Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
File:                     CI4DIScTMq_HfkyFefDlVZzAnFA.cer (raw, json)
Hash identifier:          bnYhgFbpfHvHS3Q7bi0xaNSQyGr2SreTWfEkkpggDc0=
Subject key identifier:   08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3A96841813B9890E60A4F777CF20E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207104
                          IP: 185.163.156.0/22
                          IP: 185.191.32.0/22
                          IP: 2a0a:400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:a9:68:41:81:3b:98:90:e6:0a:4f:77:7c:f2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=088e0321271332afc77e4c8579f0e5559cc09c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:e6:fb:f4:92:70:d6:13:db:f3:50:3b:ca:
                    bc:be:06:0e:a4:a5:fb:f8:a3:29:28:a4:89:b8:f2:
                    3e:27:5b:68:67:eb:49:3e:db:71:70:c5:06:07:b4:
                    84:9c:fd:02:59:99:6b:6e:c0:70:93:69:3e:ec:df:
                    c6:e9:2f:57:a4:61:70:09:37:8b:23:a3:1d:e4:2e:
                    52:58:11:5d:0e:71:15:99:32:72:db:c7:32:10:65:
                    15:e1:53:76:d6:7d:e5:d7:af:45:15:f0:e9:1a:c2:
                    a1:76:7b:f2:6b:59:1b:54:1d:34:6d:b3:f8:c5:1e:
                    8a:7f:d4:2c:fb:8a:33:4d:e1:c5:81:b7:52:2b:4a:
                    da:0b:fe:b3:29:f7:31:4c:20:3f:4f:ab:4e:aa:af:
                    56:fd:0e:a6:5b:1e:e4:0b:3f:20:78:e8:16:39:82:
                    73:ef:e9:75:6f:d4:cf:68:4f:9b:12:9d:88:56:f2:
                    c3:6f:67:f6:f5:57:18:68:16:01:1a:69:11:1c:2f:
                    28:40:70:fb:c5:85:fc:45:ec:37:f0:7e:fb:85:f8:
                    15:79:55:2b:72:ef:04:09:4c:77:48:82:81:26:f2:
                    96:20:8a:a1:b1:3b:15:19:66:cd:da:45:bd:0c:dc:
                    75:7e:11:54:b0:78:74:c0:5a:34:09:56:20:f3:2e:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.156.0/22
                  185.191.32.0/22
                IPv6:
                  2a0a:400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207104

    Signature Algorithm: sha256WithRSAEncryption
         8b:43:8f:94:c5:42:21:6e:9e:2b:35:9b:1c:cf:b9:28:b9:b2:
         42:6f:d1:4d:d5:b8:e0:e9:9d:30:e0:5f:d7:bc:c3:2b:ff:06:
         db:9f:bb:ee:18:24:96:c9:22:74:19:fd:11:a1:77:1f:b8:38:
         49:bd:f1:33:22:28:1f:ec:11:2d:3c:47:d5:b3:86:70:c6:c6:
         2a:a3:84:9a:b3:c2:3f:d6:2a:26:88:39:27:09:df:ac:62:b7:
         6f:16:95:3e:fe:18:92:95:42:3e:95:82:55:5d:55:ae:71:71:
         25:59:8c:05:83:99:48:06:f4:0f:4c:86:99:94:dc:08:08:19:
         b3:1d:ed:2c:b2:bd:2e:1e:8b:b8:ba:2b:b5:13:a4:d4:6c:de:
         fb:98:e2:e6:73:91:c2:87:2a:88:49:81:4e:2b:e5:dc:df:f4:
         a8:93:bb:ad:1f:6c:bf:07:7e:a3:14:65:eb:58:97:74:7e:e8:
         12:e9:51:6a:11:13:07:69:77:a6:ae:1b:10:67:9b:58:0e:18:
         47:b5:55:f1:1d:68:eb:fc:c6:f9:51:66:df:bc:a7:51:f1:dd:
         6c:98:c4:17:9e:f7:4c:6c:b9:03:d9:79:01:b5:33:98:98:6d:
         17:7c:5d:ec:e2:62:7e:6b:c9:b2:d7:1a:1a:22:f1:63:4d:31:
         79:79:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----