Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
File:                     E34RA3dXhdAS_I3atMAqwDeRudQ.cer (raw, json)
Hash identifier:          6l5H3rOAA10QnCq94b0oPL1k47UyoTkR67K0WfrfblA=
Subject key identifier:   13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DEF049EAC39F030663F8C2869CCD5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203715
                          IP: 185.126.60.0/22
                          IP: 2a06:bf00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:ef:04:9e:ac:39:f0:30:66:3f:8c:28:69:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:83:14:5f:08:3a:69:4d:28:0b:08:dc:7a:
                    d3:fb:12:4c:6c:d4:53:3b:0b:de:ce:aa:fe:41:f0:
                    35:98:80:c0:3b:23:93:58:a4:07:dd:db:03:b5:4a:
                    36:0d:8d:c4:60:9f:0a:a3:08:78:a7:23:03:0c:6a:
                    38:8c:c4:8d:b2:fa:d6:20:88:e3:24:b3:86:cc:26:
                    85:40:36:8a:74:1c:ee:8c:92:83:77:fa:2e:b8:26:
                    4e:23:88:95:60:c9:5f:5c:5d:1f:2a:20:3e:9e:38:
                    c9:75:24:07:a9:d3:73:a0:78:63:e4:df:c8:fb:62:
                    7e:54:02:89:9f:39:18:6c:d3:4c:13:ba:35:64:ac:
                    75:f6:33:2c:92:71:f0:aa:58:cd:03:9c:7b:2d:54:
                    af:70:f1:01:19:7e:c9:07:2c:b6:f9:2e:9b:a2:70:
                    b2:21:81:59:d2:52:87:e6:87:ca:18:83:2b:db:48:
                    83:38:fb:4c:23:d7:5d:da:6e:bd:fb:f6:57:1e:6e:
                    8f:54:20:f5:76:5e:db:5c:0f:e0:88:2e:29:7d:ec:
                    47:55:b8:6c:a2:eb:13:fd:07:78:e3:d3:bc:ab:10:
                    49:e5:7e:e7:3f:c9:d9:f3:46:d3:95:e3:fc:aa:ab:
                    8e:7f:4a:68:8a:b9:7e:58:9d:d3:73:51:1a:27:50:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.60.0/22
                IPv6:
                  2a06:bf00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203715

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:11:29:f4:6a:ff:b0:4e:cf:0b:5a:14:a5:31:dc:74:9c:
         f4:17:06:61:68:74:49:87:59:70:29:4c:3d:51:87:88:10:b0:
         a3:67:0c:af:fc:c3:60:23:76:ac:a0:46:ca:eb:d0:b5:d9:07:
         24:c7:c8:1a:86:0f:cb:b5:6e:88:40:fb:ba:02:4e:fb:0c:69:
         e3:aa:17:c8:e6:2f:87:8d:1a:74:df:ac:6e:31:5a:bf:25:b5:
         24:65:e2:08:68:20:fb:d3:e5:ff:7b:b7:7e:1f:03:09:17:be:
         06:c8:e8:8c:4b:bd:46:cb:72:7a:f6:37:e7:2e:75:2b:d0:aa:
         da:03:82:bb:b3:f8:73:11:b9:53:d3:f7:5f:13:ff:58:b1:78:
         ad:be:11:a1:17:27:14:91:8d:6e:26:8a:04:a5:87:cf:cf:c0:
         d4:84:15:20:c7:ae:b4:3b:44:e1:d2:be:99:6f:48:29:51:15:
         eb:f1:4f:9f:78:92:9b:11:bf:fc:d7:ee:43:cf:09:62:a2:41:
         d7:a2:4a:48:51:71:84:27:2c:b8:65:b9:bf:ef:bd:88:15:04:
         be:5d:8c:32:c7:28:6f:be:ca:e1:03:1a:b3:bb:72:7f:44:a2:
         9c:ad:08:d1:a3:bb:01:eb:39:d5:71:0b:9b:2d:de:7c:c9:54:
         f1:fe:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----