Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
File:                     A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer (raw, json)
Hash identifier:          +6PoGzHajLVynoKV2Ny3RbH74zE+bl6xaGiDpTDPWts=
Subject key identifier:   03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B26F3F1D7CD194AE21EC0BC2CF937B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199165
                          IP: 91.241.56.0/24
                          IP: 2001:67c:2e7c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:6f:3f:1d:7c:d1:94:ae:21:ec:0b:c2:cf:93:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03820e964dfd3d281420afda20ce949e60d4cc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:10:85:2b:7e:77:22:07:6d:8f:b4:64:4c:
                    4a:15:3d:86:7c:6e:2b:5f:74:cf:30:e1:6d:aa:6a:
                    db:66:2e:8e:74:4f:d2:67:2b:cc:2d:a4:6a:3c:78:
                    50:c2:46:33:20:2a:06:6e:c8:64:eb:14:b6:23:f2:
                    f4:07:55:19:c9:f4:08:3d:33:2c:dc:ec:cf:7d:c7:
                    2a:ea:70:54:05:43:24:52:46:15:d0:9b:c4:f6:ee:
                    e6:11:7c:73:24:3c:6e:8d:8b:4f:f4:9d:13:82:41:
                    c7:41:bd:0d:4f:a2:08:fa:08:97:50:3c:30:69:e8:
                    38:ec:49:27:bc:f1:ae:12:46:c7:7b:9a:27:ce:80:
                    77:a2:46:87:20:dc:e4:9c:bb:ce:2c:e1:b8:15:10:
                    82:b2:8f:20:85:2a:b2:46:d4:97:ae:66:16:c4:70:
                    aa:24:77:fb:e2:ee:1e:5a:f8:2d:4b:d9:95:3b:b3:
                    c5:64:c6:a1:d6:f2:29:6e:f5:23:c5:cf:28:d2:1b:
                    49:af:b7:d9:03:da:f3:ec:13:0e:bb:3a:25:54:95:
                    ee:7f:b0:c2:33:2f:22:5d:10:22:19:ec:0c:6b:93:
                    cf:0d:f7:ba:6b:99:43:da:18:13:a7:80:ed:72:f0:
                    d3:ae:27:7e:17:ad:1a:77:6e:9f:ad:1e:73:bc:2a:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.56.0/24
                IPv6:
                  2001:67c:2e7c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199165

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:ad:59:bd:7f:5d:b7:5a:46:59:cc:9d:41:00:64:c9:ca:
         13:f0:d5:fb:d2:0c:2c:86:74:65:dc:f7:27:50:14:0f:16:63:
         b2:6e:1f:54:b1:a9:69:6b:3f:f6:80:e7:e8:eb:de:7a:23:16:
         aa:09:b5:52:10:4b:a3:5f:86:2f:c1:60:44:48:db:6b:f3:8e:
         19:01:38:d3:8f:8f:9e:c4:55:88:fb:57:cf:cb:91:35:89:88:
         ad:cc:c6:cd:54:38:d7:ab:32:af:67:fa:e1:a0:71:a5:de:ac:
         3f:98:aa:3e:15:23:7f:00:d2:9c:0b:4b:78:99:ab:fb:de:ce:
         fa:c4:f9:27:fd:89:69:82:6f:13:2a:66:c7:78:44:97:1e:59:
         ee:48:90:43:b5:64:9e:d7:69:fd:e9:80:de:2b:8d:8f:45:65:
         d3:c3:7a:51:c1:04:05:2f:ed:9e:3b:ac:25:5f:0f:3a:20:c3:
         61:ef:bb:e2:47:19:4f:84:82:7d:a3:d5:03:b7:5f:70:53:da:
         96:da:40:76:d7:4c:c9:c2:ca:8d:fe:e1:e1:89:63:0a:3c:c7:
         e0:c5:19:68:22:7a:75:27:b8:4b:27:ff:42:a3:35:7c:9d:72:
         2a:dd:ee:e6:f4:6c:65:33:f2:1c:55:16:db:bf:13:6b:d3:e6:
         b0:2b:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----