Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer (raw, json)
Hash identifier:          0Q2ulf9F6UkEOnwY+hRXqE9Ug/mjaPqADbXytj3qoSU=
Subject key identifier:   77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D99AB5CE2132FD589B0ECDB359836F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 94.154.9.0/24
                          IP: 2a0f:f0c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:9a:b5:ce:21:32:fd:58:9b:0e:cd:b3:59:83:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:fc:63:61:61:1e:80:cb:cd:92:da:80:48:
                    54:93:33:22:d3:a5:85:85:18:83:4a:86:31:31:43:
                    6f:9c:75:ab:77:ec:79:74:52:73:70:2e:64:9d:dd:
                    00:f7:f2:3c:33:f8:a0:cf:d3:31:61:4e:a3:78:5c:
                    23:4a:e9:ee:e2:93:08:aa:f4:d4:86:63:6b:01:f3:
                    63:4c:46:14:d8:34:60:f8:e9:d5:73:fb:fb:8a:d0:
                    a6:60:8d:9c:26:70:2f:be:ee:5a:f4:b7:31:dc:c4:
                    0d:27:cf:51:a8:1a:c1:83:20:35:f7:85:28:07:9c:
                    01:71:ae:9e:13:dc:b8:ad:b5:ec:78:30:5b:b7:b6:
                    fd:58:de:19:24:e4:32:e4:07:1a:ab:c4:93:18:b1:
                    03:a7:36:86:21:82:42:b4:0c:a5:f6:87:02:19:a5:
                    b9:ea:28:7c:03:c4:c5:fb:c5:22:12:16:95:ea:a7:
                    ec:91:f1:3b:81:dd:f9:88:32:e5:ff:03:17:0e:81:
                    5c:9b:a7:ca:42:05:f8:3f:f0:06:66:46:1c:27:2e:
                    05:2d:e5:73:93:bf:06:e9:84:f6:af:5c:8d:e6:19:
                    cd:84:c1:b3:de:9c:15:6d:99:f1:96:cb:64:b8:ec:
                    50:b6:1b:8b:82:28:dd:28:34:f1:a1:f0:60:a0:48:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.9.0/24
                IPv6:
                  2a0f:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:be:d7:98:8b:68:11:c9:a4:2d:a9:9e:e4:79:3a:28:5a:4d:
         ec:49:43:6e:f9:d2:42:67:9e:b3:06:7c:c5:a0:98:20:4f:77:
         bd:21:18:0d:a9:0f:19:42:95:85:58:9a:70:70:b8:1c:43:c3:
         72:94:90:40:1e:2a:61:6d:4f:94:fd:79:61:7a:11:90:8d:4b:
         dd:08:e5:7c:e6:f7:f4:1f:8a:b9:f5:a3:70:91:c7:8d:1d:66:
         db:c2:9c:e4:4e:3b:61:d9:a7:61:13:5d:1d:0a:ab:97:e6:14:
         4e:84:19:6a:14:96:92:db:4e:e1:60:e3:7f:70:f9:61:92:cf:
         57:d5:96:54:16:c0:02:27:27:8e:02:85:f5:f2:92:c3:40:e2:
         7e:a9:ac:35:18:40:7e:df:f1:4e:8e:a6:ed:14:3a:b8:b0:4d:
         25:9c:11:6f:92:c9:8d:b0:bb:da:68:36:1b:a2:cb:3a:65:28:
         3e:e8:21:79:b1:51:47:81:bb:48:9a:0c:6e:9e:77:24:83:fb:
         73:cb:05:3e:93:be:cc:ad:f3:c3:7a:ef:ca:07:53:4c:93:5b:
         d7:aa:05:e9:7e:78:8b:7b:89:5a:d5:37:62:0c:b3:62:52:d4:
         95:ee:87:9f:05:be:72:00:ec:00:b5:5e:ad:31:ea:db:c8:e1:
         ab:ae:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----