Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
File:                     4koD-A9i2oZjUuGZCZfx1GzrL7A.cer (raw, json)
Hash identifier:          fkO2PoG3v7KEJxEA7D2B/cjK9wDT82wSwcDWbbcuzoY=
Subject key identifier:   E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244583B5007692BB6545EBFD59381BB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206280
                          IP: 185.190.252.0/22
                          IP: 2a0a:12c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:83:b5:00:76:92:bb:65:45:eb:fd:59:38:1b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:91:27:73:6c:35:9b:99:c6:6c:3f:7d:94:
                    41:b8:d6:0e:4c:21:41:22:c7:a8:0f:c7:e1:26:6f:
                    65:55:4d:ec:32:14:ab:35:30:51:4b:02:ee:11:1d:
                    92:a2:0b:fd:58:41:2f:84:cf:84:8f:ab:6b:68:ec:
                    85:26:1c:eb:fe:71:6d:78:c5:b1:23:ac:73:7c:1e:
                    12:8a:f0:54:e2:ee:72:98:5e:c9:39:b5:95:80:e1:
                    39:de:99:2b:0b:72:fe:ff:72:ca:e8:43:eb:0b:bb:
                    76:55:34:35:01:33:ec:f8:a9:ef:5c:aa:82:84:f0:
                    b0:ad:cf:a4:ab:9a:cc:2c:bf:26:40:6b:71:48:68:
                    90:58:63:a5:dc:3b:fa:60:d1:97:26:e8:ce:ca:58:
                    58:25:12:50:35:68:50:76:67:ec:ce:25:92:c5:f4:
                    9b:89:92:1a:52:da:33:3b:56:e9:9d:2d:43:50:f6:
                    4f:58:11:c5:29:f4:65:66:9b:ac:98:26:0f:c2:c4:
                    66:23:5c:84:3a:cd:61:6e:f4:9e:aa:89:58:71:58:
                    b4:dd:ad:48:f4:de:5c:a0:26:d8:90:34:4f:64:92:
                    33:03:e2:c5:fd:62:6a:b4:da:69:b2:4b:f7:cc:51:
                    d1:4e:48:b6:9e:0d:75:07:97:f6:66:6f:d1:0e:89:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.252.0/22
                IPv6:
                  2a0a:12c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206280

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:1c:59:7c:00:7f:68:f0:ef:60:7b:5a:49:ad:9c:44:f5:
         fb:c8:1d:31:b9:2a:ec:e6:8b:4b:23:f9:df:be:3b:49:f9:a0:
         68:92:19:46:32:47:44:89:6d:6b:78:ad:56:1d:f3:33:2c:81:
         0b:02:67:6e:5f:54:35:34:2f:16:21:bf:a0:92:9b:26:7f:03:
         f8:1a:c5:16:9d:f7:e4:69:23:7b:f0:83:55:98:82:59:ab:42:
         04:09:54:31:7e:9f:95:5d:17:87:8c:02:17:64:05:77:3a:1e:
         47:7b:e9:97:b1:0d:14:57:4f:74:0d:51:74:87:d5:2e:7c:1f:
         92:f8:da:25:92:28:ca:18:c7:3a:5e:a0:32:54:cc:8c:68:c0:
         97:2e:6a:81:2b:ca:80:e8:6c:4c:40:59:6d:5e:b5:0f:bf:45:
         0f:d9:93:8f:b9:fa:8a:2f:77:c6:b9:96:c9:fb:20:6f:08:d4:
         d9:00:10:3c:e9:b0:80:13:0d:61:26:94:75:44:11:e1:42:a7:
         d2:86:57:1f:68:aa:76:b2:72:29:e4:c3:7b:90:57:62:f3:8f:
         a2:8a:e0:1a:61:ce:5f:01:ef:4a:03:3a:dd:1f:89:8b:b4:38:
         18:be:b3:66:49:54:f6:af:33:9d:77:fb:c3:84:c6:ed:72:2d:
         7e:fe:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----