Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
File:                     BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer (raw, json)
Hash identifier:          kYQjZb5wcrfyINnRUfmhZjmG9Wm1sa+EdMJ3rdFTVkU=
Subject key identifier:   04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942826F4B40F79C98F5287D9C2BE4553B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57458
                          IP: 130.255.176.0/21
                          IP: 2a03:c080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:f4:b4:0f:79:c9:8f:52:87:d9:c2:be:45:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=044fa3808c2d28c577f9976c61cd226e188695d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:6d:2a:5c:75:b3:eb:09:82:c0:52:bb:b6:
                    0b:f0:86:d5:ad:13:b5:4c:7e:dc:cf:bb:bd:29:a1:
                    33:10:83:87:0f:de:41:eb:e5:b2:cb:2c:49:c6:fa:
                    eb:1d:c7:07:c6:ed:59:a9:14:6b:7d:24:b3:a4:5a:
                    46:47:e0:a7:64:e6:19:b7:5c:fe:19:3c:8d:bb:93:
                    ae:e0:37:20:57:a7:ab:60:5e:3c:db:ee:56:ce:5a:
                    ed:dc:12:10:13:f8:79:11:8f:17:26:06:64:30:95:
                    10:9d:56:13:14:5c:18:f5:3d:b8:5d:2d:58:1d:c2:
                    12:b0:11:11:e9:74:c5:60:a5:13:f9:9b:bd:67:23:
                    2d:33:8a:50:c1:7f:29:08:0e:82:ac:7a:b3:ad:4c:
                    df:c4:93:0f:6b:17:7d:18:b3:80:00:66:d4:13:61:
                    b1:e1:84:d8:9b:39:69:d4:0a:b7:b1:54:ec:5d:87:
                    97:80:49:53:4e:3d:d4:f4:77:84:ad:ac:b0:37:46:
                    35:09:24:e0:59:d0:3c:e2:e7:7b:cc:0b:37:d0:6c:
                    53:64:64:21:1a:14:03:fc:66:0b:03:43:68:50:2a:
                    28:61:e6:f0:b1:58:5a:5c:b7:05:42:e5:45:b2:2e:
                    db:d9:d9:a3:27:24:cf:9b:98:bd:b1:6b:14:0d:16:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.255.176.0/21
                IPv6:
                  2a03:c080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57458

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:f0:3d:95:5d:04:87:ee:96:9e:58:a2:74:6b:b2:bc:23:
         cf:bf:5d:92:82:ba:e4:76:92:8d:db:4f:57:34:ac:b8:c3:66:
         ce:ee:3d:eb:0c:53:0b:c2:c0:bb:d9:2a:90:3b:9e:e5:61:3f:
         af:3c:c1:a5:44:38:3e:a8:ef:61:2a:03:fc:7b:c4:f9:a9:96:
         8c:d5:cc:20:19:bc:6f:a6:9f:4b:61:94:9c:08:fa:bd:79:4d:
         57:c5:d2:18:2e:fc:7f:5a:3b:8c:b3:72:cc:80:6f:99:86:f5:
         84:28:80:9e:de:67:fa:c2:28:46:54:4e:12:2e:a1:30:e5:38:
         6e:b0:5f:80:40:33:6b:0f:68:da:53:b1:ab:72:2a:44:44:f2:
         e9:fb:f3:14:a3:4b:07:2d:a2:dc:d4:da:a9:c8:f6:b1:0f:00:
         c7:1f:cd:1c:b0:e7:3c:29:4a:cb:a9:6c:83:c4:74:c1:2e:ae:
         39:43:f2:80:97:c9:69:ad:21:01:40:d1:60:bd:a2:0f:8f:ab:
         b4:65:57:b7:6d:54:09:71:c1:e5:aa:a8:01:81:86:1d:1c:bc:
         2d:5c:0a:dc:c5:4a:6d:33:b2:08:e8:ef:62:b0:9f:3c:0d:d0:
         15:e4:ea:1f:91:8e:fe:08:2d:ac:39:01:2c:5d:b2:6d:79:fa:
         d9:b4:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----