Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.cer (raw, json)
Hash identifier:          jAEZr+svinUwzYxGIk3T51L6GjGxfPmO/QiomBEURO4=
Subject key identifier:   77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDABDC57617F3A6E3B5AF85480EBE1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 188.94.232.0/21
                          IP: 2001:36c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ab:dc:57:61:7f:3a:6e:3b:5a:f8:54:80:eb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:cd:de:e6:ca:e3:10:49:12:51:e0:0e:77:
                    24:f1:c0:97:cb:37:57:10:58:3b:8a:70:0f:dc:7c:
                    c5:94:33:ae:ff:90:d4:c3:dc:b9:78:46:ed:39:63:
                    b3:27:83:84:a1:42:b0:a0:1d:41:c5:20:49:51:ac:
                    88:2d:68:04:23:c9:5a:99:6b:7e:eb:ae:a8:a8:97:
                    08:81:85:2c:b6:ff:47:9b:68:ae:ab:4d:11:ee:72:
                    ce:85:a1:53:16:f1:a4:94:a8:51:bd:37:aa:47:5e:
                    65:e6:e8:21:a2:23:9a:99:c8:97:b4:ed:ea:98:58:
                    f4:89:c8:2e:ef:53:4d:23:a3:09:c2:3c:35:26:9d:
                    50:0a:01:ec:f2:a3:80:33:9a:55:4a:59:e2:df:3c:
                    64:31:e5:c0:71:91:e8:a2:1d:c8:d5:35:b0:4a:13:
                    ec:b9:61:39:42:30:47:cb:9e:a6:87:05:1d:31:3c:
                    14:29:28:91:e1:7a:e1:f9:62:54:37:f8:00:f0:4d:
                    4b:e7:eb:e3:1a:4b:af:80:f3:0e:5d:25:fe:96:21:
                    aa:74:bf:d9:f1:22:1f:cd:41:ce:1c:37:de:42:b4:
                    eb:c0:6e:73:e6:93:80:ef:55:09:86:0f:7e:08:01:
                    56:cf:9f:9c:72:60:ab:1c:25:da:89:2d:02:cc:79:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.94.232.0/21
                IPv6:
                  2001:36c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:4b:e1:f4:3a:4f:01:37:2c:5e:a1:02:bd:e3:c5:3f:b4:ca:
         1e:b8:e0:35:50:ef:f4:97:5c:5d:20:6f:e0:63:7d:f7:3b:46:
         fe:f1:40:b3:f4:fb:38:cd:6e:b4:f3:ae:0d:48:ea:d7:71:8b:
         95:16:c8:38:36:a2:5f:db:4e:af:12:cf:47:60:1d:7a:8c:c4:
         48:9d:b6:54:2a:7d:17:b3:e1:1b:a9:44:21:17:eb:87:47:22:
         65:72:4d:b0:b3:c4:ed:37:af:2a:59:6e:71:93:0b:00:5d:bb:
         03:b8:a4:9d:b6:a5:8a:f6:c8:d8:3a:40:79:e1:74:7a:c2:09:
         82:fa:e2:51:d8:7d:9b:e8:14:d6:09:80:86:27:bc:cc:00:63:
         e5:11:38:69:a4:00:3b:23:92:d3:d2:6a:4b:59:03:5c:8e:ff:
         46:b2:21:26:cd:13:63:a3:07:d1:df:a3:6c:0e:96:56:54:c1:
         59:d4:6e:ee:cb:59:85:df:31:05:2d:b6:d6:3f:6a:02:ab:b0:
         6b:2f:4b:6a:b3:71:be:6a:3a:a0:79:01:1c:51:2f:fc:13:f7:
         f1:50:52:d8:b3:aa:f3:ac:97:c8:72:da:b2:5b:08:a5:12:ac:
         c6:ff:78:eb:ce:8e:17:ec:a3:c5:7f:af:a5:22:f0:5f:db:8c:
         d4:44:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----