Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
File:                     2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer (raw, json)
Hash identifier:          U/WRr7GYp2+a3hIF1RFWeYhKg5j4jnJ5bIMxEC4GRoU=
Subject key identifier:   D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D61246BE0A606C80FD13BF8722B7A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50418
                          IP: 185.84.32.0/22
                          IP: 2a05:a200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:61:24:6b:e0:a6:06:c8:0f:d1:3b:f8:72:2b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:a9:57:5d:03:ef:90:05:21:2a:2b:ce:80:
                    d1:63:e1:d1:23:aa:fe:bf:43:b4:f7:31:ce:24:77:
                    89:80:3b:59:81:93:48:c4:6a:fd:0b:13:c9:1c:09:
                    76:da:44:a8:fb:c7:6f:02:9d:14:9a:d0:ea:d9:0f:
                    0d:8f:24:cf:05:1d:a6:4a:b2:f5:63:7f:cd:fb:d3:
                    78:d0:97:b8:e2:a6:5e:37:d8:8e:f6:00:4d:c5:c1:
                    dd:55:61:b4:72:80:1e:aa:8b:13:53:e4:7c:98:f0:
                    73:2a:5c:2e:99:bc:2a:5d:fa:4b:89:ba:76:0a:18:
                    32:23:6a:c5:d8:16:02:e9:f1:f1:2f:50:33:12:75:
                    e4:bf:d8:25:2f:c0:74:e1:e4:8e:cf:70:08:74:42:
                    4b:d5:a6:cd:0f:75:52:e5:9f:9b:81:3f:f1:3a:3a:
                    10:47:c0:79:0f:75:f0:69:fd:a4:91:c5:de:7d:47:
                    e0:5c:73:de:35:e3:8c:f0:0f:63:9d:95:69:01:f6:
                    29:2c:92:f3:69:37:f2:93:7f:14:9e:21:47:aa:5e:
                    10:94:26:9e:2e:bf:32:c5:79:78:9f:7f:a4:db:92:
                    eb:11:4e:50:65:c1:2c:fa:b1:8e:99:0c:57:da:86:
                    f2:a6:1d:6d:13:78:d3:50:a2:a1:c3:e6:66:dd:e4:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.32.0/22
                IPv6:
                  2a05:a200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50418

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:7f:1d:c9:cc:56:b1:9b:66:1e:c5:b9:4e:4b:1d:dd:d5:
         1b:86:be:53:06:c1:41:86:b1:3d:f9:fa:0e:d0:33:4b:fe:6c:
         37:52:66:cb:1b:6f:39:a0:c2:de:a1:06:f5:97:d2:17:d8:54:
         d1:22:f1:77:cd:4d:68:a1:d5:5d:d5:6b:89:14:cb:50:c3:31:
         b8:26:65:e7:00:bb:71:c0:73:ce:ee:42:49:6d:3d:cc:8f:dd:
         fa:3a:4b:2c:05:df:fd:34:ad:bd:fb:50:66:f8:5a:7d:c1:b3:
         d2:21:8a:4c:1e:ff:8d:bf:d4:65:8f:f5:12:c6:04:fe:5e:5f:
         08:e3:0d:9a:33:94:b9:7e:d9:1a:e0:3b:47:2d:ee:fd:16:83:
         1d:97:81:87:fc:d7:87:d0:26:ca:2c:69:c1:3e:a4:87:ca:dc:
         4c:2a:51:f6:c5:ba:5c:b6:0a:99:53:79:c3:ff:62:11:52:2a:
         3c:f2:8a:ba:f6:ae:2d:ea:d8:85:fe:2e:70:51:51:7d:49:23:
         d0:87:30:8f:1a:6b:18:d8:a8:20:f3:ec:37:d1:3d:f0:e5:0a:
         ac:e6:fa:21:ad:39:ea:cf:53:61:33:9a:04:98:03:1d:47:b2:
         4b:aa:8b:91:48:48:c1:61:1b:84:74:06:14:af:7f:34:98:62:
         96:2c:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----