Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.cer (raw, json)
Hash identifier:          0jb8TO+NI8Jd/iKZ+Vg6e+HytLaWP6gI2S49x9qGeQE=
Subject key identifier:   D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5AAD44168E08809C36E69FA6057D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212152
                          IP: 198.62.104.0/24
                          IP: 198.205.12.0 -- 198.205.14.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:aa:d4:41:68:e0:88:09:c3:6e:69:fa:60:57:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:85:92:89:23:6e:7e:3f:dd:77:68:cc:44:
                    cc:40:d7:53:a8:a2:ce:44:9f:44:1e:43:86:46:7c:
                    cc:22:b9:47:de:79:de:25:bf:fc:5b:9d:71:08:34:
                    5f:12:16:fb:94:00:3c:08:45:ad:c4:61:15:9f:3d:
                    75:18:54:44:08:52:33:54:96:55:e2:65:67:0a:7a:
                    de:a7:d7:cf:44:a8:48:31:71:95:40:c6:e7:37:f9:
                    06:11:d0:65:1a:e0:f9:02:30:83:6a:f2:8a:2d:2a:
                    c5:8a:bd:0e:f9:03:54:b1:8a:26:0e:02:82:ee:62:
                    62:00:76:fe:0f:91:00:54:0b:c8:9e:11:69:da:a6:
                    7e:2d:58:14:73:4a:82:46:3d:4d:e3:00:a1:0b:ee:
                    f7:08:36:33:22:8b:e3:42:4f:9c:18:55:b1:3e:34:
                    64:50:fa:50:33:3c:6f:46:e1:ba:c9:e6:4b:70:1c:
                    cc:81:b4:53:81:10:09:3f:00:62:65:3d:c5:ff:29:
                    48:7a:cb:97:d0:eb:5f:16:30:e5:e4:bf:3c:e8:be:
                    24:7d:de:d6:35:de:8a:21:6f:b4:5c:bc:31:04:16:
                    75:b7:8d:07:40:7c:a7:6e:29:71:ae:49:23:94:b7:
                    66:69:4d:de:fd:6f:6c:b9:62:b7:e9:6b:2a:9d:6b:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.104.0/24
                  198.205.12.0-198.205.14.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212152

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:49:80:cb:7a:e0:42:22:ab:86:1f:51:ec:c2:f9:07:69:
         b9:48:36:6e:ae:76:83:55:2a:bc:85:7a:55:36:b3:2c:6e:8b:
         c7:bf:b3:fd:8b:d3:ae:e3:c9:72:f7:ad:c8:0b:90:5c:91:bb:
         6e:e2:af:78:b9:09:cc:9c:08:8a:cc:e8:d1:03:60:65:52:ea:
         23:db:92:4d:cb:72:e4:8f:d2:18:f8:46:b3:c1:d9:ed:cf:22:
         22:fc:4b:a6:16:bd:7f:ab:70:d7:1b:a6:2e:ba:2e:89:b2:ff:
         92:81:8c:93:ca:87:ea:f0:fb:e6:32:f7:85:b8:f5:c6:4d:9b:
         24:88:f1:df:19:c5:bb:d8:e9:c8:72:ae:d9:5a:cd:8b:25:96:
         74:15:03:89:1a:74:c6:b6:11:af:b4:4d:87:3d:18:21:2d:73:
         8f:3b:e4:7a:84:aa:10:b1:40:40:3f:4f:e7:4b:80:ed:a0:9c:
         6a:31:0c:58:e1:74:73:92:3b:0a:74:4d:7e:7e:c5:24:d3:0e:
         49:f0:3f:8e:7c:39:fc:f8:da:f8:c6:58:af:a8:05:18:98:2b:
         ff:b2:ef:41:12:7f:8b:3e:e2:a8:94:22:d9:40:97:72:a3:54:
         4a:ed:e4:0c:42:4e:9f:d8:aa:69:96:ba:c2:c0:24:2b:68:57:
         ac:8a:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----