Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.cer (raw, json)
Hash identifier:          Tq52LrQ20Wkg/aRAlchnzLjE9k9HucBaePe6srkbMss=
Subject key identifier:   D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1DBB647828D6BA7ACAD2F5E833351
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35838
                          IP: 178.255.80.0/21
                          IP: 2a02:1788::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:db:b6:47:82:8d:6b:a7:ac:ad:2f:5e:83:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:68:70:fc:a3:46:ae:88:b4:8b:a5:c7:31:
                    73:bd:91:3f:0b:9a:5e:fc:d2:0c:bc:4f:9f:07:fd:
                    22:35:33:47:ce:d4:54:e0:26:2e:14:20:06:27:b9:
                    0c:35:40:15:ce:af:62:27:ae:b9:c0:79:58:84:29:
                    b1:1f:72:80:97:b1:f6:13:d0:f9:9b:ef:ec:fb:9e:
                    46:04:19:90:14:f7:9a:f0:76:70:a2:dc:36:9a:6c:
                    16:f5:ca:b5:9a:2e:15:1c:08:0c:dc:ae:7b:cb:e0:
                    fb:ff:37:ef:27:eb:91:3d:e6:bf:50:b5:5b:52:05:
                    ed:f9:14:76:19:86:a8:ca:2f:45:0e:b3:45:29:42:
                    97:81:0a:76:6c:b8:7d:49:79:5e:5e:49:c4:d1:c6:
                    27:a3:18:d3:06:f7:87:fa:f9:a8:a2:70:42:7a:dc:
                    6f:20:94:be:a8:08:75:b7:e4:03:7d:bf:82:84:26:
                    5e:c6:96:2e:5e:95:a3:a6:d0:00:73:24:8a:59:c2:
                    d8:41:5b:14:d1:b1:7d:c7:c0:2a:32:b5:e8:9f:68:
                    be:e9:1e:7d:6f:9c:50:ce:c4:c9:ea:92:b0:4a:d5:
                    38:22:67:a3:e8:f4:fd:9b:14:72:fe:6b:c3:44:54:
                    61:2a:c0:e0:08:e2:8a:d2:b3:c7:9b:d7:23:58:9b:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.80.0/21
                IPv6:
                  2a02:1788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35838

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:6c:fd:85:c1:0a:df:49:32:d6:95:a3:59:61:d7:ad:02:
         6e:20:ce:95:7a:37:58:5d:87:4e:c0:61:dc:ba:fb:98:83:ba:
         9c:64:0c:bd:80:ca:90:1e:c9:31:e2:ae:72:f1:5f:7c:f2:7a:
         71:a9:a6:a1:23:ce:79:1b:4e:19:ae:65:06:e6:0c:62:db:58:
         81:27:24:0e:32:08:89:a7:ee:c3:55:41:18:7e:67:94:b3:a1:
         2e:be:96:22:18:03:87:ca:07:f0:83:27:c3:98:bb:e6:72:c7:
         5d:8b:31:25:d8:80:09:3c:73:6b:52:34:3a:85:d6:3c:f4:ab:
         2f:10:9c:35:5d:6d:88:ce:53:d9:2a:ea:1e:cb:9a:ef:40:7c:
         cc:6a:35:24:67:01:bc:ed:3d:fd:03:d0:62:96:7d:e9:0c:70:
         b0:cf:5c:a1:10:bd:21:5a:c6:fa:9a:62:b5:c9:58:11:31:e2:
         d9:a3:30:02:59:ce:a4:f6:d5:6a:f9:89:a9:3b:8e:4b:f2:54:
         ab:94:70:9b:e3:d6:71:02:15:d3:1d:72:97:11:9e:68:08:e9:
         65:50:0b:af:82:0f:8c:f2:6f:37:54:42:04:2c:5b:ef:0a:d9:
         fe:60:e5:46:48:a6:fa:a4:12:16:dd:b8:19:8c:86:db:a7:a6:
         4f:21:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----