c:b4:ec:49:7d:10:
         1e:ab:03:56:7d:9a:de:28:46:4e:b4:78:8d:54:43:02:0c:5f:
         1c:76:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----