Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.cer (raw, json)
Hash identifier:          cpG7I/KioBV3hYX8r0+YyvZjQMBTmn/2396Pz4/6ovs=
Subject key identifier:   ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C11AF144F22D9BF9C96F574536DD0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208839
                          IP: 45.13.140.0/22
                          IP: 2a0e:ed00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:11:af:14:4f:22:d9:bf:9c:96:f5:74:53:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:50:28:93:80:88:fa:06:c7:31:6e:35:32:
                    54:2a:1f:10:d5:9f:fd:9d:f9:25:02:a0:47:b1:02:
                    18:cf:17:ac:f9:39:4a:63:b8:69:cb:ca:5f:55:fb:
                    e3:10:86:18:4f:aa:e6:91:96:2e:07:ef:7f:23:ba:
                    2e:6a:49:b5:d6:84:c3:9a:8d:8d:00:14:1f:44:84:
                    37:30:12:e6:10:68:8f:76:7e:84:08:aa:70:f0:c1:
                    42:c2:bf:35:d4:ab:b3:ba:c1:04:99:81:db:95:9f:
                    ad:82:48:2d:fa:12:7c:b0:95:2d:58:87:85:cc:ef:
                    5c:9f:01:ad:36:23:a2:08:29:a9:64:5d:98:ae:5e:
                    fc:5d:05:d3:cf:d9:fa:64:bd:78:90:ef:51:ef:48:
                    65:56:c6:d1:bc:9f:f3:d0:84:f3:b7:3b:6d:10:b5:
                    43:ef:21:9e:28:be:3d:2d:5f:eb:6c:ac:2a:9c:61:
                    6d:15:61:6d:c0:1b:e0:0b:43:1d:dd:07:63:cb:c8:
                    a3:d5:55:3f:8e:39:af:a8:fc:67:b2:82:70:0c:89:
                    bb:0f:7a:33:fa:20:62:2d:16:71:3b:22:13:e8:72:
                    a2:c6:72:3c:12:53:3d:fe:a1:22:99:b8:5a:38:52:
                    b3:2f:b4:16:1c:fd:43:d5:cc:c3:10:68:ba:31:da:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.140.0/22
                IPv6:
                  2a0e:ed00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208839

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:6b:bd:bf:2d:9c:93:6d:44:2b:e3:44:42:87:46:12:26:
         1c:ca:1b:57:9c:2b:ad:b3:58:21:78:d7:16:06:92:3c:94:40:
         0d:b5:3c:21:1c:51:2c:d2:25:ae:b7:83:71:e1:e0:1e:20:e3:
         fc:de:c0:53:30:7a:f5:a1:a1:cf:b7:b6:92:1c:df:b3:ef:99:
         d2:7c:b4:42:30:8d:6a:5f:c4:a6:74:5e:a7:27:12:f7:8b:2c:
         48:6d:be:03:b6:63:84:a8:ca:d4:58:39:86:d6:9c:6a:83:e0:
         30:6e:8f:64:ae:3a:ae:0c:d8:bd:f2:06:ed:37:19:fa:62:b8:
         d1:5c:2a:84:98:8b:2f:de:a3:c9:fb:fb:f2:d9:1d:1b:7c:2d:
         f6:25:07:55:bb:e8:91:80:83:b6:37:13:0b:0b:af:cf:d9:64:
         72:5e:92:15:ca:a9:c4:d7:83:f1:d6:57:b5:a6:08:32:84:16:
         a4:2a:69:32:91:0a:4d:18:44:a9:f0:90:e9:d6:bb:9b:0d:c2:
         ae:66:e8:ff:d4:ad:ee:79:25:38:0f:42:8a:62:f6:8b:56:0e:
         d2:ac:7e:c9:7f:d3:44:59:ec:04:64:55:0e:ed:1c:0b:1d:83:
         ed:aa:ad:15:23:09:33:7b:69:c7:b2:5a:2f:f4:e3:e4:93:ce:
         34:56:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----