Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer (raw, json)
Hash identifier:          SRkaA+aA35rR3p0HGJXwbs/nz6oY6EF4iPpPi+vdZDQ=
Subject key identifier:   0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B855F37C14C814AB8690974E971D2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43066
                          IP: 93.184.128.0/20
                          IP: 2a05:d880::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:85:5f:37:c1:4c:81:4a:b8:69:09:74:e9:71:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:7b:30:ca:00:4a:32:79:d4:bc:fa:1e:d0:
                    b7:78:28:99:d4:8f:51:5d:4a:51:d8:3a:5f:f3:46:
                    7f:e9:7c:ac:5c:1d:b1:29:7c:ec:f3:bd:69:8f:2b:
                    ed:46:02:d1:7a:4b:93:e8:1b:9f:fc:ec:c9:41:88:
                    09:5f:c8:b5:6c:ba:fb:f2:f6:d2:79:68:c2:99:dc:
                    6d:9b:4c:77:c4:7b:92:a8:27:d7:94:4f:64:27:c1:
                    aa:f0:96:ee:22:9e:62:19:97:57:b2:94:fc:15:eb:
                    77:f1:64:19:ad:2f:8f:9b:01:ed:e2:6b:38:3d:99:
                    fa:cd:85:fb:d8:6f:4e:99:3a:c8:71:e7:d8:32:1d:
                    0b:dd:ef:7b:52:64:cd:12:e4:bf:39:a9:18:8a:e6:
                    d1:49:fb:31:fd:86:f9:95:25:7c:91:a2:a5:38:eb:
                    2e:91:ec:fa:49:42:27:dd:95:43:d9:ca:48:a0:ea:
                    b5:24:39:da:1e:01:2c:9a:9a:95:cd:23:95:e0:b8:
                    5f:85:79:45:9f:c4:e4:b9:91:cd:83:68:e8:e2:d2:
                    84:25:da:53:4f:a9:fa:58:e9:44:e9:0b:50:46:41:
                    40:df:61:12:02:10:3a:7f:85:ca:db:62:a4:50:51:
                    ac:af:f6:d5:ea:7c:0e:33:c2:98:70:0a:d0:75:5e:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.184.128.0/20
                IPv6:
                  2a05:d880::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43066

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:19:6c:f4:f1:91:5b:42:16:fd:27:03:8b:54:4e:1e:d3:
         7a:6a:a3:5f:91:ce:61:6a:a3:12:49:d3:63:be:85:10:ce:d3:
         dc:4c:1d:5d:bc:17:5f:4d:e8:b9:5a:0c:22:6a:9d:4f:0f:97:
         4e:52:c1:40:f0:4f:a0:ed:9c:1a:d0:9f:a4:4a:c5:3a:d0:b8:
         dc:82:3e:d5:cf:b2:ea:c4:5e:8f:9b:d4:27:f5:7f:72:01:e3:
         33:25:02:25:c5:b4:d4:65:ef:d7:60:f6:c4:53:03:12:bf:7e:
         a3:9f:d4:22:4b:45:ee:22:ad:57:bd:39:d8:0d:1e:c3:fc:72:
         6e:37:f9:fb:35:d8:b3:ba:b6:4b:3f:4c:f2:66:77:c3:19:41:
         34:e6:5d:66:2f:de:d8:9a:4d:5c:3c:77:fd:7b:d9:67:b3:7f:
         5f:ec:a9:5f:7d:0d:dc:27:4c:97:48:0d:20:5b:83:8e:e1:d2:
         8c:2a:0b:05:0d:a8:d4:ce:01:04:3c:4e:53:6a:f5:ac:f6:99:
         5e:8b:1e:6c:e2:7a:ae:4c:c0:0d:74:be:90:46:96:4d:17:c8:
         81:e9:c2:40:06:27:7b:c0:78:76:c3:1c:33:6e:97:16:24:e4:
         c6:74:4e:58:f8:dd:45:2b:7e:d5:a1:ad:13:21:bf:66:0c:7f:
         e2:8b:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----