Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
File:                     8C4yJOPjKSgZJijSZIfVAPJwd2U.cer (raw, json)
Hash identifier:          q1/dG0MBm5F63zIIeZmFxBhGqDgDft2mquVA4/6HqXE=
Subject key identifier:   F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DFDA253A86B4199A8D1BF1FE2022A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47599
                          IP: 193.203.96.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:fd:a2:53:a8:6b:41:99:a8:d1:bf:1f:e2:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f02e3224e3e32928192628d26487d500f2707765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:47:98:8f:d9:6f:d0:28:cb:c4:c8:44:d5:
                    d6:00:66:dd:56:bf:b9:f6:b1:65:61:30:7e:df:bc:
                    26:96:9d:2d:99:92:ad:85:3b:12:19:5a:50:b2:86:
                    ef:ae:3c:69:76:f2:ea:51:c8:be:eb:6d:42:2e:86:
                    66:6a:0a:d5:32:b8:d5:a8:3b:07:6e:07:05:c5:0d:
                    2d:35:b7:11:cb:95:7e:42:f5:18:cd:b5:2b:cb:fc:
                    5b:71:cd:30:04:51:ed:1b:01:5c:81:0c:fc:f6:56:
                    28:f0:fb:36:a0:91:38:1c:3d:ba:c9:7a:9d:ea:73:
                    62:52:08:54:bb:ab:84:01:5f:4c:33:10:dc:97:5d:
                    9d:fa:59:30:29:b0:37:c1:69:08:a6:62:1b:d8:5a:
                    df:ee:a0:3e:ba:44:fe:55:ad:fa:18:48:52:27:56:
                    da:20:3c:6b:6a:39:2d:39:b3:f9:80:91:f4:e0:b4:
                    3c:c5:ad:71:1e:42:64:62:65:79:c4:0f:37:f6:58:
                    b0:48:3b:14:36:db:79:f2:99:94:f8:96:a6:89:27:
                    e0:05:f2:af:37:50:4c:41:05:b7:2b:6d:5a:f3:50:
                    0f:1d:e6:59:62:c4:65:df:b8:23:80:f9:d6:73:47:
                    b4:58:ef:e6:b5:eb:6a:91:e7:4c:5b:a8:14:7f:bb:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.96.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47599

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:15:98:c4:18:20:dc:84:d5:58:27:52:18:d7:38:9f:00:
         ec:0b:6c:1b:3f:86:77:a9:10:55:c5:3a:6d:5b:b6:a1:7e:c8:
         bd:0c:49:4f:54:ea:6b:5f:ed:c6:e4:13:62:3f:87:0a:cd:c2:
         36:c9:26:5b:64:c8:ad:39:ef:8b:96:ba:7d:c7:4e:7c:78:d6:
         0e:0d:0c:c9:61:95:04:52:37:a6:7b:5e:c2:4a:94:92:ff:31:
         09:5f:26:1d:ed:a6:13:7e:c6:e5:bb:77:dd:d7:51:2e:3f:17:
         7a:37:fc:9c:c8:89:8b:56:fc:17:45:de:5c:14:e5:b3:96:f8:
         90:bc:d3:ae:77:af:9b:fa:42:e2:f5:28:e2:d7:90:24:2d:b9:
         39:9c:0f:f3:3d:88:be:cd:be:14:d6:bf:13:07:2e:1e:d0:49:
         5e:4a:2c:6b:56:b2:1a:af:06:2d:c5:0e:ba:4a:82:e8:97:ce:
         e6:95:41:7e:86:f3:d0:d3:a9:6a:8a:01:1b:7c:db:45:a6:fd:
         2b:f5:3c:aa:34:18:2e:f3:27:a2:4f:f7:1b:9d:66:40:2d:31:
         15:20:b1:32:ff:fd:a6:25:c6:7f:a4:6d:91:a9:03:74:04:70:
         3c:70:d7:52:6a:08:fe:a3:0c:54:41:08:76:6e:15:19:15:12:
         de:e3:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----