Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
File:                     Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer (raw, json)
Hash identifier:          F2snGOBn0CXHoXprXGcUtZc30r3/41TfXgajUfGVMz0=
Subject key identifier:   07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019619FC997E9055D67949D4BDA7677CCDBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 09:58:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215679
                          IP: 185.219.112.0/22
                          IP: 2a14:7780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:19:fc:99:7e:90:55:d6:79:49:d4:bd:a7:67:7c:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 09:58:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=07077969a8b6a55c461adde106c006486a26359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:b0:52:13:41:5c:d7:84:41:a1:aa:ec:73:
                    8b:ab:c2:8d:26:3d:79:93:a1:fb:e7:64:e4:1e:69:
                    8a:05:0c:99:0f:4a:ab:17:dd:a2:e6:50:14:5a:49:
                    cb:f4:ec:8e:ec:32:f2:86:38:97:6f:d0:12:9d:56:
                    9d:86:b3:3f:10:e6:a0:70:71:0d:ad:51:af:5e:da:
                    68:e1:3b:7a:1c:55:0f:93:6a:3d:3e:b8:fd:d0:64:
                    2c:80:2e:47:dd:f1:eb:f7:ce:01:98:db:d1:78:57:
                    6b:b3:12:2f:84:1f:2d:ea:d9:b9:1a:07:8d:46:fa:
                    53:c2:ba:76:87:1d:cc:89:f5:ab:0d:d1:62:3c:a4:
                    9b:51:e2:df:1e:af:66:e5:43:e4:4d:7d:9b:8e:ef:
                    a6:1e:67:e1:0b:48:8d:09:90:42:9e:88:09:6d:c7:
                    00:80:97:bb:de:26:b0:e1:2f:3e:a6:51:b5:26:0a:
                    35:88:6f:ca:eb:a5:70:9f:dc:85:d7:31:31:32:0c:
                    fb:70:27:cb:29:23:64:7e:88:7b:2e:ac:cd:88:0c:
                    3f:0a:90:b6:fb:14:f4:fe:dd:1b:b1:05:a1:a1:8f:
                    ba:19:92:b0:70:10:d7:70:50:4a:14:c9:68:c8:09:
                    81:ad:3f:1d:21:2f:aa:bc:8e:4a:75:f0:87:07:b5:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.112.0/22
                IPv6:
                  2a14:7780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215679

    Signature Algorithm: sha256WithRSAEncryption
         45:22:2c:06:13:00:16:c8:4e:c8:8f:97:31:09:b4:61:a3:5d:
         1b:71:df:69:bb:94:70:c9:1c:00:df:d4:c2:a2:0d:58:0e:57:
         e0:4d:a0:65:a0:6c:6a:67:92:78:b8:7c:3d:5a:48:81:90:29:
         ad:7b:1d:60:c4:c1:45:c2:76:44:4c:e0:5c:3e:d2:1d:b1:17:
         85:c5:a1:c1:90:31:ca:21:e8:34:7c:0b:87:74:6c:69:0d:bd:
         e5:51:ac:7a:d1:f7:b6:19:20:5e:c9:87:03:33:6e:55:2f:d2:
         ca:0e:e7:9c:80:c3:1c:0e:26:0a:1e:73:36:8a:45:3d:d7:c7:
         19:0a:b5:8a:50:e8:d9:74:fc:f9:ef:10:61:40:2f:83:d5:0b:
         c8:de:b4:b3:1d:d4:8d:af:43:ae:43:54:cb:74:9b:05:14:96:
         26:e2:a3:ce:e2:56:25:41:4e:b2:c0:63:ee:22:4c:d1:e2:79:
         70:dc:13:95:f7:cd:5e:1b:ba:0f:e6:eb:77:7d:ed:4d:9b:84:
         f9:39:25:16:8f:01:44:ad:14:9b:6e:0a:3a:ef:6b:d7:29:b2:
         7f:42:62:c5:20:c1:b4:cc:82:05:47:38:72:cb:e8:a6:67:d2:
         ba:64:e7:c1:21:67:e3:cc:cc:99:15:93:46:cd:48:88:be:7a:
         db:65:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----