Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
File:                     EIPENieVN9T3JtIxDO8UpC8bK4o.cer (raw, json)
Hash identifier:          uLfGmeJH71Z2zJvkoli5TndEtFPqibNWhTsj9HJcsOk=
Subject key identifier:   10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC1D6ED5ED26952FD108C71EE520CF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39375
                          IP: 89.161.0.0/17
                          IP: 185.212.40.0/22
                          IP: 2a05:3a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:1d:6e:d5:ed:26:95:2f:d1:08:c7:1e:e5:20:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:17:a4:23:6e:7e:a2:5d:90:04:c4:7f:ab:
                    28:df:bc:a1:52:e3:c1:e1:1a:e0:27:d4:fb:7a:af:
                    5a:29:6c:46:6d:e0:ea:33:6e:67:ec:ac:47:36:52:
                    5f:f8:7f:30:3c:24:65:1a:42:3c:77:c4:e9:c9:ff:
                    56:4f:d1:b8:a5:d2:79:3e:61:55:17:ab:1b:2f:7a:
                    8f:3f:3b:3c:c7:2e:e6:e5:d2:43:6d:18:98:25:c4:
                    c8:59:df:a1:d9:61:7a:59:1e:b2:7e:51:3d:3d:39:
                    dc:7b:e4:5b:f5:64:e2:4d:2d:ab:39:18:50:c0:08:
                    3c:94:c2:64:04:49:4b:c4:5d:80:26:b6:4f:c3:33:
                    0c:cf:a4:70:7f:e7:1a:f9:0c:0d:34:96:64:71:f2:
                    88:19:c3:d6:b0:0d:87:de:44:a2:c0:de:17:70:9f:
                    94:65:31:a8:97:22:87:75:3b:de:d1:41:7b:6d:06:
                    d3:39:b7:b8:f8:73:f2:a8:9b:6a:96:a1:6d:df:06:
                    89:38:31:32:a3:b7:15:50:42:ef:9d:f6:fb:c4:80:
                    3d:5c:ce:78:a5:ef:aa:df:c7:93:50:3d:e9:c9:3a:
                    d8:f9:73:44:9b:d2:f1:bd:60:2e:1d:61:32:9e:4b:
                    06:6b:c1:77:3e:35:31:fa:da:78:c8:42:c2:1c:8a:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.161.0.0/17
                  185.212.40.0/22
                IPv6:
                  2a05:3a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39375

    Signature Algorithm: sha256WithRSAEncryption
         08:15:38:a4:b4:de:be:85:c4:3d:e6:7e:a8:db:14:c4:19:50:
         fe:fb:54:67:6c:c2:ec:0d:25:de:0f:d6:48:5b:1f:bb:13:c7:
         d0:fe:c0:06:96:de:cc:f5:68:08:c6:3b:74:03:95:b7:fc:24:
         e0:ba:53:4a:df:39:c1:e0:2d:47:df:cb:89:7a:30:27:76:fd:
         22:c6:99:9b:9d:33:cd:7a:28:5c:c0:02:ab:9d:17:f0:c5:a0:
         2d:67:c1:f7:5a:70:be:d5:b8:b4:d8:9d:c8:67:9b:8d:5b:8b:
         d4:48:9d:e1:7f:01:53:85:db:8b:2f:ff:88:f6:aa:2e:8a:fc:
         3c:a5:1d:32:09:52:df:e1:61:3d:60:39:2b:27:18:1c:5d:fd:
         c8:9e:bc:e6:54:fc:d4:ba:07:26:3c:4d:22:29:15:3c:6e:7f:
         76:cd:7d:fb:24:c4:ab:cc:de:11:c2:2d:fb:68:99:df:6e:6d:
         3d:61:94:49:1d:69:8a:b4:d3:ef:9d:1c:89:10:f1:ec:07:20:
         ff:17:5b:13:b0:cb:41:2c:04:f0:05:87:15:f9:4a:f4:c6:9e:
         39:46:01:03:2d:1d:b1:f6:d0:c6:9d:a7:80:a6:9b:36:31:39:
         91:cb:33:c2:de:49:3a:a0:19:26:60:58:56:36:a7:13:db:cf:
         ab:1a:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----