Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
File:                     4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer (raw, json)
Hash identifier:          E4/FA5ZfTvG5Cv7Fr6i2gCjvNZ7QMtx1ogx9ImqMjWk=
Subject key identifier:   E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01952F1283F40E73BB97B69DF9FA6AE356E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 22 Feb 2025 19:11:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202643
                          IP: 185.116.115.0/24
                          IP: 2a0e:bec0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:2f:12:83:f4:0e:73:bb:97:b6:9d:f9:fa:6a:e3:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 22 19:11:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:67:c7:b4:12:51:ba:c5:f3:28:b0:3c:49:
                    88:01:92:78:18:62:23:dd:6f:cc:a4:6e:f8:ea:88:
                    9c:8d:dc:46:ab:89:e9:c1:23:5a:68:42:fc:65:c0:
                    f8:d9:77:9b:4c:e3:6d:4e:f8:1f:18:76:95:a9:1c:
                    9a:74:67:91:e3:4c:9e:98:13:66:9c:57:53:c4:fd:
                    60:b5:e7:c9:65:83:7c:d2:b5:38:97:db:24:5b:93:
                    aa:ff:cd:3a:79:c0:1f:6e:6e:0f:0e:40:0e:eb:49:
                    36:a9:14:ce:5d:e5:7e:0b:44:d0:2a:5e:d3:f3:f5:
                    43:17:45:ed:6c:5e:0c:60:7c:a2:2e:8a:59:a3:ba:
                    26:8a:84:b2:5b:af:d1:42:cf:5d:00:3d:a6:3d:b5:
                    ba:44:3e:7f:89:5c:12:a9:21:b8:12:eb:a2:7f:71:
                    88:80:54:1e:61:43:26:68:cf:0a:a1:4e:02:98:62:
                    d4:a6:96:62:dd:9e:a3:e2:5d:d6:6d:4d:0d:9e:c2:
                    e8:e1:92:66:af:8e:9c:5c:3d:68:0f:7b:5b:2a:2b:
                    ca:e1:22:0f:20:a1:da:b0:33:04:40:10:18:73:7c:
                    0f:15:49:09:a8:a2:df:80:cb:02:b0:72:7a:d6:09:
                    b4:cb:1b:75:22:f1:dd:14:df:6a:b4:e0:ca:9f:f2:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.115.0/24
                IPv6:
                  2a0e:bec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202643

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:c2:cc:af:4a:44:79:7c:b4:04:ff:f5:b9:4d:ad:d6:4c:
         20:c5:20:37:51:9b:99:e4:22:bd:69:49:b1:bb:d8:0b:53:3f:
         e4:d2:5f:77:6f:48:90:96:7d:40:db:2d:44:17:b7:b9:00:8e:
         23:2f:6f:03:de:ca:44:94:00:4e:ca:38:d6:e2:5b:24:16:03:
         71:65:76:61:59:22:b9:f1:74:6e:42:f1:52:8f:38:5f:d5:61:
         e5:9c:d7:43:1d:31:98:ee:bf:86:97:08:8b:c7:f8:b4:bb:16:
         2b:9e:af:40:a3:31:d0:33:06:98:37:12:70:f7:99:73:0b:c5:
         5a:96:af:5b:07:34:7b:59:31:e6:2a:de:cd:af:be:0f:d0:a1:
         c6:b5:18:be:c0:03:93:6e:64:1b:6a:94:ff:61:f1:03:1c:fe:
         29:02:e2:2d:48:33:b7:57:0a:62:22:d0:39:6d:eb:17:4c:ff:
         82:34:9a:19:60:0c:4d:8f:c2:8c:c9:66:00:ae:ac:5d:b7:a6:
         17:ad:dd:e1:b3:79:3f:b1:44:bb:ef:f1:1b:47:b7:4b:57:cf:
         8c:39:70:34:b3:32:eb:2d:ae:cc:86:45:69:7c:c0:c0:dc:2a:
         02:b1:ac:23:df:27:41:a4:38:28:ea:a1:6d:a0:07:8b:00:82:
         93:94:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----