Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.cer (raw, json)
Hash identifier:          QaFDFRTAYTmuXYhfPFg6I55DF+SAwO/Crbk7FGtuta0=
Subject key identifier:   F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5E82145DD250240388C8AB1E7F2B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209931
                          IP: 212.162.128.0/22
                          IP: 2a09:1300::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:e8:21:45:dd:25:02:40:38:8c:8a:b1:e7:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f266a0f986f21945c80d831567baf29620107adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:80:68:35:bf:36:7b:17:84:b2:5f:2b:82:
                    ed:74:90:d5:10:8e:5c:2f:6e:ad:3e:10:1d:5b:e5:
                    39:39:46:3b:86:f4:4a:f1:bd:17:af:1b:22:d0:87:
                    ae:f4:02:8d:22:2f:35:f1:1f:60:60:b6:df:c3:4d:
                    49:1f:88:c6:5d:e5:30:d5:a2:05:96:a9:1f:33:71:
                    dc:4d:a2:69:a8:c3:a7:33:20:e4:37:3d:37:0c:76:
                    6a:d1:9b:20:cd:a9:68:9f:df:01:64:2d:d5:2b:f7:
                    0b:7c:98:ad:dc:42:1b:18:ae:27:30:1f:b1:94:1e:
                    f1:a3:d3:fb:c2:8d:0a:a3:7f:0e:a2:ab:9a:ac:af:
                    7c:e5:21:b4:d8:75:66:6b:c6:f5:7b:13:f2:98:de:
                    0e:49:47:24:2d:fb:2e:51:d9:71:f5:e0:1a:f9:ab:
                    ff:25:e1:e3:a8:22:18:24:16:36:c9:2e:ec:43:77:
                    5f:ee:47:c9:95:ee:c6:f0:8c:10:b9:e6:a1:13:36:
                    be:f4:a0:a6:cb:cc:4f:60:71:20:ed:9a:63:ad:bb:
                    ac:b6:93:df:40:a9:45:4b:f4:48:40:f5:80:6b:c6:
                    2c:8a:ad:41:bd:30:af:c8:91:fe:f8:c1:0b:0b:e2:
                    fb:c0:fd:74:39:e1:18:b3:5f:72:24:a5:f9:35:0b:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.162.128.0/22
                IPv6:
                  2a09:1300::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209931

    Signature Algorithm: sha256WithRSAEncryption
         33:92:e3:3a:d9:42:f0:5d:38:a8:89:b5:0f:c9:dc:e1:f1:1a:
         84:44:d8:09:53:a3:85:f2:54:4c:93:ef:ab:a1:40:53:b0:28:
         21:0d:03:ee:ad:e8:a4:6e:95:dd:fe:9d:f1:35:5e:cd:dc:43:
         09:db:c1:0e:63:ee:3e:99:3d:f0:98:39:08:9c:f6:ba:5c:b5:
         e7:08:4c:fd:c9:c3:db:71:34:ad:0d:88:d6:9f:59:c9:81:18:
         c3:05:94:76:05:fd:23:0c:4a:d3:e4:61:d7:87:d3:e9:b4:cb:
         1d:a6:49:3c:72:e3:64:a9:5f:84:13:41:b8:9e:4c:05:53:e6:
         25:74:0c:50:1b:b7:01:52:dd:92:0a:f6:47:0e:43:42:ad:38:
         fb:8b:4c:c5:1a:80:68:d3:23:53:93:2e:27:ff:7e:0b:e9:23:
         4b:e9:cf:7e:ae:96:ee:e1:39:cc:75:76:bb:6d:87:53:a8:e7:
         00:21:9e:5e:08:76:b0:87:8e:d1:85:18:95:97:10:21:ff:88:
         9a:50:40:fc:73:8e:b7:17:90:b0:6c:ca:d5:eb:6d:73:93:bc:
         d5:37:56:f2:b0:2a:45:64:b1:d4:fa:ef:e0:82:fb:df:7e:5a:
         99:f6:36:73:f5:f4:c7:97:01:a9:ed:4d:97:ed:db:a4:76:45:
         a6:43:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----