Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
File:                     AJpjcoKz0KD8pKVU9pNvffQugWU.cer (raw, json)
Hash identifier:          s0UxoCg+hh72MJdbGtT45A3YOZyBOxUYo7/9EuXXeK4=
Subject key identifier:   00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067CB6B158F6CBF8E8A4D53663B9DAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200457
                          IP: 185.106.172.0/22
                          IP: 2a06:3d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:cb:6b:15:8f:6c:bf:8e:8a:4d:53:66:3b:9d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:ca:89:05:48:73:7f:a8:fd:20:b6:20:ee:
                    0a:4f:73:39:72:4b:45:29:17:ab:e1:b6:e6:fd:8f:
                    49:4f:62:bc:78:3d:55:1f:05:c4:cc:2e:4e:3e:f3:
                    c3:34:da:4a:a1:5d:74:1f:58:64:e1:bd:b5:22:16:
                    42:35:77:40:83:63:9a:c1:4a:a1:94:7b:a0:52:28:
                    1b:b6:ce:ea:d9:4f:e6:74:2d:c0:6e:98:52:fa:e3:
                    79:24:91:ba:1a:a8:ef:50:0d:9e:ae:80:c5:04:3e:
                    c7:1f:82:2c:ea:13:7d:78:82:25:9d:fd:33:9c:61:
                    93:65:14:a6:04:74:e9:fb:03:fb:78:70:a1:c8:71:
                    58:11:32:54:62:fb:78:8f:ac:50:b2:82:e3:f0:f3:
                    55:5e:7f:2e:f1:a3:46:69:cc:48:56:fd:bc:da:48:
                    ae:63:38:23:7c:ed:f6:af:46:d4:1d:d2:aa:45:75:
                    02:17:9a:2c:c5:17:3a:5c:e7:6e:13:2b:5c:9b:f3:
                    f2:7c:1c:67:c0:b5:3a:8d:13:eb:d2:d7:74:03:e8:
                    c0:64:c7:12:bd:26:ef:25:9d:df:74:6a:a4:ac:08:
                    03:74:93:f7:a2:26:8c:f0:71:fc:e3:af:09:38:13:
                    aa:8f:51:1e:67:49:93:ab:e5:0f:32:88:15:3d:d7:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.172.0/22
                IPv6:
                  2a06:3d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200457

    Signature Algorithm: sha256WithRSAEncryption
         90:15:8c:e5:5b:48:a0:6c:7c:c2:c3:46:10:ca:cf:86:f4:a9:
         f8:5a:f7:f0:22:dc:f8:b6:19:56:a4:47:ab:17:80:bc:9a:2e:
         2b:fa:d2:4f:d2:5a:28:c7:cf:cc:56:1b:60:11:72:7c:f5:79:
         38:fd:52:5a:0c:58:ed:9d:44:9e:36:71:c1:b7:42:f4:23:e1:
         3a:f0:38:7f:1f:7d:03:f3:7d:ec:e4:3d:f6:aa:71:5c:48:a9:
         7a:4a:8b:d8:7a:df:39:f9:35:7c:92:ca:41:14:4b:e9:6f:69:
         6b:c3:96:ca:98:1e:cc:a1:9b:a2:08:ab:a5:4d:71:59:01:24:
         03:73:04:92:e3:12:18:f4:5d:a9:13:56:8a:e9:f4:c8:48:41:
         be:91:0d:7a:d8:09:8c:82:be:58:7f:ad:5d:cc:58:76:1c:b7:
         dc:bf:b0:ac:f6:a2:25:24:0b:a2:5d:ab:e8:b4:19:6b:c5:de:
         ac:4a:01:e3:a2:56:a7:96:29:0b:85:df:f9:d0:d2:55:28:95:
         a3:11:ad:16:1b:d4:15:5d:25:3e:b8:c7:79:49:b3:b2:4e:c5:
         f5:0a:13:80:c1:97:49:44:1c:22:b8:1b:8f:de:1a:dc:fd:29:
         64:b1:23:cf:ba:37:7c:ee:fc:f2:8c:d0:75:d9:ef:85:12:ea:
         e4:bf:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----