Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.cer (raw, json)
Hash identifier:          t5nsDN4QCD7ufZ4Z2jl8Cmn1AiIKgim+iPpIhcahZiI=
Subject key identifier:   02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266A221B5BBAC0746D099035C23A0BF9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 45047
                          IP: 45.13.25.0/24
                          IP: 93.188.216.0/21
                          IP: 2a12:9dc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:22:1b:5b:ba:c0:74:6d:09:90:35:c2:3a:0b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:34:fd:af:92:37:7f:cc:78:d8:ea:2b:71:
                    47:73:8c:8f:7d:ac:90:37:a6:fe:bf:93:59:5e:8f:
                    67:95:a0:bf:07:66:02:da:d5:a5:02:fb:6c:0c:52:
                    b2:49:4a:53:ca:5a:06:c3:af:56:5f:bf:39:89:d0:
                    cc:c9:db:be:79:73:eb:88:cc:23:aa:72:0b:7f:31:
                    7b:fd:ef:9a:e9:56:e8:1f:fb:da:2f:2f:61:08:0a:
                    8b:50:f7:f5:19:99:56:fe:08:15:8c:09:6a:d2:d7:
                    57:04:79:18:ff:e0:48:08:4f:39:05:d1:9d:91:d9:
                    41:78:ce:cb:88:84:6e:f4:3a:b3:a2:6e:d4:6e:a6:
                    f6:7d:da:3c:57:fe:9c:f7:a3:e2:6b:83:80:50:33:
                    42:61:cf:e7:68:b1:d7:42:44:d5:a9:b7:80:de:5d:
                    db:39:79:d4:f3:8c:2a:82:da:ca:93:66:1f:05:45:
                    3d:21:dc:3c:16:7b:66:b7:d2:cd:d3:a1:56:4a:b3:
                    42:56:fb:39:df:10:86:36:c6:7b:ca:a5:d3:48:51:
                    57:17:36:8d:7e:f4:4f:2e:13:8a:96:34:3a:1a:3f:
                    91:a3:1b:e6:67:a4:e3:0d:4b:94:ea:d5:a4:a3:a2:
                    21:02:e4:51:91:ec:0f:55:9f:93:f8:c8:e8:d8:70:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.25.0/24
                  93.188.216.0/21
                IPv6:
                  2a12:9dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45047

    Signature Algorithm: sha256WithRSAEncryption
         07:43:68:f4:1a:1b:a8:8a:85:f7:7c:da:4a:8a:60:05:fa:a3:
         52:87:d6:46:c0:1b:f8:ad:a1:15:c4:b9:26:1b:2a:31:f6:02:
         21:9e:78:fe:0b:ad:c7:40:fe:e8:7d:51:a0:8e:77:12:23:66:
         82:cd:05:98:3f:f8:15:42:c1:2e:54:4e:68:53:37:cf:6c:e0:
         f6:47:a6:ad:5f:d1:c5:ac:15:ce:65:a5:ef:c6:42:aa:a8:30:
         fe:04:41:a6:eb:c8:15:58:8b:fb:a6:c0:93:e6:88:4e:45:26:
         68:15:36:af:6d:e1:a0:c8:be:e4:6d:6f:1c:c8:2f:9a:7b:e4:
         38:fe:df:0e:28:7d:89:da:8f:b2:26:32:81:67:dd:a7:03:72:
         2b:d1:10:ed:da:89:88:48:aa:cc:9c:cc:9c:9f:6b:b3:46:85:
         df:c9:00:9e:54:39:a1:08:3a:94:36:53:94:72:c1:ca:5d:4a:
         db:2c:ac:9f:43:2b:e5:cb:ab:e3:93:91:ac:2e:ba:86:7d:9c:
         41:57:87:2e:9a:b1:ff:99:6b:4d:12:ce:52:47:d8:24:0b:d6:
         83:9b:51:11:ca:22:b1:05:d6:48:66:05:16:79:2f:11:c0:b7:
         c3:26:92:61:b9:0f:84:f6:68:c4:cc:45:99:d2:c4:d3:75:b2:
         b6:de:6c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----