Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
File:                     3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer (raw, json)
Hash identifier:          8hNMfbs4NtVutbHPaXbGcN/sRnMT1YNxqhPMk5p9RAQ=
Subject key identifier:   DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067F23B631672071A267BEF410A95FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201293
                          IP: 185.79.188.0/22
                          IP: 2a03:5da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:f2:3b:63:16:72:07:1a:26:7b:ef:41:0a:95:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:fd:8d:cd:7c:2a:8b:ff:f9:46:cd:a8:86:
                    0b:ff:b8:e4:5e:1e:c5:ab:14:05:8f:16:74:e0:fa:
                    30:bf:6a:50:83:d4:a4:85:25:cf:0b:df:49:13:d5:
                    a8:7d:f4:08:e1:a5:59:6a:0d:1c:28:ef:a3:24:e7:
                    0a:e5:7b:0f:a7:57:98:89:76:d0:30:85:63:c0:fc:
                    9b:59:22:d2:10:3d:53:62:eb:24:b0:c7:c8:42:ed:
                    4d:14:64:e7:62:1b:19:82:e8:a6:2d:f8:f2:f1:ab:
                    b1:f8:67:eb:bc:58:ae:ab:7b:ea:94:60:8e:39:fa:
                    2a:7f:67:30:ec:75:32:9e:db:9f:59:88:a9:56:23:
                    a6:99:74:0e:c2:b7:47:1c:aa:37:d9:7d:c9:08:ef:
                    c5:ea:43:a3:b4:9a:e0:67:4f:8b:d4:ea:c3:94:02:
                    24:d7:91:2c:c4:6a:84:18:a1:88:77:86:97:56:f7:
                    9e:45:90:03:8f:d8:e6:32:51:40:9b:af:ae:64:ce:
                    ed:07:18:82:a5:7c:cc:8b:e7:7c:4c:98:80:13:0d:
                    58:f7:33:27:79:aa:bd:a0:31:58:e2:49:f5:44:71:
                    f7:31:c7:22:e6:11:58:55:e4:66:91:7c:32:df:c9:
                    af:52:b2:ac:8d:17:3f:40:3a:dd:ac:3e:94:79:ea:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.188.0/22
                IPv6:
                  2a03:5da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201293

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:fb:18:31:cd:bb:69:72:8a:13:3a:70:2a:48:83:2f:eb:
         3d:e3:d3:d8:a9:8f:ec:2e:1f:f9:79:19:fb:d3:c1:90:a3:ce:
         1d:70:b7:eb:25:a4:f2:e4:41:2b:b9:cf:2f:d5:af:8e:11:7d:
         e6:3c:c0:70:23:88:5e:24:4f:b5:9f:37:04:f0:a1:ec:ef:4c:
         f4:6d:89:bd:41:48:ee:17:7c:77:39:4a:44:4b:c0:3b:e7:0a:
         ff:18:f2:ae:f2:b1:92:11:c8:92:67:28:81:10:1f:85:f5:5b:
         79:9a:d2:51:c6:e1:43:b6:45:b4:33:c0:19:dd:5f:90:65:be:
         d2:8b:cc:29:6a:c4:54:e3:af:e5:90:f3:1e:d9:c3:3a:0f:28:
         8e:02:96:5f:56:07:40:c3:77:40:8f:63:87:65:82:c9:b0:7a:
         89:d4:0d:9e:11:3f:07:20:b8:b2:de:83:eb:e8:a9:dd:9c:c6:
         7d:98:08:dc:98:bb:c9:c1:24:ff:41:53:ed:f7:db:22:22:63:
         23:00:8c:ce:e2:36:d2:8f:7c:0b:f1:46:ab:6e:8f:35:71:41:
         c4:a6:a1:f1:35:51:0d:3a:c6:98:7d:f2:b9:f5:ca:7f:30:fa:
         5a:53:44:d9:d0:66:19:fa:6e:8d:25:80:12:8a:6e:5a:42:77:
         59:aa:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----