Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
File:                     GWN5dpxXylsmosYfpdmsxSe-p4k.cer (raw, json)
Hash identifier:          I0BKhEW9jfLDR0+gavm+w9C4moxFQH9S91O5hZy9yeo=
Subject key identifier:   19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747AF30C12E6117BBF6D7058D7A7D4F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59898
                          AS: 64402
                          IP: 185.167.4.0/22
                          IP: 185.196.136.0/22
                          IP: 2a0a:6d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:af:30:c1:2e:61:17:bb:f6:d7:05:8d:7a:7d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:74:d7:8d:ba:18:e1:a4:6e:72:c7:5b:f0:
                    2a:57:19:74:9d:c1:ac:c3:71:0e:2e:3a:90:e3:23:
                    9d:94:b8:1a:42:1f:32:d3:3d:ee:58:67:5f:56:ed:
                    0d:ea:d3:89:17:c8:d7:70:87:a8:d8:6e:2f:60:96:
                    fd:a9:78:16:7c:b1:98:51:75:7c:cb:47:35:0a:1c:
                    ec:3b:7b:3f:40:28:ab:15:ab:23:43:49:0d:34:58:
                    25:36:52:8e:05:74:af:a9:95:d7:84:1f:53:98:26:
                    72:20:65:cb:2a:3d:c6:dd:c4:55:6d:58:82:08:df:
                    34:9e:1e:e8:0e:46:93:97:dc:6c:be:5d:e0:d5:9d:
                    b1:a0:f4:2b:2f:fa:cc:09:78:b4:d1:9a:ca:63:24:
                    f0:96:cd:6a:12:8a:7b:53:fc:ae:e8:76:ee:da:8f:
                    c5:60:34:60:b9:1d:f5:09:30:85:60:cf:3b:6a:26:
                    4c:69:ca:e1:bf:c3:41:71:01:d8:c2:d8:a0:87:3d:
                    5a:91:6a:10:9f:3b:91:52:56:77:99:d6:3b:0d:a6:
                    53:ca:55:2f:96:28:f0:bb:1c:72:e3:a9:84:bb:28:
                    e9:84:09:a2:f7:11:e4:ac:c4:42:1c:cf:63:2f:87:
                    1b:3e:89:95:1c:15:76:93:2e:37:d5:ae:8f:72:3d:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.4.0/22
                  185.196.136.0/22
                IPv6:
                  2a0a:6d40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59898
                  64402

    Signature Algorithm: sha256WithRSAEncryption
         71:43:98:26:ad:aa:81:6d:a8:4b:e8:f9:10:dc:93:d9:a7:2a:
         50:08:4b:77:bc:dc:97:55:6a:2d:5f:d9:7b:91:81:54:ad:98:
         bc:76:f1:49:90:42:9c:e9:4e:8c:73:8b:5a:55:0a:16:6f:61:
         d1:97:8c:4e:7a:98:75:e3:41:f8:69:2a:41:08:75:8b:00:ea:
         c7:87:37:b5:4f:d7:4a:b1:a4:20:2d:3d:e6:f5:3c:7f:e0:ee:
         9f:b4:a1:85:bc:72:cc:4b:c0:c1:08:b5:3b:0c:93:2a:7c:92:
         f4:05:5d:33:73:3a:ea:75:4d:55:33:1e:1a:0e:7e:d3:c8:be:
         5b:2a:37:bd:2f:7c:23:c9:bd:56:71:91:95:c3:6f:da:27:ae:
         a3:44:3a:0e:7a:58:2a:f0:ec:9d:ed:88:aa:56:c5:82:b2:37:
         32:a1:7f:6c:2a:a6:21:9b:43:6c:8a:0e:07:84:b0:c5:ab:ae:
         73:28:48:3d:af:a4:a5:09:78:3b:f7:e9:5e:53:cb:b6:87:ff:
         05:d0:52:62:0a:28:b8:93:ae:75:a5:23:9b:ac:3a:24:c4:4c:
         98:4d:0e:2d:49:16:4a:a8:d2:f3:60:87:f2:17:6c:1c:b3:f4:
         6c:82:2d:95:1b:57:f2:91:bc:69:ba:f9:b3:36:47:e5:27:dd:
         37:e6:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----