Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
File:                     4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer (raw, json)
Hash identifier:          O5onF4uHAyx1bBFtEp2ztNjt0KnpfNt4YuNX3Q83Ppw=
Subject key identifier:   E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B25208FE187AAA92DAD697D604456F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212720
                          IP: 193.3.24.0/24
                          IP: 2a10:58c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:52:08:fe:18:7a:aa:92:da:d6:97:d6:04:45:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:0e:52:df:d3:4b:ea:42:a2:1c:a7:5c:d2:
                    9a:9a:42:f4:58:1a:e3:c9:98:c9:ec:db:da:af:a8:
                    b0:35:d0:bb:0b:02:26:f5:5e:ad:b8:14:03:0e:42:
                    af:59:2a:7c:a4:15:d2:5d:ec:a6:ae:b1:1b:b5:7f:
                    e8:d7:2b:2c:97:07:3b:72:bf:5e:cb:8a:f6:ef:ef:
                    30:cd:ef:d3:61:4e:d2:a0:52:59:4c:19:b1:90:13:
                    c8:b9:cf:7e:f0:0f:3b:09:52:b1:7f:45:07:41:48:
                    bd:cf:2f:ea:bb:14:da:f2:e2:2f:04:e7:02:f9:a3:
                    a7:f4:ee:8a:cb:f3:7c:9c:46:0f:c3:cd:35:3b:6d:
                    0f:f4:22:94:9c:fd:8b:2e:ed:69:4c:de:06:21:35:
                    ff:cb:5a:f9:e3:fe:65:67:3b:97:f3:a5:bd:7c:69:
                    6d:bc:10:1a:5c:24:0c:de:5e:19:d2:23:10:03:e3:
                    f8:08:e3:9e:70:bd:84:1f:8f:0f:9e:ef:0c:b2:5b:
                    30:5e:bc:56:06:e4:8e:fa:1e:38:65:bb:45:66:4c:
                    76:06:23:3b:0e:d8:08:71:a0:dd:3b:f4:f8:9b:8a:
                    8c:14:c4:1c:ec:02:f6:73:98:fd:c0:87:d1:05:a5:
                    21:de:af:5e:f6:8a:d3:6f:34:c4:66:72:14:c8:b1:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.24.0/24
                IPv6:
                  2a10:58c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212720

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:2b:7d:2f:76:32:1a:2f:8a:ed:1c:6c:ef:14:1e:7a:2a:
         b4:d5:1a:1e:8b:95:85:61:e6:50:d3:12:c6:f1:73:02:5c:5a:
         69:1e:a9:dd:7b:52:10:d3:71:ce:db:ba:87:94:6c:46:6a:a8:
         73:cb:7d:fc:a5:3d:55:55:c7:46:14:d9:ef:de:43:06:25:61:
         29:01:2e:6a:04:b7:6a:72:51:48:8f:a7:52:c6:b9:53:e7:1f:
         ae:78:17:25:f1:2a:9f:07:99:e5:41:82:ec:a9:63:cc:a4:dd:
         03:e4:4d:ad:de:b1:9c:c6:1a:da:0b:7f:6f:35:3e:b6:21:f5:
         34:d2:9f:8d:bd:b2:b3:e6:b8:f5:16:9d:5b:7f:00:66:b7:8c:
         e5:7f:db:f6:e8:d4:12:f0:47:6b:1f:9a:70:a5:9f:37:f1:7e:
         44:85:35:97:2d:a7:dc:c8:d8:54:37:92:1c:67:6d:af:b9:0c:
         5f:69:5a:7e:6c:4d:0f:73:99:30:eb:1e:a4:5f:25:65:9a:36:
         2d:f5:13:26:d2:db:e6:3c:74:0d:95:7d:ed:85:3f:d3:5a:9f:
         8e:aa:b6:91:1a:c7:1b:d5:7f:6a:62:c6:7a:cf:48:6a:74:56:
         2b:5f:d8:61:64:c6:45:df:de:96:d3:60:e6:ef:94:18:1e:95:
         67:65:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----