Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
File:                     CX4FUW_IeTQGhouBCePARLcCcWw.cer (raw, json)
Hash identifier:          bfGd7RLfg+MdaXhVbtzlMO6r3qWWVO0RnN9i8l4+MtQ=
Subject key identifier:   09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA19254EB3365569005916A68D7C25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48506
                          IP: 185.163.192.0/22
                          IP: 2a0a:2c00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:19:25:4e:b3:36:55:69:00:59:16:a6:8d:7c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=097e05516fc8793406868b8109e3c044b702716c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:eb:11:59:6e:9b:03:8f:c2:80:5e:2e:8d:
                    8f:9c:81:17:83:5e:ad:35:6f:26:69:d9:09:86:f8:
                    16:1d:21:b0:ee:0e:eb:22:e8:06:91:1d:29:f6:f4:
                    49:a1:c7:ba:72:d5:e1:22:1d:fe:73:ea:9e:10:44:
                    71:2c:6e:03:e3:40:3c:02:38:3a:73:86:08:78:fe:
                    d0:5d:d8:f2:68:79:a2:91:18:36:51:c5:9b:c6:e8:
                    7e:a2:04:bd:7a:b3:7c:1d:0f:d5:be:bc:24:c9:1b:
                    73:9f:14:e5:83:dd:00:18:22:09:8a:c9:61:95:21:
                    f3:53:5d:f7:39:14:b7:45:bc:5d:ba:63:43:3b:fd:
                    81:34:34:4d:1b:65:81:89:35:d4:f1:55:37:ae:9b:
                    69:11:c0:a0:0b:f4:7a:aa:2e:c4:49:3f:eb:96:81:
                    65:09:9c:d1:40:07:0d:5a:8e:b4:ff:c9:52:d2:30:
                    97:5f:bc:15:9a:54:51:c1:9d:5f:0b:cc:41:06:58:
                    20:b6:31:92:87:ca:97:dc:5e:17:49:a7:f7:df:2c:
                    71:82:4a:0b:b7:a1:d2:ee:5b:36:e5:ea:8b:84:ce:
                    3a:50:5f:85:fc:1b:a1:58:da:5a:5a:84:7d:2e:e1:
                    48:b7:ae:6f:fb:5e:f5:38:36:b6:b2:59:80:44:be:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.192.0/22
                IPv6:
                  2a0a:2c00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48506

    Signature Algorithm: sha256WithRSAEncryption
         49:40:0a:48:9b:4c:0b:27:23:87:0e:ac:a0:29:c7:36:dc:c1:
         9b:65:f0:12:8c:45:0b:18:f1:e0:49:b5:c8:f9:8c:dc:97:ba:
         93:bf:4b:af:97:c3:cf:bc:d9:0e:31:eb:41:9d:31:71:07:a0:
         b3:9d:d8:fc:04:ce:d6:b4:60:65:06:50:5b:01:2f:3e:cb:7b:
         4c:c0:c1:fc:cb:f7:08:ba:34:a7:ba:a8:81:99:b4:5f:d0:77:
         97:23:5e:92:04:38:73:1a:0b:a7:15:b0:7c:3e:d6:20:0d:5f:
         5b:d2:6e:b0:71:06:26:7a:4d:1d:bb:c1:d1:84:84:ed:f2:3e:
         d4:eb:10:8d:35:97:90:37:90:40:ff:aa:1b:85:16:9b:dc:50:
         7c:c6:46:2e:da:f5:32:66:bb:22:18:f3:e8:61:55:54:8c:b0:
         e4:df:18:e6:17:34:4c:67:84:88:00:3b:8f:0d:41:d3:97:43:
         52:72:27:47:6b:22:69:12:09:44:c7:94:e6:b8:92:1c:d9:c4:
         fb:77:f8:00:a3:19:85:0b:2b:c8:12:68:e4:79:74:4e:80:ea:
         0a:4d:d4:40:b2:53:03:96:28:11:ae:40:a5:7f:b2:77:a9:62:
         83:16:bf:2f:86:29:dd:13:6b:0e:81:4d:77:76:5a:b5:e5:13:
         70:5e:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----