Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
File:                     9rLInTH2F1Fqhgp4IrumgkinaaA.cer (raw, json)
Hash identifier:          U9gsk4ZvOBqaqu9zKPKryU2AldtzPEHk9hjdnxz3G5U=
Subject key identifier:   F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236979A8055C97C1911414E94B4D46E8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204465
                          IP: 94.199.6.0/24
                          IP: 2a13:4600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:79:a8:05:5c:97:c1:91:14:14:e9:4b:4d:46:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6b2c89d31f617516a860a7822bba68248a769a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:b4:66:bb:53:b4:05:95:d5:f6:5f:e1:19:
                    ac:4d:c9:24:fe:12:8b:e3:81:ed:75:b9:e9:46:aa:
                    2b:a4:e0:eb:c6:f0:92:29:bc:c1:60:b0:67:43:72:
                    93:e8:92:0e:6a:14:42:e3:48:90:d6:2d:e8:a6:06:
                    ae:8c:59:d8:89:0f:19:4b:5b:d8:f6:83:98:81:ec:
                    de:7a:9f:58:c2:0a:73:c2:fb:25:35:44:61:16:c6:
                    2c:dd:12:45:73:f1:40:c3:34:c2:70:8d:70:fd:97:
                    8c:8a:b3:49:e8:79:b4:95:39:78:08:1c:14:61:12:
                    d5:d8:b7:1f:f5:a0:fd:c1:f9:07:e3:8c:fd:b3:6d:
                    58:5b:05:bd:15:62:c3:c6:2d:aa:29:89:03:a2:27:
                    d8:cf:55:c5:89:0a:60:a0:b3:ef:03:97:fe:ab:94:
                    cb:90:d2:74:4f:31:03:0d:63:dd:e8:37:d1:6c:cb:
                    57:b2:c4:77:5d:42:e0:c7:8a:9a:7b:c9:a5:6e:db:
                    22:dc:17:bd:d1:ab:98:16:ed:81:ca:ca:fc:70:66:
                    a0:59:f8:25:e5:bb:2e:88:a0:e3:f9:09:e4:68:8c:
                    15:ff:64:43:14:af:71:51:70:59:45:39:48:95:9d:
                    d5:1e:d7:42:2d:76:58:04:eb:e7:be:3e:2f:f5:69:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.6.0/24
                IPv6:
                  2a13:4600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204465

    Signature Algorithm: sha256WithRSAEncryption
         43:14:48:c6:ff:5b:81:36:40:d3:bb:34:a5:e2:b7:bf:fa:c8:
         4d:05:37:8d:54:89:b8:4c:b7:d2:19:91:9b:c9:f0:26:50:6d:
         ec:bd:06:f8:25:3a:31:c2:08:f7:2b:a6:bd:ef:e9:ad:66:16:
         c1:65:a3:88:a6:82:2d:6a:ac:98:32:33:1a:60:a8:7e:02:72:
         eb:42:72:fd:8b:1f:18:de:ec:4c:64:5e:5c:2f:f3:62:f7:bf:
         fa:48:15:4e:f7:24:9c:8b:f7:06:60:4b:d6:03:6e:1f:68:42:
         b3:43:2f:27:a1:be:4f:92:08:bc:49:4c:04:76:69:78:3c:18:
         df:c1:63:23:54:fa:2c:5d:45:81:0c:ec:3b:22:62:5a:3f:24:
         0f:20:2a:ed:1a:33:54:b9:45:3a:eb:7a:37:15:f5:a7:fc:c5:
         bc:67:58:59:41:8c:3e:c8:f2:57:e1:c4:a9:87:51:5c:5c:c4:
         4a:f0:0b:92:8c:07:13:f0:83:fe:21:87:4c:67:e2:b8:ad:f0:
         6e:81:69:2e:8d:f2:42:4a:5f:f3:40:46:13:96:f0:4b:ba:fb:
         76:b2:45:a4:68:dc:f0:b0:32:d0:68:d3:eb:f0:69:67:c8:d8:
         f4:29:f6:49:f2:5e:95:35:7b:8a:60:bd:a5:9e:4a:02:05:1a:
         a4:6c:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----