Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer (raw, json)
Hash identifier:          hZocidG3Jn+1OlYOONbk60E/bEPUvAPacGPysebAUpM=
Subject key identifier:   E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DAF3152DE1DBDE1581DF0CDE1612B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202982
                          IP: 185.148.148.0/22
                          IP: 2a0a:2800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:af:31:52:de:1d:bd:e1:58:1d:f0:cd:e1:61:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:81:de:2e:e7:78:2f:d0:d3:c6:06:9a:56:
                    4b:5b:42:7d:1b:89:b4:2e:fd:3b:cf:24:e8:65:b9:
                    f1:f8:d5:f3:39:83:30:aa:92:b5:91:a7:ef:59:17:
                    85:04:e3:a9:63:c6:cb:41:2b:61:91:b5:90:b7:94:
                    b9:2c:31:86:94:5c:20:fb:57:e0:38:26:ff:6c:ad:
                    49:fc:8b:37:d0:51:79:7e:74:46:9c:27:88:ba:5f:
                    92:2a:1c:64:d5:19:2f:ca:66:d2:80:84:ab:b6:1f:
                    5f:cb:1e:4b:5b:db:a7:e8:bc:1f:84:33:c8:6d:43:
                    71:9d:a6:a4:6d:26:9a:4e:f2:d5:01:97:33:ad:03:
                    92:69:1f:71:f5:ca:67:de:78:cf:35:52:ed:7f:a5:
                    5a:21:2f:89:57:23:a4:d6:b3:75:78:62:59:b4:a6:
                    4a:d8:82:cb:f9:49:9d:31:de:8f:b6:29:64:97:6c:
                    a2:1a:d2:55:aa:54:ac:e7:3c:d0:5b:08:00:93:4f:
                    c6:52:39:08:c0:46:50:dc:ab:8e:29:62:f8:a6:ed:
                    c8:17:16:70:16:86:7c:f2:7b:94:9a:4d:a9:1d:97:
                    64:c6:54:99:27:b1:a9:6d:b1:6b:ea:73:68:fc:32:
                    b2:dc:b1:34:c2:73:4e:37:9e:f9:c1:b7:e2:c2:db:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.148.148.0/22
                IPv6:
                  2a0a:2800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202982

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:a4:22:07:5b:9e:7b:ac:48:75:40:4b:c4:6e:e8:83:d6:
         02:27:90:da:75:8c:cd:0a:81:e0:c8:82:63:ab:be:1f:81:99:
         87:f6:71:59:d1:c4:40:27:2f:cc:9d:fe:b7:60:17:95:04:a3:
         99:5d:7e:f5:ac:f5:e0:dc:e8:bd:1c:6e:9a:f1:4b:13:97:8b:
         c3:2c:4c:a7:43:0b:e1:56:0a:61:50:f7:8a:a7:45:e3:78:58:
         73:1a:67:74:5b:b4:bb:e5:e5:e3:f9:39:f3:57:5d:70:eb:49:
         4c:39:e3:c6:0e:27:11:61:63:2a:1a:69:36:93:a1:78:8a:ee:
         25:e4:d7:ba:7f:f1:40:13:5c:fc:39:ed:8c:79:f1:46:b1:49:
         52:ee:31:ea:71:c2:81:c7:8c:aa:63:7e:30:e2:47:22:bd:6e:
         24:cf:78:7a:64:f4:26:e8:3b:f3:ad:26:07:28:b9:32:c9:b1:
         cc:76:79:b8:22:30:b9:61:7a:07:8a:58:6c:24:34:f0:a3:36:
         02:ee:32:c2:50:4f:62:b8:eb:0c:05:da:6d:b3:4a:5d:51:3b:
         77:b4:1b:00:d9:ed:f6:d6:da:25:ff:22:55:9c:fb:7b:59:53:
         dc:bd:0d:3a:fb:aa:24:75:99:0a:e5:63:41:ff:e7:b3:5e:cd:
         7a:7b:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----