Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.cer (raw, json)
Hash identifier:          vvH0VAO3oTB7JEpYFswhLL+Ozm2/b7BAWuELmSDHdlo=
Subject key identifier:   15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AFF40EF31F6BCC46D79CD725E922B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205665
                          IP: 185.209.232.0/22
                          IP: 2a0b:8a40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:ff:40:ef:31:f6:bc:c4:6d:79:cd:72:5e:92:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:7b:d8:02:3d:42:9d:00:8d:ca:ff:d1:8a:
                    2c:ce:83:de:57:e1:5b:0c:3b:a4:66:db:72:1c:a4:
                    f8:15:29:29:ef:e4:29:2b:4e:41:1a:96:8b:64:21:
                    88:2b:45:0e:80:aa:a6:7b:b8:a0:09:55:26:32:53:
                    5f:b5:87:a0:88:cb:b5:8f:3a:c9:6b:35:86:97:db:
                    96:23:9f:eb:45:5a:90:77:aa:c2:a0:c4:90:c5:e1:
                    d5:b5:8b:0f:45:53:2a:3c:df:91:31:54:27:40:67:
                    f8:85:f1:70:67:20:78:08:68:02:59:ee:6a:12:59:
                    b0:27:3a:ff:6d:e6:02:43:af:bb:ed:1d:eb:4a:35:
                    f1:05:21:6f:1b:09:09:80:8d:44:12:8c:e2:66:47:
                    0b:98:dc:b8:33:91:91:0d:e3:bb:cb:b4:a4:cc:46:
                    52:69:67:e5:26:45:fe:ca:2f:93:e1:f2:d9:e9:c2:
                    ef:b8:58:b3:f7:6b:93:cb:8d:f7:62:d8:ab:bd:35:
                    47:61:62:12:87:b4:9f:3e:37:39:76:bc:d8:af:40:
                    3a:bd:ad:de:90:43:d5:0c:58:64:e7:5f:f3:0f:53:
                    bd:47:fe:58:86:8e:29:b8:d4:83:b2:31:a7:70:5b:
                    e1:47:ba:0c:11:42:57:49:75:2d:51:1f:c7:9e:1e:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.232.0/22
                IPv6:
                  2a0b:8a40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205665

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:d7:d5:58:0d:09:09:66:ee:1d:c6:46:37:e4:52:ad:14:
         54:ac:23:3e:c3:c7:1d:c6:5c:62:4c:4f:44:46:85:24:1b:2a:
         91:7c:d6:4b:eb:bd:a8:c0:cd:ab:00:b3:4f:c0:c5:1f:92:23:
         17:7f:dd:b7:e7:d0:b9:ed:93:51:ba:b7:07:48:c2:6f:da:2f:
         7d:ba:a7:ff:37:6a:cc:69:f2:30:26:1b:6e:f0:67:1a:a8:e3:
         e5:28:45:f8:87:f3:eb:c8:cd:61:90:8c:93:23:48:c2:e3:1e:
         97:02:b7:92:73:96:b4:0b:1e:14:bf:22:f9:9e:1f:d5:00:04:
         14:9d:c2:16:cd:e8:4b:57:28:d0:bd:8b:88:07:76:b6:d5:ef:
         46:f1:75:bc:1a:0c:a9:2e:65:1e:6b:1f:a9:a0:74:d6:d4:f3:
         bb:a4:51:12:fa:76:1e:b4:ae:8d:a8:7a:aa:f6:89:66:5a:88:
         ca:e6:f5:0f:bc:06:d3:52:91:89:f8:b1:e2:bb:fb:3e:2b:a2:
         fa:e2:fd:9c:b0:ae:92:0b:a4:6e:96:f3:0c:3c:ce:2b:f6:ab:
         88:02:87:1f:67:fa:64:9b:94:d5:18:2c:9c:73:c2:1c:80:8f:
         48:8b:1c:20:f9:ae:88:a0:85:c0:12:63:30:7f:61:f9:99:cc:
         9a:51:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----