Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
File:                     4KAIqA2P8mJiXmX-JYdpFYspmPA.cer (raw, json)
Hash identifier:          muROpYgoO4mGkkLRZvnNef51nztB6QzdrvFaT80Ps0c=
Subject key identifier:   E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424450C2607D7EFCE0B4C8FD09EFC4EBE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47767
                          IP: 94.124.184.0/21
                          IP: 2a03:9780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:0c:26:07:d7:ef:ce:0b:4c:8f:d0:9e:fc:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e0a008a80d8ff262625e65fe258769158b2998f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:7a:ba:95:95:f1:87:c2:52:3a:c7:ca:bb:
                    ca:33:a5:6d:51:9e:cb:75:a2:c3:6c:21:d6:b9:3f:
                    ae:ee:3e:14:d7:8b:a9:85:8b:a2:4e:cf:30:05:b1:
                    1b:4f:01:b1:f2:7c:63:97:9c:94:96:a8:68:9b:d9:
                    ee:f3:d1:b5:50:fd:7d:89:41:7d:f9:cd:b3:22:b7:
                    19:6b:ed:01:e6:08:ad:24:c8:20:14:33:aa:a5:9e:
                    90:95:54:df:ba:16:9a:7a:70:96:91:39:39:46:22:
                    9e:70:70:cd:a1:10:79:1a:d5:19:c9:94:6b:4d:32:
                    78:3b:5f:52:83:ed:17:c4:97:71:1a:4f:2d:f0:0d:
                    e9:ed:16:12:f4:b1:76:15:05:03:46:3e:6e:87:2e:
                    ca:dc:30:5d:62:c8:4d:e7:47:ef:fe:92:de:c7:60:
                    b5:16:eb:e7:9e:47:ce:2c:43:79:df:8a:f4:a4:47:
                    00:03:f2:41:3b:13:09:83:cb:99:32:8c:06:e1:8d:
                    56:30:ad:3e:d2:b7:95:ea:fa:87:88:59:4b:dc:c7:
                    a7:5f:32:68:b1:61:24:d2:2d:4f:9c:09:8b:3b:eb:
                    45:d8:14:02:27:ac:52:15:83:1f:fa:74:cf:1c:96:
                    b2:84:2f:9f:09:f3:5a:3b:7e:95:6c:26:73:24:d2:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.184.0/21
                IPv6:
                  2a03:9780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47767

    Signature Algorithm: sha256WithRSAEncryption
         84:45:86:15:61:fd:ef:e0:23:48:2d:b6:bd:54:0a:c3:78:a7:
         a0:a5:fd:f7:8d:f6:e2:b9:f0:55:18:08:17:21:cf:08:bd:2a:
         58:a7:32:00:61:c9:7f:a7:82:6f:79:5d:02:96:a7:92:83:c1:
         9c:58:c5:a2:3c:ea:23:7f:e6:6d:cb:05:8e:b3:b0:81:dc:c4:
         fc:8f:89:55:f6:d4:e8:05:73:24:d1:59:64:77:d6:c7:03:72:
         74:24:24:dc:65:b1:b0:84:d3:fe:cb:e4:fd:c2:8a:5b:7d:36:
         67:91:f6:f6:1e:cb:a6:40:c1:dc:3e:d3:ac:e0:27:77:4d:32:
         44:d7:9d:e5:a2:0b:19:3f:71:d7:33:c8:0c:1f:56:52:d2:8e:
         3d:7d:86:ed:b8:4e:72:5a:c3:9a:cd:f1:8d:80:c8:ba:c1:f7:
         0e:6b:ee:c4:6d:5e:e3:dd:72:1c:df:94:e4:92:25:a1:7a:1e:
         22:9f:03:1e:d9:fe:d9:2e:04:a2:0b:2d:2c:35:a4:74:62:28:
         5f:a7:9d:62:af:69:b6:e7:c8:b6:8b:46:d7:37:63:66:27:80:
         ea:37:07:df:c6:54:08:ec:af:33:3c:e3:a2:84:c9:36:9d:af:
         49:38:c1:57:da:31:b0:1a:ff:18:f7:22:a2:a7:74:00:a4:cc:
         ed:a6:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----