Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.cer (raw, json)
Hash identifier:          mGqfQjPfSu3BXAKh7GB/woqdROF48lqAV1BDZeXvTRs=
Subject key identifier:   ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D95D8436982C94EE24E8BD330B8CAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199831
                          IP: 185.30.0.0/22
                          IP: 185.45.216.0/22
                          IP: 2a01:78a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:5d:84:36:98:2c:94:ee:24:e8:bd:33:0b:8c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:b4:cf:1d:7f:f8:a0:65:67:4a:8f:59:da:
                    07:5e:6f:69:81:b6:2b:4f:8b:f3:b9:d6:22:a9:f7:
                    05:29:dd:0c:e3:89:78:54:a6:7c:f0:09:bd:82:5e:
                    0b:5c:bb:e8:9c:c7:f0:ff:fc:1d:48:de:0e:2f:6f:
                    b2:d0:97:39:99:8b:6d:bd:81:94:29:64:53:1c:ca:
                    c1:30:26:e0:86:91:84:0e:41:6b:75:4e:62:dd:21:
                    b4:ee:d9:32:87:89:ad:df:e4:25:85:93:01:2d:42:
                    91:fa:4f:f3:e0:72:dc:a4:62:ce:d8:f6:e7:9c:19:
                    bd:bc:91:a1:c5:7d:2b:d0:9c:7e:ff:07:dd:4b:ca:
                    fb:1e:cc:46:40:95:fc:5c:86:44:bc:30:92:27:fc:
                    16:40:c5:23:46:c0:6b:01:4b:27:61:56:fb:c2:f7:
                    1c:6c:f9:b4:97:b4:92:a8:b1:9c:06:6f:9f:07:20:
                    45:4e:d2:58:af:6a:28:2f:64:fe:3c:33:5c:c8:a9:
                    fb:45:14:e1:3d:b9:6d:c9:56:49:76:0d:76:e1:77:
                    b6:62:21:ac:94:59:e0:8a:ce:89:a9:f7:e1:62:40:
                    b5:1d:e7:e9:18:e6:2d:50:dd:b9:d7:8d:1f:87:30:
                    fa:ab:d4:91:9d:bb:19:d9:ae:95:19:39:63:b4:33:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.0.0/22
                  185.45.216.0/22
                IPv6:
                  2a01:78a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199831

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:27:10:1c:f9:fc:c0:e0:6f:57:7c:b9:65:22:fc:7c:b6:
         61:c9:9a:e4:3a:c0:b6:04:3b:c0:6d:94:d8:c5:38:a3:f5:1e:
         60:49:18:6d:9a:33:e3:f2:be:01:ee:5f:d9:21:34:f8:de:1a:
         13:db:90:75:9a:d3:11:d7:ce:65:91:b1:63:d6:66:f7:44:05:
         a0:0a:4e:77:5b:c2:a9:22:22:b1:ab:72:79:04:f5:75:e7:4d:
         53:88:55:50:a4:8b:3b:57:9b:2c:47:33:4c:13:29:2b:65:fc:
         51:c1:4a:2c:03:ca:39:a2:ca:72:15:4c:3e:71:a3:29:6b:75:
         a9:a2:8d:88:ee:11:2c:21:c1:2d:1c:ba:ce:52:f1:88:e5:95:
         68:74:60:b2:09:49:c3:5d:5a:4a:04:13:6e:21:e0:31:81:e5:
         c0:30:53:f6:5f:1b:0b:01:7c:f4:73:f8:09:9d:97:22:f8:08:
         83:e7:a1:d7:5c:e8:44:90:c3:4e:25:22:72:0b:df:8b:d7:b1:
         0f:27:bc:13:19:4a:c3:df:d2:db:38:e7:18:76:c9:88:a2:f1:
         23:10:51:f4:0a:a2:78:ee:2a:58:73:87:d6:83:9a:a7:93:c1:
         f4:e5:e7:7c:ad:19:67:be:04:81:33:dc:9a:cc:07:5e:23:74:
         be:af:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----