Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
File:                     8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer (raw, json)
Hash identifier:          zsw70coB/DXJIj9w1HII38NpejknMSWJCdy7UZqjTTQ=
Subject key identifier:   F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D8317F8C2A46C1669E934608464F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49584
                          IP: 185.2.60.0/22
                          IP: 185.179.112.0/22
                          IP: 2a0e:1c40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:83:17:f8:c2:a4:6c:16:69:e9:34:60:84:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:61:b7:45:31:e9:c6:ab:70:c6:d5:15:02:
                    86:e6:6c:9c:49:13:1d:ce:e9:9d:c6:b7:9d:63:d8:
                    9d:ba:dd:f6:f9:e1:21:99:12:84:2e:59:81:77:64:
                    6f:58:b1:ff:a0:ff:92:58:07:1c:22:38:2f:f1:bc:
                    95:d3:7d:c6:52:f9:c4:40:a1:75:0c:9e:0f:d7:6b:
                    79:c1:24:f8:5a:95:83:f5:a3:6f:96:4e:76:6f:b2:
                    9c:41:dd:22:e7:10:95:c5:37:9a:ff:3d:70:50:6c:
                    df:56:25:73:cb:3f:13:0d:b6:21:1f:10:b4:d8:5b:
                    7f:f3:39:c1:73:a7:43:2c:c6:91:25:bd:1d:38:95:
                    50:6c:d7:0b:5d:4e:22:8f:19:85:18:1b:e2:b5:89:
                    67:ba:36:28:38:36:bb:f9:06:1e:a3:b0:6b:fd:2c:
                    e7:37:8e:5a:ca:b3:b4:df:ba:8f:ab:e7:88:5d:d8:
                    f2:5c:99:8c:de:9f:97:cd:f7:e7:87:aa:50:b4:64:
                    0e:c0:dd:bf:7d:44:43:a9:06:14:aa:b3:9a:5b:45:
                    f7:43:49:64:54:d9:5d:36:9d:19:80:f7:2c:56:04:
                    71:b4:24:df:8e:da:e9:90:6c:2d:66:03:2a:fc:b5:
                    28:60:cf:88:05:c3:a7:ba:9b:e1:38:84:f1:e1:ec:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.60.0/22
                  185.179.112.0/22
                IPv6:
                  2a0e:1c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49584

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:ee:8a:6d:0a:7c:81:7e:b1:1a:be:f2:cf:fa:da:f8:a1:
         94:fa:ec:7d:ff:45:0b:eb:f7:46:d8:85:f5:26:3b:ed:45:e9:
         28:c5:54:2a:68:b1:ec:dd:5a:12:77:e1:3d:f3:74:69:35:45:
         8d:8f:cd:c7:80:fa:9c:40:0a:8e:40:c4:f9:90:fe:ff:78:dd:
         57:8a:19:9f:6d:c1:97:6b:e8:f4:19:0a:33:b6:e5:a5:75:2a:
         61:0d:75:d9:e2:9e:6b:58:d1:ac:77:8d:6c:ed:a6:b2:62:49:
         cb:25:f0:00:cb:ff:07:9b:e5:10:69:3a:f8:ac:c4:8a:29:ff:
         6e:97:d4:b5:3b:b2:f3:79:a4:07:8a:d3:88:a5:04:17:2d:5d:
         05:1f:49:49:03:57:45:86:8e:96:02:4c:7e:03:8d:4e:49:d9:
         eb:d7:83:dc:21:6b:b0:74:04:b5:95:d5:cb:69:d2:4c:03:e8:
         e7:fa:41:fb:49:6a:7d:8a:40:e1:eb:dd:83:9d:42:80:3e:e7:
         57:3a:15:69:85:c6:52:c3:f4:0f:cf:ad:40:7f:e8:36:31:49:
         d6:b7:e9:ae:2f:88:57:4b:5b:99:0b:25:0a:55:5e:e5:c5:6b:
         ba:21:e5:04:2f:ef:e9:56:4c:2f:4f:92:49:24:a6:27:dc:de:
         b0:4f:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----