Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.cer (raw, json)
Hash identifier:          4pdX2kvFlZQLBJOe2MDChVk9v6vH1zqIFbslg6eSHrg=
Subject key identifier:   D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BD3CB19C2C32067DDDD698DCCA509
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203256
                          IP: 185.130.228.0/22
                          IP: 2a06:dc00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:d3:cb:19:c2:c3:20:67:dd:dd:69:8d:cc:a5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:da:de:62:4c:92:10:ed:e3:67:ab:33:4a:
                    aa:8f:dc:40:3d:65:a6:ee:21:da:b4:ec:76:20:b8:
                    03:b6:c8:2c:ff:8b:84:e2:0b:5b:92:50:75:6a:5d:
                    d8:90:ce:55:38:5d:fb:62:e8:ac:40:fe:0b:7d:22:
                    bb:bf:18:45:74:dd:c7:14:b7:6e:21:13:5a:f6:6d:
                    33:fe:7d:4c:c3:5d:88:85:b9:ba:d5:d6:cf:c4:25:
                    94:23:77:3b:4b:74:fd:53:0f:01:1e:24:52:6c:e2:
                    b5:cf:2c:35:76:1e:69:ec:e3:a2:57:d8:73:3b:7c:
                    1b:e7:1a:6c:fa:d6:99:25:6a:1d:cd:24:3c:7c:e2:
                    8f:7d:d6:8c:ea:6c:a4:49:d5:e4:c2:57:f3:67:1d:
                    e7:8d:8a:b4:40:32:6e:07:fa:61:cd:d4:7f:ea:c5:
                    3e:d3:5d:dc:81:03:83:fa:4f:4f:57:c0:7f:4f:ad:
                    66:b9:83:22:c4:ad:c5:d4:ff:53:4b:2e:29:45:be:
                    b0:6c:27:e7:91:9d:ad:c5:44:34:1a:88:f9:87:13:
                    9d:b6:92:98:82:72:70:2f:9f:4c:2f:1c:f7:2f:16:
                    8e:c9:50:0d:6b:30:0e:bf:27:ff:29:8e:22:1a:b9:
                    bb:f2:31:c8:a2:10:b1:00:bd:c3:d0:bb:75:8a:d7:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.228.0/22
                IPv6:
                  2a06:dc00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203256

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:22:5e:93:62:dc:7c:e6:fd:4f:28:49:e7:c7:c3:67:06:
         79:aa:40:ab:56:c4:84:a7:f1:98:46:c7:26:f4:c9:4f:c4:47:
         08:fc:fb:d4:8f:50:b5:0a:62:6e:01:03:a0:04:f4:a5:20:df:
         41:1a:db:79:3e:d2:7f:61:6c:35:d7:20:11:40:64:03:ab:77:
         71:64:cf:7b:11:81:25:d0:5e:33:b3:88:f2:55:be:41:46:73:
         70:7e:54:c5:8d:4b:85:f2:12:a1:93:b4:06:d4:ad:fe:f7:15:
         5d:2c:a1:63:f6:84:6f:d1:6f:d0:ac:f8:d9:57:cb:42:42:7e:
         a2:8f:84:92:24:35:0e:e9:8a:d9:7f:c3:a5:4f:f8:09:2b:a6:
         c9:d8:17:6c:6e:55:49:91:84:13:19:44:a2:c0:5a:96:7a:c2:
         23:eb:b6:35:59:44:c0:7f:35:24:47:3a:a8:7c:28:9c:08:11:
         bf:d0:93:00:a6:30:96:93:1d:12:f4:61:d3:e1:d0:9e:df:24:
         8d:1d:c4:50:3c:75:91:7a:fe:45:9b:bd:71:41:2c:da:80:60:
         62:a9:fb:cc:0e:89:22:65:9e:a2:3a:5d:9a:cf:7e:8c:3f:0c:
         e6:85:3a:0b:8e:0b:2a:54:b3:d4:65:f3:19:27:69:3d:7f:1b:
         fc:a2:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----