Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.cer (raw, json)
Hash identifier:          GHCY2IQfLMg8YIBea/RjXffEU+UrfezQVgDoKl2UZLM=
Subject key identifier:   F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019594A078BAE472A73A3A671E7E800D2ABC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 14 Mar 2025 12:28:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211540
                          IP: 195.242.204.0/23
                          IP: 2a14:6d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:94:a0:78:ba:e4:72:a7:3a:3a:67:1e:7e:80:0d:2a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 14 12:28:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:d1:ad:8a:30:0b:3b:23:6a:b1:20:4c:0b:
                    b4:e9:0b:9a:93:ae:84:a4:5b:00:00:90:41:79:e9:
                    90:1c:fd:02:6a:e1:74:bd:fe:de:bc:e7:94:51:fb:
                    b4:70:b0:48:91:84:d2:56:af:93:83:25:da:13:56:
                    dc:28:4b:bd:f7:b7:db:4a:eb:b8:bb:cd:d3:3f:8d:
                    58:1d:7d:7c:48:5e:29:cd:01:06:56:f5:f0:39:7e:
                    82:62:1a:c0:3a:f8:25:ce:b5:f5:38:1e:6d:eb:e2:
                    17:aa:0f:89:5e:02:25:9f:e7:c5:b5:39:48:d9:ca:
                    a4:14:ca:da:d8:83:90:a5:6b:46:b9:98:39:d3:c4:
                    e4:e0:60:55:17:82:92:cf:91:44:9e:a3:57:dc:5f:
                    2c:40:0a:7e:28:c5:c1:b3:b0:7a:4a:98:07:fe:7f:
                    e0:d0:61:ee:24:e7:3c:a9:63:48:63:68:1b:ee:d7:
                    bc:4d:8a:ab:2f:55:8f:b5:a5:5e:ef:08:72:fa:6c:
                    ec:49:a3:60:4f:c1:62:f8:c3:1e:ab:0b:31:32:8f:
                    de:19:53:7e:f4:a5:2e:4d:32:69:68:8b:0b:b7:4a:
                    01:cd:d3:09:71:cf:15:6e:32:31:97:dd:c1:ec:62:
                    4f:83:66:21:2a:66:2e:77:24:45:ed:15:c5:03:07:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.204.0/23
                IPv6:
                  2a14:6d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211540

    Signature Algorithm: sha256WithRSAEncryption
         b0:41:4f:0d:75:91:0b:36:83:42:4f:48:df:5c:1c:34:80:b8:
         86:9b:3e:14:b3:35:30:25:c5:ae:04:46:98:52:c3:75:57:95:
         73:78:72:08:fe:02:fd:b8:a3:81:33:07:9c:31:54:38:20:68:
         a8:eb:93:be:8a:b8:37:24:4d:c0:a6:27:3b:07:c7:a0:03:4c:
         43:d3:91:0f:13:38:21:8b:22:35:c7:55:d3:1c:7e:73:27:3f:
         fe:21:93:6a:17:ff:de:e4:dd:0d:28:4a:0e:91:28:a2:67:bc:
         2b:45:bb:e5:a9:23:df:b6:2d:f4:86:0f:29:1d:52:b4:c7:e7:
         82:a5:ac:c7:99:12:3b:ac:34:8c:ec:b5:d2:7d:1d:bb:63:ab:
         8e:e6:4b:92:bc:be:67:ce:cf:fa:2c:5f:af:a3:0c:d1:43:d0:
         94:17:e3:52:6d:18:1c:52:c2:0c:88:f3:0e:6f:50:e2:a1:16:
         2c:79:f0:20:55:df:51:6b:0d:8e:44:cf:65:a7:82:ea:46:cd:
         d4:83:ad:b6:ac:bd:49:0f:7a:83:81:9b:50:14:c1:a7:58:07:
         51:c7:48:f8:12:27:73:15:16:87:a0:e7:c7:50:16:f8:de:05:
         e8:7a:4a:37:18:8c:88:dc:b2:9c:73:03:e7:1e:b2:d1:90:5c:
         22:d0:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----