Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
File:                     G-9aoU0xQMfHxJiPGdqUMesaQPE.cer (raw, json)
Hash identifier:          sFnsM4oNXBlx0A9kNlhCIYXZolWyXnXCVVizBH1aEDw=
Subject key identifier:   1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423696CA5CA5BBEBA4BBF7EF5E35F157A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49796
                          IP: 185.167.72.0/22
                          IP: 2a0a:900::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:6c:a5:ca:5b:be:ba:4b:bf:7e:f5:e3:5f:15:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:ab:77:1c:5c:c1:6d:f3:92:4c:fe:f2:e8:
                    c2:74:f9:ad:8f:7d:ac:9f:10:1f:6f:11:39:2a:2b:
                    3b:1b:0a:da:00:11:6d:bf:9b:02:6f:96:b6:84:85:
                    e2:15:99:5d:53:46:a9:81:bf:77:b6:80:b7:c6:19:
                    11:78:54:30:d8:f3:8f:88:a7:ad:af:57:52:c1:1e:
                    81:db:65:12:0f:61:95:c3:ba:d6:27:f0:d7:15:dd:
                    4b:a0:5d:fe:d9:3a:63:60:ba:b3:ee:31:b8:00:9d:
                    3a:11:db:e9:c5:27:b9:bb:00:c0:14:1f:58:c1:df:
                    14:37:f9:06:1f:c8:b5:38:f9:60:cb:76:f4:9c:2c:
                    0d:37:ac:4d:d5:34:59:c7:f8:86:fc:ac:b1:3a:d9:
                    4a:4e:de:48:af:4e:1e:79:5e:51:1e:9e:d6:6e:0b:
                    51:b0:01:21:34:f4:3d:51:d5:e5:42:91:d5:5a:52:
                    80:e6:7f:b9:a8:2b:5e:bd:b6:b4:75:fc:b2:87:31:
                    d5:93:83:18:51:04:3a:34:13:1f:d1:62:52:bf:eb:
                    14:e5:bc:9f:60:16:9e:89:c3:55:8a:ab:fb:5b:26:
                    8b:6d:c7:4f:e6:9e:53:1c:52:fc:3a:a8:ab:89:3a:
                    9f:da:fd:fb:eb:f6:d4:ca:39:bb:57:20:e2:10:65:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.72.0/22
                IPv6:
                  2a0a:900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49796

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:71:01:76:02:c4:79:d5:e4:92:81:a2:79:9b:c3:bb:ba:
         74:13:4b:ee:b6:ad:4c:96:df:3d:3c:21:0f:62:ad:03:f8:e2:
         0e:18:ac:af:1a:2d:05:fb:7f:58:79:db:8a:a4:8d:45:02:c0:
         d7:d4:7e:64:ad:82:cf:e6:9e:23:9b:e5:18:0a:3f:cf:f9:0b:
         b2:3e:66:07:a3:02:bc:57:02:33:bd:10:73:e1:3a:a4:7a:9d:
         78:ea:70:8a:b0:1d:56:ac:1d:c5:d7:58:56:af:0e:ea:d1:e2:
         8f:aa:b7:74:c9:57:9c:47:41:33:04:74:fd:9f:3e:e1:a9:4f:
         74:d2:77:5f:64:d0:8e:c7:01:d8:d2:38:e8:59:c9:03:5d:db:
         39:49:b9:db:b0:f7:9a:94:87:8a:af:d1:c0:52:c3:de:fa:35:
         96:44:75:b3:8d:86:2b:c0:8d:0f:5d:df:86:6a:1a:79:9c:e1:
         1f:88:a9:46:73:0f:8e:22:34:2b:b7:53:d2:65:d7:12:d8:40:
         d5:61:49:50:b4:61:bd:e0:d2:c3:c0:f9:48:7f:e5:e3:b9:cc:
         f4:a4:66:81:79:d2:6e:60:3c:2d:49:7a:83:fb:6f:4b:7a:5f:
         d7:f0:cb:ec:36:40:0c:ba:2f:0a:b8:d2:ac:99:07:60:78:7d:
         bb:9a:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----