Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
File:                     sxxM5mPh7CRedHzYRvGmnduDSzs.cer (raw, json)
Hash identifier:          LnN/hDCxYuMrl7nr4BCPzx1KCflCCqYjXbqCf91MoSg=
Subject key identifier:   B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244480D43FD53F87B6DCCC36D4162D86
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.216.71.0/24
                          IP: 2a14:1cc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:80:d4:3f:d5:3f:87:b6:dc:cc:36:d4:16:2d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:2e:5d:61:b9:ac:03:71:c6:78:3b:d7:12:
                    20:a6:a0:2f:ed:3b:38:3f:ee:b6:aa:9a:3d:dd:aa:
                    20:dc:c2:56:d2:0b:42:c1:e8:9c:4d:75:e9:04:e8:
                    fc:60:64:7c:49:26:d0:37:41:fd:50:04:61:24:ee:
                    a7:13:9f:bd:be:36:9d:78:36:b5:ad:07:8d:50:03:
                    89:e8:33:4e:ec:14:9f:2c:7e:1a:70:72:18:d0:b6:
                    e4:7e:2f:2a:71:0c:a3:5b:14:97:9e:f7:bb:de:cf:
                    0c:84:6b:53:64:f7:51:c6:80:1d:07:5d:20:8c:f5:
                    76:5b:f1:b8:e7:64:d5:44:9f:df:49:b5:5f:f5:5e:
                    13:f2:dc:8a:c7:3e:22:09:83:d2:38:ed:a8:c6:3e:
                    75:53:ca:d5:22:f0:a9:9f:a1:dd:e9:7b:d6:2a:28:
                    15:37:2c:7d:8c:4a:2c:8a:11:1b:67:9b:28:8f:9a:
                    36:72:2c:42:3a:c1:c3:2d:45:86:02:cd:14:35:1f:
                    93:ce:22:af:ec:bf:72:f7:bb:ba:5b:65:bf:a0:70:
                    47:bd:e0:15:68:fa:f1:48:4a:c6:d4:a2:89:93:d0:
                    51:b3:fb:9e:45:5a:17:fe:f6:e5:e7:95:14:52:12:
                    bf:fb:35:bb:77:14:b0:88:92:23:3f:ac:3f:28:9a:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.71.0/24
                IPv6:
                  2a14:1cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:91:18:c8:65:d8:d0:c4:ec:12:63:68:4d:a6:ff:e6:33:
         4b:cb:6d:bb:05:5e:34:1e:4c:d4:ee:bf:bb:94:c2:d1:ba:9c:
         6b:a7:5d:ae:ec:8c:eb:73:98:c9:1a:8b:d3:a8:8c:76:1b:f6:
         2a:b3:39:6b:e4:65:b6:9b:85:17:b1:d8:9f:6a:88:36:99:aa:
         b1:9d:b4:45:16:4c:61:a3:65:2f:37:59:3f:92:ac:e5:02:9e:
         46:85:7e:84:22:fe:fe:70:d1:e2:37:9e:b7:d2:13:30:12:e1:
         14:f5:66:e5:83:2b:20:d5:6a:11:f9:6e:f7:b2:5a:9c:26:48:
         60:9b:50:7d:7d:e3:83:11:17:0b:aa:77:1f:18:e3:a1:37:67:
         e9:d0:20:e9:4b:a7:84:82:a7:e2:ab:ff:66:1e:8e:a9:dc:a3:
         e4:40:21:bf:1e:41:16:0f:ce:8b:f3:e5:bf:a9:95:5a:54:ce:
         d1:20:78:29:03:75:47:fc:d8:74:de:95:28:38:ae:e6:51:0c:
         3c:72:a4:1d:d3:15:ee:2a:26:b7:c2:d7:88:e5:6c:4a:9f:89:
         a4:76:ed:2a:14:2e:f9:d5:cb:dc:17:0f:ca:60:fb:9c:1f:73:
         a9:19:47:43:13:ff:98:55:72:d9:13:df:58:17:05:79:a5:e7:
         6a:fe:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----