Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.cer (raw, json)
Hash identifier:          /hh2/iaeZPMkltZfvwUqetRYKyFHlk5jsm6wmESm5Y0=
Subject key identifier:   D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195F694C3BF1D0650A73A4375228A94863F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 12:58:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209204
                          IP: 91.231.22.0/24
                          IP: 193.33.106.0/23
                          IP: 2a13:1280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f6:94:c3:bf:1d:06:50:a7:3a:43:75:22:8a:94:86:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 12:58:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:20:24:42:84:89:57:20:a8:af:38:45:f0:
                    2b:42:8e:69:45:5a:ed:5d:27:f4:0e:31:b5:43:e8:
                    0d:61:f0:51:9e:d8:43:65:7e:94:c4:23:1c:8d:b2:
                    54:bd:76:32:7e:c1:be:04:0a:53:d8:63:87:ff:50:
                    56:b5:9c:b1:6f:16:50:55:80:17:20:bf:3b:c9:90:
                    60:63:2a:e5:32:c0:52:dc:b8:12:78:00:c2:07:c1:
                    15:b5:62:36:62:21:fb:98:36:61:7e:f7:d6:1a:cc:
                    ec:d2:2a:a0:d4:83:0a:a9:da:87:74:f8:6c:46:a9:
                    69:23:6a:5f:9b:51:0f:55:ad:df:81:53:19:7a:74:
                    ce:c1:d6:d6:12:97:3e:00:54:9c:cb:a5:a9:d5:e0:
                    80:50:a2:89:51:5e:b5:9a:d8:98:98:9c:70:6c:3f:
                    6b:4c:95:eb:a2:29:db:67:55:92:e9:f5:2d:b1:12:
                    dd:51:d7:81:16:94:42:87:5d:9e:a4:48:63:06:9c:
                    6a:b9:1c:5a:bd:68:b2:95:03:2b:22:1a:71:be:25:
                    b5:1f:a2:ed:9c:c0:bc:19:6f:16:59:9e:47:c3:4d:
                    e7:6f:a6:d5:28:ce:0e:4e:c4:12:97:c9:71:3c:b9:
                    12:81:15:b2:36:41:38:19:3a:50:1a:67:bf:a3:d6:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.22.0/24
                  193.33.106.0/23
                IPv6:
                  2a13:1280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209204

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:26:05:60:cd:a7:6f:5c:9c:cb:64:d3:41:c8:24:2a:75:
         05:ad:60:f8:09:68:32:73:ca:28:91:98:16:5f:42:85:7f:68:
         bd:c5:61:7b:9e:54:0b:88:02:29:38:c1:8a:79:33:c7:fc:17:
         cf:d5:b0:49:e3:1f:8d:c1:66:7f:73:4d:51:2a:96:91:f9:78:
         83:52:39:14:5a:4f:cf:d7:64:13:ab:95:8c:35:8c:1b:6b:e1:
         84:23:ce:52:29:76:64:dd:01:5d:19:a2:e6:44:e6:b4:3d:82:
         f1:09:90:00:a5:5d:80:f5:7a:d6:81:af:68:f7:94:dd:bb:ac:
         42:f0:b3:57:8e:16:ef:6d:c3:61:3c:a6:07:e9:5a:42:a0:26:
         67:fb:83:c1:17:dc:64:85:50:75:ab:ad:56:f3:08:e7:8b:b8:
         5f:9b:5b:88:71:ae:3c:3e:84:e2:2e:25:44:97:72:51:dd:75:
         b2:dd:cf:09:77:34:20:69:57:b0:f8:07:f0:55:ad:20:33:ef:
         cb:5c:95:94:a7:60:53:40:97:2a:f0:57:1f:e2:e5:8e:ec:d8:
         7a:48:71:20:fa:f2:77:00:79:ec:eb:4f:0b:1a:d1:65:99:c0:
         3b:53:f5:28:f3:f9:b4:f6:a0:c5:87:e0:f7:60:7e:2c:db:c6:
         b6:f5:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----