Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
File:                     Es84yOexki9uvz_TQHNc2wQjFBg.cer (raw, json)
Hash identifier:          5kPwXjqtOAzfhWkUp9XzYynhIg/jdRhOa6U7tPV4FOI=
Subject key identifier:   12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C45BEA9A9A207E3165D8441E53980
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16350
                          IP: 185.6.160.0/22
                          IP: 217.119.224.0/20
                          IP: 2a02:1398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:45:be:a9:a9:a2:07:e3:16:5d:84:41:e5:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:5f:d5:5b:1b:03:84:ee:9b:48:95:d1:52:
                    52:24:44:fa:97:70:9b:7f:40:92:19:1e:60:2a:3f:
                    8c:b9:3d:ed:62:11:8c:6c:7c:34:31:c6:d2:80:57:
                    4d:3c:43:ad:3a:d2:53:19:53:0d:ef:29:ab:e2:48:
                    71:3b:d7:88:5c:47:ea:b2:57:76:11:da:4b:ea:87:
                    1c:a5:90:a5:43:53:a9:15:91:c4:86:53:24:44:62:
                    76:16:a1:84:35:c5:d2:79:f0:4a:af:17:8c:f1:eb:
                    f4:62:7a:d3:f6:ff:ce:2c:08:25:43:0f:12:7b:84:
                    0b:8f:55:ed:d7:d0:9f:1c:0c:f3:ef:57:ae:52:0d:
                    c7:c2:e3:dc:3e:55:66:29:ad:35:90:7c:c6:8a:93:
                    27:db:12:e4:cf:dd:7d:a4:f5:72:42:1b:7c:be:70:
                    e3:db:fe:86:3d:c1:24:0e:1d:9b:80:69:43:a2:f5:
                    8d:c8:03:86:55:06:e6:6f:ba:7e:b6:6a:43:d9:2d:
                    11:be:bd:c6:14:48:5e:5b:58:94:5d:38:a6:07:e4:
                    79:c5:f2:4b:36:dc:aa:2c:4f:90:0e:0b:25:51:98:
                    86:54:7d:61:78:8d:31:30:fa:ea:5d:0d:34:35:dc:
                    24:92:8a:8a:3d:5f:05:47:59:79:01:74:57:03:fa:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.160.0/22
                  217.119.224.0/20
                IPv6:
                  2a02:1398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16350

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:c7:a5:8d:c7:9a:f1:ab:aa:72:f1:fd:61:70:ce:fe:e0:
         ff:0a:36:76:c0:8b:26:e3:9f:df:13:55:bc:5b:d0:c5:b7:16:
         ad:d9:6a:9c:0e:ab:ec:91:38:30:e7:75:99:9a:9c:b6:51:d3:
         9b:1c:a1:f3:15:32:0f:c1:b5:b1:8d:74:1e:b8:88:8d:15:13:
         32:68:a6:d6:22:12:8c:eb:1b:cc:df:2d:70:92:4b:46:d0:be:
         dd:1a:72:2e:1c:26:38:dc:de:9f:72:e7:9c:5c:5f:c4:e6:f7:
         c1:21:cf:f4:67:a1:0d:ad:03:c7:de:d9:3c:cc:87:2a:44:43:
         43:34:d6:5d:94:c6:bf:00:7f:c4:05:16:d5:4a:0b:69:23:4d:
         c9:45:5a:dc:fc:b0:f7:e2:6b:f0:a2:c3:59:bd:53:02:42:7b:
         84:08:4f:ed:42:30:00:e4:86:03:00:fc:ea:a2:fc:be:c4:ec:
         fa:60:00:3d:68:1c:25:cf:bc:b5:9b:d9:6b:88:8a:7b:3a:e5:
         78:00:d1:d9:9e:d0:ff:f6:84:2a:4e:e5:c1:43:05:65:93:a4:
         66:ce:69:d8:ee:b9:66:f1:69:97:e6:64:a4:bd:8c:6c:18:c6:
         3a:81:26:9a:64:34:fa:2b:9e:cc:4f:ea:89:be:ec:a7:6e:6d:
         f6:48:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----