Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
File:                     1-c9m7XQoo55j8NJzYDf0McQao08.cer (raw, json)
Hash identifier:          ACs6LJfNe6X4d3P15yUM7HsrIsLmfeBNY7fQdzCzF2s=
Subject key identifier:   F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C690BAAFB2B446BA3EF6B00CE255D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208378
                          IP: 193.138.29.0/24
                          IP: 2001:67c:c4c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:69:0b:aa:fb:2b:44:6b:a3:ef:6b:00:ce:25:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d4:32:6a:35:01:d3:5e:25:46:13:9f:e2:64:
                    ca:5a:87:cd:1e:2b:f2:36:4b:84:6f:ed:73:39:c0:
                    6c:71:8b:b4:34:10:0b:fc:93:f3:5f:0a:22:05:69:
                    f0:5e:37:74:95:c0:c6:b8:b9:fd:31:70:53:bc:42:
                    86:de:0a:85:29:3f:5e:69:e1:22:48:97:b4:46:de:
                    ec:25:7f:c4:bc:74:4f:cd:9c:43:38:a8:f2:1e:51:
                    9f:e1:98:e5:fb:7f:66:3a:df:a4:50:f2:88:31:f7:
                    16:a4:ea:45:c9:2c:ad:96:7f:19:f9:3b:69:ff:b1:
                    46:8e:1d:f9:27:45:9e:33:d3:1a:23:d3:5e:df:18:
                    f4:07:e4:38:b0:ef:b7:fd:91:71:e2:2a:9d:50:63:
                    ab:dd:62:c3:79:f1:2f:42:1c:57:f1:cf:b4:7d:ed:
                    8c:e9:58:53:57:0c:fe:31:54:59:e5:55:1c:6b:70:
                    78:86:58:7b:9a:79:d3:e1:bb:bc:20:15:b0:40:d0:
                    35:47:96:41:49:a8:89:b1:08:d8:0d:42:85:ad:d9:
                    92:07:02:68:2a:47:cb:92:dd:0f:b6:f9:d1:dc:96:
                    18:6d:9d:ae:61:33:d8:ac:14:89:f4:7d:81:fe:b9:
                    b8:e0:76:36:67:fd:40:9f:0b:80:6d:be:59:a0:9b:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.29.0/24
                IPv6:
                  2001:67c:c4c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208378

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:94:f4:13:c3:6c:2e:20:50:bc:78:39:80:a9:c8:80:d6:
         f7:f4:23:7b:1d:f9:a9:f1:7e:37:45:28:42:52:7f:ad:7e:97:
         3b:09:9f:21:51:b4:ff:a4:5d:34:93:6f:26:97:e7:66:6b:98:
         b2:d8:e2:78:a9:d1:e4:bf:c8:39:40:62:a7:53:88:9d:88:87:
         32:10:c1:64:40:6c:f7:de:c4:05:ee:f3:59:d4:bb:f7:8f:a3:
         7b:f5:f1:c3:06:76:50:36:ed:0d:a7:e5:f1:43:ca:8c:3d:c1:
         4a:9b:33:82:f7:20:c7:85:a3:4b:31:a3:e8:0e:ac:df:dc:a9:
         11:14:02:34:5e:e4:9e:db:16:c0:69:7d:9b:07:63:64:88:25:
         32:7e:3d:71:68:3b:f4:17:b2:9b:b3:71:f7:45:d7:bf:63:96:
         1b:60:a1:7d:26:73:b8:57:4b:fc:a8:08:04:92:e2:87:42:8a:
         a0:ef:f5:1a:80:1c:e0:9a:aa:7c:17:31:d1:f4:00:75:b4:f1:
         c7:5b:a1:89:52:9a:75:9c:e2:95:07:bb:fa:c8:03:e6:b4:08:
         d4:12:5d:56:0b:84:da:53:c8:6a:b8:e4:35:94:5c:0e:b6:c5:
         b9:18:de:da:c9:89:0d:79:e5:00:45:a5:3e:0f:5b:c3:76:b4:
         17:83:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----