Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
File:                     iVVHgNslskPAotNhl5sTCn8Txg0.cer (raw, json)
Hash identifier:          l0vv/5h1pUtc/Dld0o39iBHBrmMP6ZfCvLzEeNPwAC0=
Subject key identifier:   89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F816451CE115A4A58639992E4E22C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.75.156.0/22
                          IP: 2a05:5340::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:81:64:51:ce:11:5a:4a:58:63:99:92:e4:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89554780db25b243c0a2d361979b130a7f13c60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:9d:88:54:74:d9:d5:31:c7:33:cc:91:80:
                    b4:18:35:a8:79:4e:2c:3e:83:44:8d:2f:d3:b2:df:
                    98:5a:74:a6:91:84:6c:44:88:4e:4a:d3:f6:32:e0:
                    43:4f:0e:b4:78:ac:3e:a0:a6:df:65:71:8d:2f:59:
                    56:f9:0a:08:a5:e3:b3:4c:7b:2d:79:79:2e:b6:fd:
                    dd:42:00:dc:f3:ad:94:75:c2:d3:a3:4f:0f:27:e8:
                    4a:8d:14:e4:45:ef:3e:40:70:22:09:71:ab:4e:1c:
                    c1:17:8d:77:e2:48:9f:39:0a:0d:3e:17:20:a5:eb:
                    49:81:a7:4b:a3:7d:39:77:5d:dc:a5:e9:77:61:43:
                    13:36:8b:66:fc:99:e8:7f:63:df:79:67:b1:eb:2c:
                    9a:b7:e9:97:2a:82:57:9e:bc:f2:8b:92:00:c6:3c:
                    6b:64:3b:02:bd:ef:62:90:19:29:f0:09:38:ac:04:
                    c0:08:b9:91:99:13:85:35:ea:83:9e:89:72:4d:eb:
                    9b:f1:2a:38:1e:1d:57:fa:4a:a5:5f:2a:75:34:8c:
                    2f:ff:a4:09:4f:49:5e:4b:87:fb:81:20:d8:2a:79:
                    4d:7b:49:2f:c0:b3:3a:cc:04:56:2a:86:f4:83:4f:
                    4c:05:c7:65:f2:21:79:ae:75:c5:93:53:7a:7d:be:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.156.0/22
                IPv6:
                  2a05:5340::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:fa:60:06:f9:69:78:34:9c:95:b7:27:31:5e:26:f8:2d:
         bb:ed:3b:5a:ef:d7:d2:4f:75:ba:b8:87:7d:8d:12:1d:31:67:
         e5:f4:16:1e:46:c3:22:ac:ba:5b:c9:f5:0e:ea:fe:c7:54:a2:
         0f:3b:85:96:d4:1b:21:67:20:41:1e:74:60:42:97:ad:97:53:
         fc:0c:c9:d0:80:b4:46:a7:90:95:1c:3b:29:7a:00:c5:3f:56:
         6d:e3:12:72:18:21:30:23:6d:d7:28:a0:2f:88:b7:60:83:26:
         8d:82:83:f2:c2:52:ff:ea:60:3a:63:4b:d2:d5:9a:14:86:fc:
         8a:41:60:52:15:bf:40:3d:d4:15:59:5b:a5:a1:a1:3b:d3:26:
         72:5e:93:1f:6a:1b:a1:b7:96:6e:27:31:d0:b0:14:93:5f:6a:
         b5:05:02:8a:46:28:fd:d4:42:30:28:16:5b:48:48:65:f9:fc:
         d2:3c:49:7c:c1:58:4f:5e:b9:43:c6:a9:ef:70:ac:2a:d8:0f:
         48:87:c5:cd:de:cb:3d:ce:e1:63:ac:bb:ef:ea:9b:21:a1:e2:
         d1:f4:87:b2:74:32:d9:fa:cd:51:79:f2:b3:cf:17:c8:79:3f:
         03:4c:33:03:ba:2d:5f:11:43:e9:91:52:06:fc:0e:11:d8:b4:
         01:4e:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----