Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.cer (raw, json)
Hash identifier:          t4EPDelymY36v3/RYF/YHp0u2NzRkqh1HjOy4ENPjMM=
Subject key identifier:   FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F94B3C4F938A5992ECDC3B4B6C4A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.147.229.0/24
                          IP: 2001:67c:c0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:94:b3:c4:f9:38:a5:99:2e:cd:c3:b4:b6:c4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:0d:29:b9:30:a5:eb:14:b0:06:e6:3b:63:
                    f0:67:35:00:6b:40:e3:a7:d0:20:cc:56:99:b6:c8:
                    7b:11:39:8c:6b:bc:92:e8:d4:e9:cc:1b:b6:d4:cf:
                    d3:22:28:9d:fa:51:ee:29:fb:42:15:9f:0e:59:27:
                    89:fa:b4:fc:7d:ac:23:0e:72:97:a7:ef:11:c1:73:
                    99:93:4b:df:f5:37:25:1e:86:91:1b:f0:4b:84:f4:
                    39:20:0d:8b:23:f2:e0:4b:52:35:51:95:5c:90:49:
                    68:9e:e9:e2:08:f6:3d:39:9e:93:65:c9:41:29:6f:
                    92:37:ca:8c:20:6d:54:54:c3:0b:f6:8b:62:92:ef:
                    0b:ae:da:5f:15:9a:4a:a1:f0:fa:cf:e0:c2:ed:e3:
                    c8:78:58:ac:43:dc:79:ea:22:75:cd:41:6a:5e:fb:
                    bf:58:08:02:93:ab:27:c9:cb:47:ac:b1:6a:1b:5e:
                    91:7f:71:b8:87:ed:ca:b8:7e:98:25:33:d5:5d:ad:
                    d4:c4:0f:f0:49:14:f8:e0:be:76:fc:a9:af:5d:68:
                    7a:b9:ef:b1:4c:43:25:85:47:bc:b6:70:2d:ea:f3:
                    8c:e5:06:f4:f6:a4:03:53:cd:01:2d:78:13:38:74:
                    a7:a0:38:e1:6f:8f:f1:d4:a2:94:92:1c:66:94:43:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.229.0/24
                IPv6:
                  2001:67c:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:03:14:88:eb:12:04:bd:52:5f:ed:30:14:18:a4:4e:7b:52:
         e2:97:10:e5:b4:8b:8f:af:03:b6:ec:d6:a0:e8:d8:4f:9c:5f:
         48:ee:3b:9c:ab:1a:66:d9:5a:bd:a1:91:1f:ec:25:e7:b2:4f:
         b7:c9:ab:95:3f:14:22:29:13:d5:b0:56:4c:13:22:0a:d8:37:
         2d:d5:42:c4:ec:33:6e:9a:5a:df:40:b4:7c:9d:8e:ac:5e:3d:
         8f:fb:48:31:80:01:d5:57:fd:78:18:f9:97:2c:56:ca:7b:8d:
         b8:b4:6e:3f:d1:ff:21:08:bf:55:36:f9:77:b1:24:46:cd:92:
         7c:66:5f:81:15:19:a0:ff:94:6f:f6:60:5d:e8:64:7e:aa:95:
         c7:b8:aa:3e:a9:a4:07:8b:90:ab:df:f2:6a:e2:87:26:8c:f8:
         94:f0:d1:31:87:00:1e:62:02:ef:a4:32:b2:8e:bc:10:04:13:
         49:7b:d5:16:ec:8f:da:01:29:47:71:ba:d8:6b:4c:cd:0f:4d:
         d2:8c:64:a4:0b:80:87:1f:a1:5f:1b:2b:bd:09:08:84:32:d2:
         32:b8:01:4f:ad:9c:13:08:1f:f0:f3:8d:e8:d3:86:b6:eb:72:
         ba:b6:96:25:b7:a6:f1:ec:d0:5a:53:dd:31:82:4a:46:7a:0f:
         f4:b6:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----