Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
File:                     7qR10Itvi3jtEbDKTRNt6zi8mRs.cer (raw, json)
Hash identifier:          0FJEJYRxk/PgDyg68D6nilKYFuIf7pCZXsqv4XfLbOE=
Subject key identifier:   EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425219D994AD280CA94C8F37BAB3AF69D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34308
                          IP: 84.246.248.0/21
                          IP: 185.63.212.0/22
                          IP: 2a00:eae0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:9d:99:4a:d2:80:ca:94:c8:f3:7b:ab:3a:f6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:0e:fd:ae:13:3e:72:51:e6:ad:38:71:8f:
                    0f:41:be:70:f4:5c:70:0c:38:6d:7f:0a:aa:36:1c:
                    1f:b5:c6:d1:08:48:31:61:e7:1e:22:6d:40:2d:3d:
                    83:b0:75:0c:05:c6:76:e9:55:51:ef:97:02:99:83:
                    9f:63:01:28:b7:d0:95:ad:3a:3c:0c:79:83:68:d7:
                    3d:7a:23:df:81:c2:59:14:19:99:11:11:ce:04:40:
                    03:5d:19:48:e5:cb:7a:0c:90:35:64:36:ed:20:d6:
                    fd:6c:a3:b1:e7:96:30:c0:70:c3:5b:ae:05:bb:9a:
                    43:89:6e:94:45:d2:12:37:8d:04:b5:f2:2c:4e:70:
                    a4:13:f6:3d:cc:9a:39:d9:8c:75:72:88:23:43:7a:
                    f6:86:7f:63:1b:9b:77:ec:f5:af:91:ee:63:87:29:
                    20:51:7a:1d:95:90:5d:09:ed:1b:38:ef:db:00:92:
                    89:33:c4:dd:51:fe:52:43:5e:8a:3a:9d:5a:c6:e0:
                    0d:29:ba:74:5a:28:4b:25:fd:17:dc:a7:41:81:a2:
                    02:5b:6c:27:c6:e3:f9:3a:70:9f:01:bd:14:10:47:
                    9a:b6:bd:7d:4d:b0:37:f3:94:04:37:05:17:ce:4e:
                    b8:3e:d9:e1:b9:e6:85:a3:99:27:9c:17:f7:53:1c:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.248.0/21
                  185.63.212.0/22
                IPv6:
                  2a00:eae0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34308

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:f9:b3:4f:db:6f:3f:c0:dc:85:7b:9a:ce:72:c3:4b:6f:
         b3:a2:9c:61:1c:bf:3c:0c:1e:a7:73:d1:4f:15:25:57:ac:12:
         89:7a:07:66:4b:68:a7:4c:6d:9e:bb:bd:cf:ce:17:95:cb:15:
         11:54:86:18:02:02:43:52:57:52:07:e4:bc:13:ea:83:58:cf:
         96:f0:a7:86:af:5a:5e:9a:54:a7:db:48:d3:0a:9c:fd:bb:6e:
         d1:a9:7f:32:dc:af:f2:24:4e:3e:da:fd:b5:47:ca:ac:87:db:
         ad:8e:86:68:d2:79:b3:25:86:35:67:8c:bf:88:f9:9c:48:03:
         41:59:6c:d9:b3:29:ef:bf:47:a6:da:20:dd:26:de:aa:01:4e:
         e0:e1:d4:52:f7:f6:aa:1a:bb:6a:3c:c9:c9:6b:86:1b:00:13:
         12:35:f0:0e:8b:e6:5f:9e:0e:45:bc:3e:f8:f4:d4:7d:77:af:
         f4:bd:a1:6b:9b:a7:7c:58:06:32:5b:6f:c8:53:31:6a:ed:7c:
         e9:7f:9c:85:b0:8c:93:08:ef:ea:b7:0a:1a:98:eb:bb:0e:c0:
         9b:2a:e2:f9:40:9e:40:b4:c4:fb:51:ac:09:de:3d:6a:c6:2e:
         e9:f2:f9:95:6a:e5:4e:1b:1f:ff:37:2a:58:ff:ff:da:d6:6a:
         33:68:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----