Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer (raw, json)
Hash identifier:          Vahi5HjEosojVeD2qFSZD7f2xrYFeSYyZjHHVBG3A3M=
Subject key identifier:   F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421440230035D526E2F6B7E8C4FE08A77
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 29237
                          IP: 185.96.228.0/22
                          IP: 2a06:280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:02:30:03:5d:52:6e:2f:6b:7e:8c:4f:e0:8a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:89:de:75:4a:4d:b1:d9:25:eb:d5:60:cf:
                    58:c1:c3:b4:0e:aa:00:12:7a:59:54:3c:0e:b3:41:
                    2e:55:43:5f:de:f3:d0:2c:e3:6f:cb:df:62:b4:d3:
                    22:19:ec:ec:93:20:ce:4e:87:e1:c8:5a:53:60:8c:
                    15:cd:8a:c8:01:ec:ee:09:39:a4:90:77:0f:ba:2f:
                    49:2e:40:4f:1f:0e:46:c7:c5:26:1b:80:e0:bb:e3:
                    03:60:ab:6c:8f:b7:be:62:2e:62:f5:3b:2b:5e:3e:
                    90:fb:66:5c:16:3f:30:97:30:1f:eb:78:c6:d1:05:
                    d8:86:8d:6b:fe:f4:0e:3c:3a:ef:50:e0:af:f9:d7:
                    0d:58:05:f1:ce:c1:f7:6c:b5:4e:12:82:10:7b:1a:
                    83:1c:97:7d:d5:4f:7c:30:3b:81:b6:98:97:00:80:
                    ad:5a:b4:37:78:82:a2:72:63:12:80:26:83:d9:c3:
                    76:9b:ae:ba:83:56:33:f8:22:4a:a3:36:9a:2c:a4:
                    e5:fd:1c:36:57:1d:0d:95:53:13:2a:0d:6d:80:29:
                    e3:0c:09:49:f0:7e:31:ba:1c:2a:e6:d4:66:61:eb:
                    a3:af:fb:ef:e3:70:b2:b2:10:61:3d:c9:66:bf:eb:
                    dd:78:de:a0:9c:1a:e9:41:e4:68:fe:b3:66:3a:d5:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.228.0/22
                IPv6:
                  2a06:280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29237

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:9b:2f:43:88:98:6a:95:d6:73:89:da:1d:f9:2a:47:70:
         3a:09:3c:32:3b:55:58:42:b6:8d:5f:82:36:0d:89:3a:bf:b7:
         c8:8a:90:98:bb:89:75:0c:33:ee:c9:74:13:af:1d:d5:cf:ed:
         6f:a6:22:f1:7d:14:86:9b:05:d6:2c:2d:8c:65:a7:15:df:d4:
         71:d0:87:b3:dd:90:eb:98:a6:a2:b3:b2:72:86:45:88:96:e2:
         c5:0e:93:eb:d7:b1:66:e1:fc:30:f6:7c:11:7f:1b:16:15:24:
         12:49:55:21:7c:a6:f3:4c:39:f3:6d:b7:b1:44:d2:f7:ca:5a:
         18:f7:53:3d:6c:19:d3:c5:2f:4b:be:cc:0e:98:c5:dd:4b:1b:
         28:b4:d2:b5:18:c0:e5:71:28:23:ce:08:19:8c:a1:74:9f:a4:
         c4:a9:9e:ea:af:90:b2:35:ff:76:16:3d:92:eb:be:44:9f:5e:
         19:a1:1e:b2:c2:a3:91:37:f1:1f:d1:9a:86:91:4a:6d:e5:19:
         3d:40:42:c5:19:bb:41:de:ae:1d:e9:23:1d:c9:0a:c3:17:79:
         93:99:24:12:75:0b:3b:cc:e9:15:01:0e:a7:9f:47:97:7d:2d:
         85:4f:22:1b:bb:94:80:18:ae:37:db:b9:98:da:19:4a:15:21:
         c3:d7:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----