Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
File:                     Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer (raw, json)
Hash identifier:          MfbO9uYn0TNpAV3/N1b/nh98+Oun2o5ni7L5RqdhdRI=
Subject key identifier:   2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F71A9FB7540B8FD7EB919B3500564
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.240.172.0/22
                          IP: 2a00:5640::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:71:a9:fb:75:40:b8:fd:7e:b9:19:b3:50:05:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:ca:f2:78:71:4b:87:0b:73:0e:0b:87:96:
                    84:25:50:0c:65:4d:7c:06:b3:62:2a:bd:78:dc:6a:
                    41:73:c5:97:6a:fb:97:ab:58:3f:ad:15:48:00:40:
                    bf:ac:2d:b3:64:e4:48:74:1c:38:16:2c:49:63:a9:
                    b0:cc:98:90:21:2e:24:b0:54:b5:ec:38:35:2b:2f:
                    4c:f2:2d:6b:f9:55:fd:94:95:34:95:e0:93:6c:41:
                    0b:ca:71:f6:66:b2:3b:d2:fe:6c:fc:95:cf:16:e7:
                    b5:c8:63:8a:ad:c4:79:cb:d7:24:4e:43:6d:41:6a:
                    b7:56:e1:6b:56:0c:db:7b:0e:87:a0:e5:ba:5e:48:
                    61:20:2f:8f:ff:c3:a4:b0:67:19:2e:2e:41:1a:b1:
                    aa:0b:a8:5d:b4:7a:31:9e:d3:c1:46:91:e7:65:f4:
                    f1:64:71:54:f9:36:29:64:7a:12:91:a6:87:66:86:
                    82:5b:e3:f2:d6:43:bb:9f:8e:03:d4:12:9e:ea:25:
                    66:98:34:32:b3:58:d9:a7:9a:40:86:39:e4:af:c0:
                    05:69:66:f3:7a:05:5d:1b:ff:d0:bc:38:34:61:86:
                    5a:c4:cb:f4:6c:60:fa:d8:3e:96:b5:6e:dd:42:3f:
                    94:12:b4:dd:ec:05:89:3b:42:19:fb:06:a1:0f:22:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.172.0/22
                IPv6:
                  2a00:5640::/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:35:4f:ad:d9:28:bd:56:48:dd:69:08:91:f2:81:8f:ec:
         d4:27:b4:fd:8a:ef:18:ff:13:9a:85:05:5e:af:ae:81:5c:33:
         79:d6:1b:3c:f6:72:18:fb:88:95:2f:bb:e2:7a:11:aa:29:af:
         27:57:34:1b:9a:1c:cd:b5:23:14:96:e4:62:07:b2:0d:14:9c:
         87:ea:8b:c0:c3:1a:5f:af:5b:94:19:98:d2:7a:bc:38:ea:3e:
         42:9a:88:c2:46:c6:1b:f0:2a:86:f6:5b:b2:82:df:ac:74:ad:
         f8:fc:ee:7d:62:3e:34:93:c9:61:18:67:f3:ae:21:c6:cb:d0:
         7b:5d:f5:12:6a:c1:3f:cc:9b:be:a0:2f:fa:62:34:fc:b9:b4:
         39:48:3b:bd:3e:91:6f:70:d5:9d:33:35:d1:74:0e:83:70:11:
         9b:8d:30:68:84:b4:e9:ef:20:77:21:e7:27:2d:55:03:e5:d6:
         8c:62:07:c5:58:1e:61:ba:ce:62:cf:d6:b0:79:53:8a:7a:a5:
         05:7e:be:cb:8c:45:bd:0e:9a:09:e9:a2:7e:2e:7d:4b:b8:72:
         ce:74:33:0f:00:cd:87:73:5d:26:6f:fc:3d:6f:76:a8:e0:c9:
         0c:2d:a7:5f:60:a2:6c:ab:59:64:a2:16:22:ba:ce:44:a7:84:
         0f:6b:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----