Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.cer (raw, json)
Hash identifier:          9HKmpVemtL3aq6c7WaKWTG9MeJEA1Z9gqvs39yD5sAc=
Subject key identifier:   D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D64EA9B0856E942700DCA7B795ED41
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57866
                          AS: 211005
                          IP: 37.139.136.0/21
                          IP: 45.141.104.0/22
                          IP: 185.52.236.0/22
                          IP: 2001:678:fe0::/48
                          IP: 2a00:a7c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:4e:a9:b0:85:6e:94:27:00:dc:a7:b7:95:ed:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:52:00:df:1f:4e:46:e9:4e:94:0c:09:d5:
                    bf:62:b9:25:bb:60:bf:c9:7c:cd:f7:e0:b2:9a:59:
                    f7:75:fe:3b:44:ce:fe:0f:94:a7:ef:fb:4c:36:d9:
                    73:6f:52:2d:ff:0b:92:e4:bf:fb:ca:f4:52:d8:e0:
                    0a:df:e3:44:5a:8c:4d:58:54:c0:2f:42:a1:df:65:
                    3e:12:d7:8b:fe:6a:67:f8:6f:7e:67:a4:90:47:4b:
                    33:b5:fe:c1:e5:38:d0:f3:25:31:79:73:cd:0c:48:
                    3b:e5:6e:48:13:27:5c:25:eb:40:e2:15:36:e7:ff:
                    38:94:58:15:ca:86:bd:47:a3:55:71:da:e0:5a:f7:
                    18:3d:2f:5b:36:05:81:54:ac:f0:8b:f1:56:41:29:
                    8f:95:cd:80:eb:76:73:0c:66:12:ba:90:e8:46:0e:
                    25:d6:61:df:ef:61:da:65:62:f7:cd:34:88:dd:44:
                    11:2f:37:47:db:da:9c:c2:6d:3e:02:4d:66:2d:bb:
                    1e:e4:2c:ff:f6:e6:4b:34:4f:26:5f:42:71:be:21:
                    5b:47:9c:0f:02:52:9d:a3:c2:d4:01:d3:a7:24:40:
                    9d:9a:19:b1:2f:cd:a0:f5:90:72:95:73:d3:3c:db:
                    6b:08:62:bc:df:15:5d:fc:d5:5b:ab:36:52:78:7f:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.139.136.0/21
                  45.141.104.0/22
                  185.52.236.0/22
                IPv6:
                  2001:678:fe0::/48
                  2a00:a7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57866
                  211005

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:6b:12:81:26:c9:a9:dc:bf:53:3d:37:1f:f3:3d:2a:2c:
         03:fa:9e:c6:7a:0f:dc:87:2f:d8:f1:ca:83:5f:67:d5:23:15:
         7c:36:ed:51:e1:2f:59:7c:b4:3f:6c:a5:16:8f:09:f2:4a:96:
         56:d1:35:76:4b:3b:2b:6f:98:6d:84:3e:99:c3:88:dc:c9:ae:
         ef:85:33:44:ae:c2:fa:c4:9a:e1:77:02:b7:94:21:58:c0:e9:
         c8:a8:a2:17:20:42:ab:bc:e7:58:98:96:75:15:4a:b2:b7:73:
         70:d6:10:3e:b6:94:06:36:08:5e:0d:6a:1d:4d:58:eb:e6:2a:
         cc:b1:a7:f0:67:5f:42:e9:05:ff:b3:a1:d0:03:80:83:cb:c2:
         4e:82:03:68:0a:bd:14:34:5d:81:ad:9d:ce:dc:7f:38:d0:05:
         27:90:15:a9:14:7c:4a:6b:45:5d:5d:9a:e8:94:9d:12:fe:35:
         f1:5f:51:42:0d:c2:05:67:26:a8:49:7c:4b:62:7d:76:b9:de:
         e4:32:a5:c1:58:ec:86:cf:e6:14:a2:ed:27:1b:fe:1d:02:5d:
         36:67:95:0d:7d:42:60:95:e9:f7:cf:69:62:dc:00:db:02:56:
         f9:7f:8d:e6:a5:d1:11:1e:22:13:0d:6a:56:86:51:89:33:ae:
         70:f2:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----