Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
File:                     0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer (raw, json)
Hash identifier:          5BnN8pOXRr8rBZn/SwJbdEx0FsBAaW/OHks+RH4kQCI=
Subject key identifier:   D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942522183D11429EB6A39E194F49BB530F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8440
                          IP: 212.6.0.0/19
                          IP: 2a00:8b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:18:3d:11:42:9e:b6:a3:9e:19:4f:49:bb:53:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:51:ae:97:8f:7d:75:f8:16:a2:c6:78:92:
                    8d:49:f4:e1:c1:b1:40:eb:93:03:9f:cc:7f:77:b5:
                    32:58:dc:be:13:46:8c:da:8c:2d:fd:3f:59:3c:f1:
                    55:80:3b:32:90:31:cf:75:4b:63:79:17:3d:c5:fe:
                    cf:7c:1a:2b:b6:59:9b:fd:8d:9e:c1:e0:61:b8:e4:
                    0b:2a:51:c6:4b:eb:2e:c8:a1:03:26:8c:16:ab:a4:
                    9b:0c:af:5b:bc:81:35:e7:46:8a:32:93:a2:0b:9d:
                    18:ea:b4:f7:cd:49:ad:34:4b:ee:77:f6:69:f2:da:
                    39:e2:8f:51:10:b6:35:32:fe:18:ac:e0:8c:f5:60:
                    8b:40:9c:87:7d:50:68:b8:d0:1f:2c:d8:54:a5:bd:
                    e7:7b:e7:63:35:89:7c:e3:25:91:f1:e7:3b:3e:08:
                    ed:44:ff:77:af:07:1e:7b:ad:c9:62:ac:cd:c7:c3:
                    1f:e6:eb:11:41:a3:f7:05:45:61:bc:6a:0c:96:0d:
                    32:70:d4:a3:9f:07:70:7c:7a:33:63:51:a9:64:ab:
                    6f:64:cd:e3:1b:78:1d:73:df:31:48:f6:68:e1:26:
                    4b:1d:0d:0d:08:9c:79:eb:b6:6a:c3:07:32:b3:69:
                    52:c7:10:68:d3:96:cb:d8:93:5b:2a:17:e2:3b:40:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.0.0/19
                IPv6:
                  2a00:8b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8440

    Signature Algorithm: sha256WithRSAEncryption
         25:b5:4f:9a:20:2d:e1:64:28:2a:ab:f2:44:9e:4a:9d:21:65:
         58:fe:c4:ce:03:3b:da:06:6f:f3:14:d9:6b:5e:67:23:02:1d:
         e5:06:9a:70:13:20:06:05:2d:03:7e:3f:77:fe:59:c3:3c:31:
         ed:b7:6e:0c:2d:d6:d6:22:ac:fb:15:81:2f:df:cc:3d:34:ee:
         ca:85:84:ba:9a:c7:30:5d:13:d3:85:2d:79:31:2e:c3:e3:38:
         3b:0b:ed:f8:15:8e:ad:4d:e1:78:5b:41:af:80:81:84:60:f2:
         7b:98:2c:3e:d1:02:26:04:2a:83:13:f8:d9:92:5a:70:10:e0:
         91:f8:cd:a6:ca:25:11:cf:fd:6d:18:13:68:4c:23:6f:1c:8b:
         7e:ef:3f:46:e0:14:50:d7:77:1e:39:e7:8d:6f:06:5c:3d:ac:
         11:c8:a8:82:48:f6:c6:aa:7c:d2:3c:2c:d9:85:85:21:0f:9e:
         3c:a2:2e:8d:9d:da:1f:2a:6c:27:cc:92:80:e9:fa:00:b8:bc:
         d7:14:e7:49:a6:96:60:68:1b:84:5f:1c:9d:42:b3:a8:46:fd:
         2f:01:95:47:63:86:2c:d2:11:f7:91:36:10:3e:85:15:71:ac:
         9f:d3:06:bb:d7:07:21:1f:4e:85:04:1e:3f:56:19:63:5c:9e:
         fe:c0:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----