Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.cer (raw, json)
Hash identifier:          DTckQqiibrjyX41VcBBQ9pjIAtb5QcxnPPFxU20TdD0=
Subject key identifier:   1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F25C040510D806B8A046941D60FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62105
                          IP: 82.163.40.0/21
                          IP: 185.47.132.0/22
                          IP: 2a01:90a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f2:5c:04:05:10:d8:06:b8:a0:46:94:1d:60:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:05:d5:d9:1c:49:98:6b:3f:fb:00:51:66:
                    8d:23:c2:cb:db:18:7a:d4:d1:01:9c:67:f8:c3:f8:
                    49:df:11:c1:ea:08:c2:02:00:7c:3b:5b:1e:49:01:
                    0b:31:ab:b3:27:f4:aa:2f:8d:18:2f:fd:74:5d:06:
                    37:d4:63:77:2e:c3:dc:ce:a4:e2:ba:eb:77:55:cc:
                    58:9f:c7:1e:29:5a:3c:83:83:ea:54:b1:64:c8:3f:
                    cc:92:1a:19:c6:4c:13:c0:ed:51:e0:57:23:29:be:
                    99:07:b8:96:62:f0:d4:64:05:6e:b3:a5:c4:80:15:
                    14:b5:ea:a4:99:93:fc:ee:21:47:c4:e5:20:16:8a:
                    23:2e:49:08:1c:f5:3a:d5:c6:63:ce:27:5a:30:e4:
                    d9:64:08:f5:c8:2d:0c:4d:39:e4:0a:ac:ee:b5:a3:
                    bc:4a:78:8e:af:1b:71:b3:9d:1b:32:7a:21:24:68:
                    dd:a9:6a:ad:f2:d6:70:17:ed:4b:72:07:4a:88:ac:
                    fd:17:62:b6:74:c5:fb:a2:59:95:c5:c8:c0:e5:e9:
                    82:e7:58:80:70:0d:b1:30:8f:8a:f8:8d:26:3a:78:
                    d7:d4:f4:62:0c:d0:af:11:a3:ec:a9:7d:0c:07:96:
                    98:73:8d:9f:df:0f:09:85:37:f9:57:d4:b4:17:24:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.163.40.0/21
                  185.47.132.0/22
                IPv6:
                  2a01:90a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62105

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:c4:cb:06:98:90:8f:6b:33:06:ed:25:87:39:4e:42:ab:
         30:1d:3a:41:fe:23:8f:92:2a:ed:e9:70:9b:d3:09:c4:07:02:
         bd:78:ed:60:04:a5:4b:bd:bc:eb:d2:ae:98:e1:96:03:00:03:
         d5:d9:f3:25:a9:eb:21:b9:b0:23:b1:cb:bc:2c:00:79:69:6b:
         89:41:6e:47:61:bc:55:79:cf:d6:6a:3d:04:83:a9:24:08:96:
         38:a0:2e:9a:cb:57:c8:62:b0:6d:b7:28:08:ad:e3:82:6b:2b:
         ce:6f:ae:a9:ed:a6:ad:03:e3:d8:e8:cd:c5:8e:1e:55:b9:12:
         d8:6c:0d:a3:c9:03:11:9a:66:62:f5:79:ed:b2:96:83:19:5c:
         13:93:af:4b:fb:12:42:69:fa:18:3c:37:01:d2:f7:b0:bf:54:
         b0:17:4d:19:47:2c:cd:0a:9f:ac:27:42:45:67:61:0d:69:8c:
         0f:35:47:a9:41:f0:0c:b5:cb:27:2e:6e:81:c3:e5:3d:1c:fd:
         bc:07:34:ad:7b:cc:9f:06:31:27:59:05:12:19:94:d2:d8:c0:
         0d:8b:99:f5:c9:26:53:fe:df:4d:26:82:4a:8b:8f:0e:54:f5:
         ab:8d:94:3a:33:d5:68:34:69:67:f7:81:55:e5:a6:72:3e:d4:
         08:e3:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----