Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.cer (raw, json)
Hash identifier:          cEb3Hnts2zxg5wb5gf9EEmvG2LnLyukbalbl/hMiEcI=
Subject key identifier:   10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B318BED384CD7314FC922FB29EEB7E64
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Mar 2025 10:28:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59402
                          IP: 91.109.40.0/22
                          IP: 185.96.16.0/22
                          IP: 2a06:5b40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b3:18:be:d3:84:cd:73:14:fc:92:2f:b2:9e:eb:7e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 10:28:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:f9:e7:c9:b5:33:3f:98:cb:82:d2:be:2b:
                    d5:90:9e:18:44:11:71:ed:ce:a9:e6:c7:c9:51:b5:
                    f9:f8:16:88:e7:7b:13:92:a8:a8:8f:da:01:35:74:
                    8b:17:17:64:3f:c3:32:a0:09:6c:1f:e0:c4:45:84:
                    ef:82:91:9c:ea:ba:77:25:0e:a4:b5:b2:e5:9a:66:
                    3a:83:97:a9:ad:d0:5a:b5:ac:25:c2:5d:5b:0c:a8:
                    b3:02:8e:30:de:35:6d:50:00:79:d3:4b:27:11:fb:
                    c6:9e:f1:13:65:19:11:e9:c9:2d:85:7f:b1:0a:83:
                    e9:e2:50:29:d0:0b:c0:e0:0a:2d:d4:14:24:7e:d8:
                    35:1a:f8:7d:40:53:bd:1f:a4:17:8c:20:ab:cf:a4:
                    a3:dd:35:0b:6b:ca:28:32:49:30:f1:64:ab:a8:9d:
                    f9:6e:c6:68:ad:4d:10:3f:a1:84:6d:b8:24:84:a6:
                    d9:a7:1c:75:c4:f8:1e:2e:20:10:bb:0e:05:09:a4:
                    27:18:9a:da:67:32:30:1f:49:8d:9e:a7:da:0f:07:
                    44:18:5c:55:68:a8:ca:a6:9e:2f:6f:94:f5:ba:c4:
                    38:a3:0c:77:90:5d:08:dd:dd:c3:08:dd:97:a0:9f:
                    f2:61:0a:0d:16:70:49:e7:bb:98:56:30:d5:99:72:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.109.40.0/22
                  185.96.16.0/22
                IPv6:
                  2a06:5b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59402

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:7a:c0:69:eb:02:72:d8:bb:0b:28:56:9d:fc:d6:04:9a:
         1a:52:10:d5:24:c7:a5:7f:cd:6d:35:c3:0b:36:11:49:95:3b:
         11:55:4e:20:1d:a7:69:0f:84:52:46:9e:a4:43:52:d3:b5:32:
         b5:88:c3:51:ef:fd:65:eb:40:53:6b:c3:b0:13:aa:13:26:71:
         9a:bf:3a:dd:f9:2a:4b:b7:84:80:06:b5:59:f2:92:59:a6:14:
         25:58:ef:6f:fb:b2:8b:55:ca:6c:28:2e:d0:a1:d0:9a:0d:10:
         7c:ff:e7:51:43:a1:45:65:15:b9:00:1a:07:15:64:f3:c3:83:
         48:5d:93:76:c2:8b:57:76:0b:bd:ea:4c:03:c6:27:f6:24:de:
         49:eb:c7:00:78:0a:ad:a7:2e:de:26:4e:9c:48:c8:dd:e5:9e:
         08:ee:2d:32:8d:fd:63:10:12:50:e1:f8:f1:47:d4:b1:4a:d2:
         62:c5:d7:f1:13:56:3f:44:a7:80:a1:0d:a2:a4:7d:5d:15:34:
         dc:84:ae:0a:28:db:51:94:ca:03:d2:25:fc:e5:27:e3:b7:70:
         26:84:de:fe:00:4f:96:f5:f6:fc:91:ad:ed:95:be:a8:db:42:
         0c:b0:eb:ad:b1:24:a4:e2:2a:fd:45:5f:fb:a4:2f:82:b0:a8:
         d0:a8:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----