Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
File:                     EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer (raw, json)
Hash identifier:          0Uc6PJWXA8xrIyz/BDu4N1Q7nmB9z09KJO871KRjbhA=
Subject key identifier:   10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F272AE0067FFC534467F534D6F5B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61425
                          IP: 5.198.128.0/22
                          IP: 185.239.216.0/22
                          IP: 2a0c:6380::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f2:72:ae:00:67:ff:c5:34:46:7f:53:4d:6f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:5a:ae:65:44:3b:4f:1b:5e:53:7b:2d:d9:
                    a6:27:5f:91:ea:7d:91:91:95:59:20:f1:54:25:ba:
                    0a:7a:ed:1a:2d:5f:65:8b:71:5c:8e:ac:3e:30:ad:
                    90:36:f4:79:43:6d:63:cf:a8:9b:bb:20:6d:38:f6:
                    e6:fe:ee:06:6b:a6:5c:26:64:7c:a0:4c:a7:cb:06:
                    97:57:b2:2a:c5:f7:a8:bd:08:a8:90:ff:53:68:51:
                    9d:fc:00:de:8f:ca:0a:58:10:44:3d:07:23:a9:f9:
                    9c:57:d4:be:14:d6:c5:a2:7f:74:81:4e:b8:79:70:
                    ae:75:19:ec:05:49:96:d0:7b:68:08:83:9d:50:3f:
                    17:e5:12:0a:2e:d0:21:58:8a:52:95:5a:60:97:b9:
                    db:db:ba:8b:08:31:0e:e5:ef:0e:ee:b8:4a:a0:7d:
                    d6:75:49:83:eb:3b:48:d6:13:de:83:5b:21:9f:59:
                    6b:0a:f5:ff:03:8d:28:61:0f:d9:a4:cd:3f:99:66:
                    b5:a5:f6:72:cc:95:d4:7c:09:de:48:93:b3:c3:6a:
                    f7:4f:45:39:26:c1:ea:bd:a0:69:a6:29:62:45:a3:
                    3b:47:71:e3:1b:03:f9:a2:26:a1:59:cc:c9:29:e5:
                    2b:67:64:ce:fc:8e:72:7a:37:2b:ba:35:58:df:b4:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.198.128.0/22
                  185.239.216.0/22
                IPv6:
                  2a0c:6380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61425

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:8f:09:1b:bc:f7:ba:19:ae:1b:54:e2:9e:e5:9f:73:2f:
         8d:e9:ca:8e:af:e4:f3:ee:17:a0:f2:d6:9e:86:30:a2:e0:cb:
         a1:bf:d0:48:79:c8:5a:26:e0:2d:d1:e6:6b:64:b1:6a:28:bb:
         69:96:12:c0:c5:35:30:f9:e5:fb:2f:f8:ec:31:a0:4a:7f:0a:
         f3:2f:70:75:c5:e2:18:e3:1e:18:8b:37:24:05:41:9e:ec:bc:
         a9:0f:a5:ac:1d:e5:63:c5:c7:f3:6f:76:76:bf:5c:32:3a:77:
         d4:1b:85:06:ab:4b:03:43:35:68:e7:67:2b:e8:25:31:26:e9:
         35:14:ed:85:04:87:55:ec:5d:34:69:23:bd:bd:55:bf:67:01:
         5a:f3:f4:33:f5:9c:84:b8:ef:c1:4a:68:62:49:83:8f:8a:f9:
         b7:d5:14:8b:94:24:60:98:96:1d:3c:c1:d5:17:20:6d:44:9b:
         d1:50:3c:26:26:7f:99:21:94:db:37:7e:38:87:c8:2a:37:08:
         f1:d5:dd:f0:37:a9:a6:96:cf:88:84:7e:d0:5d:94:5a:0f:82:
         3d:c9:e5:8e:2b:80:2c:1f:00:b4:4f:a0:d6:4c:35:dd:ac:39:
         ac:f3:72:ed:80:7c:eb:ef:0d:23:e3:11:03:3c:5d:cf:9d:8b:
         1b:38:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----