Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.cer (raw, json)
Hash identifier:          B/Nx8FNqBSEI9XpLDQFyPILF8vV4WzlbpATzYm3wldQ=
Subject key identifier:   D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA554D5EA426040BCB966F028D2F7D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44484
                          IP: 91.201.228.0/22
                          IP: 176.117.192.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:55:4d:5e:a4:26:04:0b:cb:96:6f:02:8d:2f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4c:7e:72:6f:76:64:f6:a3:84:c5:35:c1:d7:
                    62:7f:75:2f:6d:ce:5a:6a:89:bf:db:d8:0d:b0:87:
                    89:ed:b3:14:6c:09:e2:91:40:e5:dd:eb:cf:b0:7b:
                    11:5c:66:80:c3:ef:67:e5:c9:e7:19:fa:11:7d:d5:
                    b0:36:87:da:1b:eb:60:96:b7:09:3e:98:00:72:73:
                    a3:78:20:30:e8:d2:d9:79:68:61:49:09:3f:f3:39:
                    f7:14:85:b6:d1:1b:16:ea:12:41:76:1b:fd:55:c2:
                    94:d7:9b:d2:82:81:43:61:20:5b:d2:f7:cc:b2:d1:
                    35:6a:75:e3:d3:15:0c:92:c8:8e:e2:5b:a6:87:ee:
                    a3:10:51:75:9f:f4:eb:6c:0d:6d:0e:24:c0:98:18:
                    1a:7d:6a:17:cb:6b:9e:fc:94:66:68:9e:35:f9:5e:
                    a2:cb:67:ef:33:4f:78:b1:c1:b6:a7:0e:65:67:8f:
                    ca:99:13:b9:ff:98:38:7b:45:f1:28:24:16:92:ac:
                    55:d3:aa:40:b1:26:89:bc:83:3d:28:35:e6:71:f5:
                    d1:e6:b9:5b:51:c5:5c:be:99:da:17:06:3d:bb:50:
                    ae:67:62:39:55:62:d2:61:84:7e:e6:fd:8c:fe:5f:
                    27:39:da:1f:9c:8e:c5:5e:0f:20:7e:37:a7:72:1b:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.228.0/22
                  176.117.192.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44484

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:eb:aa:03:99:77:b9:e6:a2:e4:d5:ab:5e:d5:03:8a:1b:
         f9:18:62:9e:7a:bb:7b:40:8a:00:33:bd:21:9a:3d:3b:71:46:
         32:ac:0b:ff:bf:23:c4:9f:3a:09:00:ac:3c:4f:10:68:32:86:
         1c:d9:dc:be:83:23:d8:87:4a:a0:80:e1:7d:7e:04:f7:b3:b5:
         f9:08:bf:08:27:e7:c9:aa:2d:23:64:67:f6:77:b3:38:df:16:
         a1:fb:7c:86:b6:1c:37:df:3d:bb:c5:82:d2:c5:e1:66:8c:71:
         c5:93:b6:a9:3b:33:49:a1:20:63:6f:c8:d1:08:93:f0:14:01:
         c0:54:cd:f0:3c:72:ec:8b:2d:2d:7f:79:c2:5f:bf:2b:d9:1c:
         ab:33:de:90:01:44:69:d6:96:75:af:45:9b:f8:de:7a:08:06:
         07:94:23:b5:cc:c8:36:68:bc:79:e4:af:ce:b2:fd:5d:16:27:
         58:fb:ac:48:b3:f2:5c:2c:70:4a:f7:e1:01:e3:b7:c9:8e:7a:
         bd:69:69:f0:51:86:ed:e2:31:cb:bf:52:e5:5a:fa:43:dd:34:
         c9:25:24:59:13:0f:2f:f7:52:b1:c7:82:82:c9:20:57:5c:16:
         3c:60:68:fb:20:38:b1:bc:e7:cf:d7:b0:75:66:35:31:db:30:
         98:4c:f4:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----