Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.cer (raw, json)
Hash identifier:          8ioKxaSESL+1yg5c1sBb0BY6UHGhc2go943HMlddoNI=
Subject key identifier:   6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143C2E4A0CBBA530018BF294B004342
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.91.8.0/22
                          IP: 2a05:e580::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:c2:e4:a0:cb:ba:53:00:18:bf:29:4b:00:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:82:0d:94:14:84:b5:45:55:50:04:78:3a:
                    47:69:1e:c4:1d:7a:2e:54:28:11:98:2c:c0:e2:03:
                    1e:64:cd:8d:f5:d3:11:1a:1e:18:07:4b:b0:e3:10:
                    12:df:b6:e8:ca:c0:51:c9:14:d7:96:df:8d:7d:4c:
                    fa:87:6d:9c:89:3e:d3:46:20:d2:c2:9e:5e:1c:63:
                    f4:b2:2a:4c:61:f9:c9:ba:f4:39:e3:33:07:ab:81:
                    ea:86:47:71:1b:74:01:e2:4d:7e:39:61:b1:67:d6:
                    74:5b:9b:88:b4:99:f7:36:9a:73:e9:6a:55:e2:f3:
                    4e:fe:7f:05:f1:fc:85:1f:fe:97:e6:40:46:2e:92:
                    06:a8:28:17:25:24:90:c9:45:ff:b9:bb:21:4c:6f:
                    d6:d4:bc:eb:69:47:fc:61:1e:38:d2:82:76:2e:81:
                    48:85:b4:26:bc:87:fb:b8:75:6a:51:eb:a5:55:b2:
                    15:7f:3c:33:33:56:4b:26:77:8e:e7:48:b9:81:df:
                    71:79:d8:27:e4:03:2a:89:36:b0:c3:8f:ea:85:d8:
                    d9:47:ff:14:f1:c2:92:d2:23:79:2b:34:de:b2:ad:
                    df:53:90:cf:b0:d3:1f:f4:1c:89:50:46:34:07:e9:
                    82:3a:69:b8:cf:41:49:27:91:4c:67:eb:25:62:41:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.8.0/22
                IPv6:
                  2a05:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:dc:c2:ae:3e:73:5e:20:f9:65:05:cf:e7:fa:21:90:68:
         36:bb:f6:9c:dd:af:b2:2d:69:8a:ec:95:6e:d8:a0:92:4a:39:
         55:5d:33:8c:a6:af:f8:c3:3d:15:50:83:6f:5c:1c:19:71:b9:
         0d:8e:5b:ed:30:bd:45:c8:2c:4b:b7:36:e4:2f:21:4c:59:64:
         49:27:e0:82:1f:97:cb:14:92:f6:8d:af:99:2f:6c:8a:b7:e5:
         8d:7d:20:90:cf:0a:ad:8e:f4:6c:6c:21:59:0e:cc:f1:ea:f8:
         e3:05:b5:3d:8a:53:c1:8c:57:2a:29:6f:3f:50:34:a0:91:a0:
         bf:f1:84:68:e5:00:71:4a:3c:10:e3:de:9c:5f:0c:a3:e3:e2:
         fd:12:c5:d1:72:b4:f8:57:ea:5b:4a:ec:d0:e1:14:32:f0:cb:
         5b:86:ff:c5:a8:fa:a8:1e:e6:6f:72:7f:24:7d:49:04:3f:4e:
         7b:2b:9f:f5:40:88:d0:af:20:b6:68:99:0a:d4:ac:8b:61:4e:
         9e:c3:8c:0f:10:49:d6:7c:89:4a:0e:53:d7:15:17:27:99:b7:
         b2:0d:29:79:a9:71:e3:bc:05:31:26:f9:f1:f4:a5:ef:a5:34:
         78:b4:51:49:96:d5:b4:ac:b2:12:01:19:63:e4:3e:f9:39:1e:
         80:bd:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----