Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
File:                     Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer (raw, json)
Hash identifier:          Cy9BMlGir4bmvFgSl8yO5aIw9IZORWhIAvhkyhA+zAY=
Subject key identifier:   02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B318BE289E5A64D1929824C14074581A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Mar 2025 10:28:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56422
                          IP: 46.232.172.0/22
                          IP: 2a07:b740::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b3:18:be:28:9e:5a:64:d1:92:98:24:c1:40:74:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 10:28:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:67:5c:6f:1a:a8:28:ad:2a:ac:97:7b:aa:
                    4c:a0:65:b1:6f:f2:49:24:ec:7e:63:11:fe:30:4d:
                    95:fa:11:61:f8:36:9c:81:d7:0e:5a:5c:2c:d2:80:
                    72:a1:c9:9a:56:b5:65:3f:bf:e1:ad:80:f9:26:6c:
                    1f:ce:1a:90:67:88:51:fb:c0:14:b1:bf:13:6b:9f:
                    af:bf:8c:94:38:45:ab:33:7c:52:95:94:1e:93:10:
                    eb:2f:a2:17:77:27:f9:12:d1:c7:d0:93:fa:3f:01:
                    d5:46:2b:1d:4c:60:c7:6c:1b:a6:17:56:46:34:ab:
                    8a:4f:fa:e2:c2:7a:0e:f2:2a:ca:d1:5d:05:36:18:
                    5c:88:b2:77:f7:a1:e2:b9:72:15:84:44:c4:db:3e:
                    55:a1:1a:b7:f9:2c:4b:3d:ba:7a:89:01:bc:6b:30:
                    36:0b:52:02:b9:f4:70:08:f7:9b:b8:0e:08:cf:64:
                    b9:84:f3:1f:5a:90:9d:6b:19:6c:5f:c0:82:39:85:
                    47:6d:af:df:a9:a0:51:42:cf:69:26:19:ac:ea:36:
                    6a:28:bf:92:56:98:9c:7b:80:2e:d7:7e:a0:90:95:
                    ef:92:76:fd:2b:d3:0c:f0:d7:e5:3d:73:f7:3b:68:
                    bf:80:c0:63:1a:27:34:1c:ca:0c:10:cb:aa:96:55:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.172.0/22
                IPv6:
                  2a07:b740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56422

    Signature Algorithm: sha256WithRSAEncryption
         5e:5a:f9:5f:fa:2a:5a:56:b8:5b:97:6e:65:42:d2:83:14:1f:
         0a:4c:84:43:6f:06:97:0a:04:60:5a:0c:dc:88:86:34:29:aa:
         fc:ad:1d:19:e3:a6:db:96:80:92:7e:ea:64:28:a8:12:5f:36:
         b9:b0:55:a5:82:09:96:e4:10:ad:1b:4e:1f:98:4d:4c:d1:df:
         0f:fb:d7:83:2c:fc:a1:fb:ba:25:41:cb:d8:de:a3:85:6f:34:
         a6:c6:61:7b:ff:83:6c:c0:e9:c2:c3:14:3d:64:84:b2:b0:ab:
         65:45:55:32:9e:9f:4b:5d:ca:41:a2:9a:71:3b:62:43:db:e4:
         11:56:bb:a3:b5:83:22:e7:e1:53:67:7f:ad:aa:69:25:34:2c:
         d0:5a:b2:c8:4b:c8:51:ca:fa:fe:e1:c5:6b:b6:f3:17:fa:8b:
         8c:86:a5:e1:61:e2:d4:aa:a4:a8:1f:e1:a6:08:a1:a5:2a:f4:
         04:1b:f8:02:91:ca:a4:5c:4b:f1:fd:6c:5d:19:8a:22:a1:8e:
         a3:ba:3c:a8:92:4f:fc:30:c8:1c:ed:08:30:87:ed:88:f9:27:
         df:37:c1:78:ba:f9:07:37:4a:e7:36:d5:a1:98:79:61:39:ea:
         ea:22:e5:2d:3f:84:8a:5e:0c:2e:b4:e4:cc:66:20:8b:c8:40:
         c2:56:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----