Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
File:                     AAtPqsebsZaQw69aB4xssUqRrUI.cer (raw, json)
Hash identifier:          GN8kBeyE0GPYynDDAhzJdRuvzsBvbHrX/DMTrLtUF4M=
Subject key identifier:   00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428244AC9B4CCBF752BFF123B02BABA85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 52054
                          IP: 185.156.192.0/22
                          IP: 2a03:afa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:24:4a:c9:b4:cc:bf:75:2b:ff:12:3b:02:ba:ba:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:43:14:6d:c2:b3:5c:02:d6:b5:3e:9d:34:
                    dc:11:08:81:4e:cd:c6:aa:31:fd:84:dd:ad:1b:95:
                    2f:b5:6f:8d:16:8b:5e:c0:5d:52:42:f2:0a:a5:24:
                    7b:06:a2:9b:b1:49:3f:73:05:b5:cf:2f:d9:2a:8a:
                    02:a9:96:4e:5c:2d:e3:88:cb:2c:74:90:cc:d3:3f:
                    b9:28:f4:d3:da:10:79:6a:80:24:5e:61:ed:7a:70:
                    3d:3f:83:81:f9:3b:b4:5b:95:9e:27:65:56:f1:58:
                    86:6b:6c:3c:28:ee:f1:fe:4d:11:ca:8f:95:b7:8e:
                    ff:cf:42:56:a5:a4:53:32:45:f5:68:cf:9f:fc:55:
                    4e:57:f2:1a:3e:c3:9c:c7:0f:c6:0a:4c:42:3b:81:
                    1a:10:18:5f:3c:cd:23:a6:94:dd:90:f1:99:24:82:
                    96:8a:9c:3a:18:e7:42:a7:59:da:19:11:7f:63:b3:
                    bc:b8:a5:29:35:26:62:63:f3:41:e4:27:f7:f4:40:
                    d6:ab:92:e2:44:53:aa:8d:8a:ab:5e:44:5f:ad:a2:
                    e4:aa:a8:14:b0:64:5c:5d:16:0a:9b:7c:0d:47:c7:
                    eb:9b:c9:22:88:f4:d9:8c:d0:96:45:08:cf:f6:d5:
                    87:33:87:8a:2a:9d:b3:ce:7f:7d:65:9b:5d:a2:f1:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.192.0/22
                IPv6:
                  2a03:afa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52054

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:b9:96:c8:bc:69:18:e5:85:7c:16:bc:bf:9d:6d:e7:7d:
         79:43:83:f0:bb:0c:99:43:67:43:19:b8:44:5a:4e:18:8d:9a:
         11:bc:69:2d:44:0c:8c:a9:09:a6:9c:00:cd:d3:34:39:69:82:
         b5:3c:d2:cd:89:82:7c:0b:36:32:b8:a2:97:40:ff:7a:0a:7c:
         40:8b:0b:00:f2:24:60:1b:10:59:a2:60:55:06:25:b0:c1:c4:
         9e:1b:50:7d:27:02:05:8e:ac:02:9f:01:58:7a:36:29:d8:28:
         8b:06:aa:86:f4:0e:3d:83:a7:0d:47:4d:3a:20:10:8b:90:8f:
         ab:ab:5c:85:1b:7c:b1:31:52:d7:c8:fa:f6:4e:df:eb:63:ab:
         2e:eb:61:73:e9:fa:c0:75:5d:78:63:28:aa:17:80:a4:d2:be:
         91:f5:92:ed:8e:50:6d:59:c6:bf:63:81:07:f4:58:9f:56:66:
         f9:89:19:39:a9:97:fb:4d:65:af:22:90:22:2b:47:1b:a8:76:
         f7:d8:25:fc:35:2b:d3:b9:32:3b:1f:5f:4e:e3:0a:59:33:31:
         41:4e:a8:7f:85:72:a3:4a:da:76:58:36:2f:0e:6c:53:1d:c2:
         6d:9f:0e:46:78:c6:8c:f6:2b:1f:a6:68:d1:b4:cd:87:2f:c6:
         5b:63:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----