Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
File:                     8NnLvv3mEuYeDND_C4cZYcv3l-M.cer (raw, json)
Hash identifier:          HJ7U0vFqat52uUnRQNhKW6M6FI7RFQhPMvQPPlQtE9A=
Subject key identifier:   F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195A9556108593F4212F568283B0C2FD35E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Mar 2025 12:58:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214673
                          IP: 92.62.118.0/24
                          IP: 193.143.69.0/24
                          IP: 2001:67c:b30::/48
                          IP: 2a11:4880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a9:55:61:08:59:3f:42:12:f5:68:28:3b:0c:2f:d3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 18 12:58:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:e8:41:7b:21:2b:3e:ce:89:be:17:58:66:
                    bd:20:51:0c:6c:83:d8:12:4b:59:ba:fe:76:43:06:
                    47:5e:36:c4:85:8e:43:32:90:cd:ef:39:69:2b:d8:
                    5f:63:4f:e5:2d:04:ee:29:64:a2:72:4f:26:4d:d9:
                    a8:b8:41:4b:c7:46:09:2b:10:15:0f:05:56:b6:0f:
                    05:cf:f3:e4:51:e0:8f:85:b3:b1:53:6a:cb:e5:08:
                    8f:18:a9:6a:83:31:5c:ec:29:c5:be:e5:79:8f:a1:
                    eb:d3:46:5e:33:ff:80:27:33:10:31:c9:57:98:45:
                    85:5d:32:e0:bf:34:12:7a:96:05:4f:97:7c:fa:0e:
                    f2:59:86:d3:fb:3c:33:e3:04:1c:8d:46:5b:e3:f1:
                    7c:ff:4d:9d:60:01:98:64:0a:99:f8:3c:cc:f6:ee:
                    19:0a:bb:da:e5:0d:3d:e5:96:15:6e:d9:3f:0b:bd:
                    20:bc:a9:df:17:19:8b:08:d3:fe:92:02:8f:31:eb:
                    5b:8e:da:1d:78:b3:84:33:c1:3d:84:19:db:09:ce:
                    d4:37:e2:4d:3b:8d:0d:60:5d:29:46:da:e2:d2:60:
                    1c:aa:ff:40:ef:dc:a8:b1:9a:ee:d7:26:36:61:10:
                    96:9a:e0:d3:e4:24:3b:89:af:c0:fa:30:16:00:f2:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.62.118.0/24
                  193.143.69.0/24
                IPv6:
                  2001:67c:b30::/48
                  2a11:4880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214673

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:26:ac:ba:d2:2e:bd:91:df:41:24:c0:a1:3b:f2:ad:eb:
         a4:3c:e9:31:f6:3e:e0:1d:7b:e7:7c:66:c1:7a:46:fc:a6:8d:
         d2:6e:d2:c5:3d:ff:c8:1d:1c:a7:af:a4:cf:86:92:c8:2c:fa:
         32:89:d9:04:b4:6b:5e:f1:3e:8c:93:ee:86:4a:09:79:0e:89:
         52:c9:a9:42:0d:bf:90:86:a5:d1:29:c2:b1:78:70:f1:ba:4c:
         37:33:23:98:c3:ad:2d:6d:48:d5:6a:cc:eb:a3:3d:59:54:6b:
         ef:e8:17:5f:7a:91:56:19:cf:f2:5a:e9:07:98:f3:aa:a4:64:
         14:7f:b8:db:8c:cd:89:45:7d:69:5e:38:a4:e4:a0:36:15:33:
         7d:8a:49:10:5f:31:46:5e:e9:71:04:3f:d3:44:d3:4b:81:bc:
         90:eb:1f:8d:13:4c:74:32:a6:61:8a:63:fc:c6:93:2a:51:ec:
         7f:ae:ce:e8:cf:d7:dd:dd:cc:42:df:13:4f:b8:10:e7:d7:37:
         70:2c:ad:54:46:f3:e9:28:f0:cf:66:5d:a1:8c:72:d2:b2:36:
         49:a5:42:b4:7e:f7:31:33:78:c1:bb:1f:69:8a:b0:2d:fe:a4:
         3a:b4:d7:85:55:f6:91:aa:65:15:cd:75:3d:a0:d8:65:94:f1:
         99:4f:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----