Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
File:                     BkhNH1fbDMIyb6pT06eq0mjbwmY.cer (raw, json)
Hash identifier:          5EYscmIZmEA/CuKzKXH+iO5cumsMvtdRXcpkLrJZPnU=
Subject key identifier:   06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E8F1CFA3EA61F5CEFCBD420F9B5AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.15.8.0/22
                          IP: 2a02:fb00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:8f:1c:fa:3e:a6:1f:5c:ef:cb:d4:20:f9:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:8a:66:d7:11:d2:b8:a5:df:13:e7:42:39:
                    9a:44:88:fc:f2:ad:83:ee:5a:45:f9:1f:12:67:53:
                    fb:de:17:67:46:7c:0d:0a:4a:70:c6:34:6b:cc:e9:
                    8d:02:87:ef:ca:56:3e:f2:4f:4e:af:39:f2:ff:72:
                    df:51:bb:8f:fa:93:a0:e4:56:07:f6:bb:96:21:a4:
                    1d:83:1f:9d:2e:3b:36:00:dd:ad:fd:08:b0:5d:dd:
                    4d:fd:e5:86:5c:4a:0f:9f:12:87:86:8a:f1:5e:bf:
                    6b:61:2c:d8:42:18:31:ad:d4:5b:4b:ed:ae:e8:60:
                    bb:67:05:2f:be:e1:58:7d:e1:19:eb:5f:32:39:ad:
                    0c:f5:bb:4d:bb:81:5b:59:b5:5b:81:ad:30:4f:90:
                    45:06:21:22:6e:60:44:b9:ab:2e:dd:62:c9:46:1e:
                    9d:b1:40:90:bd:29:9d:fd:30:ea:25:4b:a0:88:80:
                    c9:0c:ed:62:2e:4b:62:f5:d6:74:b5:a5:22:30:00:
                    ae:30:d1:e5:30:45:cc:de:c0:73:54:3d:ce:e5:ab:
                    50:90:19:ca:f4:1a:d5:db:2d:1b:7a:2d:5a:5c:08:
                    88:85:95:7b:c3:c5:92:fa:b9:f9:06:3f:47:68:2b:
                    43:81:75:b6:2a:40:dd:9a:43:90:0a:69:21:24:64:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.8.0/22
                IPv6:
                  2a02:fb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:10:58:eb:cb:a2:ac:37:85:0c:ec:87:57:0d:49:c1:fe:e0:
         57:e2:c2:42:90:14:89:eb:16:16:66:e9:c2:ce:f3:1e:64:86:
         08:da:79:b4:f3:42:07:6e:11:3d:ed:27:68:17:c3:b0:e4:39:
         0b:55:fb:78:46:61:b5:92:bd:78:e3:67:88:d8:11:29:da:d9:
         6d:00:b6:f2:eb:74:ad:d9:1e:9e:60:c8:11:4c:f8:af:b1:b9:
         b7:2b:18:f6:53:d3:19:bf:b2:9d:ef:02:56:38:52:c5:09:5b:
         05:12:26:d4:b5:b3:d2:c8:4f:7d:65:a7:23:52:e0:d8:46:71:
         68:f2:fe:4b:d1:9a:00:3e:e2:df:4d:b0:aa:5d:67:f8:c6:ea:
         f1:0f:f3:20:fd:c3:39:42:ba:eb:8f:c6:93:60:a5:c7:f4:29:
         b4:78:90:a2:2b:6e:ed:12:b9:c7:47:2e:d8:13:23:c7:4d:44:
         66:45:6f:3a:8b:93:73:71:49:ce:5d:5e:69:80:b7:77:12:58:
         00:1d:b8:e2:4e:06:63:a7:25:34:ca:62:47:96:9a:0c:dc:1f:
         a6:1e:cc:84:c0:f1:38:8f:80:76:d9:15:50:06:b1:7a:0f:71:
         68:b5:5d:31:d0:b2:07:e1:d0:a4:89:0b:2f:bf:1a:2f:33:f0:
         c6:8f:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----