Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
File:                     GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer (raw, json)
Hash identifier:          U58PvDrx1p85vg4fHFVgphpZZvqx8BhS5zVAsMpF1RU=
Subject key identifier:   1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423699FC8F8D6E70C37795947EF6A339B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48594
                          IP: 94.124.80.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:9f:c8:f8:d6:e7:0c:37:79:59:47:ef:6a:33:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:c3:1b:59:8a:cc:c5:9d:5f:e4:b5:7b:67:
                    bd:a1:1b:7c:39:a7:4a:3b:f6:aa:1d:36:eb:78:a1:
                    19:36:d7:3a:07:48:fe:87:54:18:49:d1:9b:8e:4b:
                    a2:d6:33:19:01:f1:1c:80:cb:45:8c:4c:7e:53:0b:
                    2c:d9:88:51:ff:71:56:7e:70:62:a8:bb:6e:33:18:
                    8c:c5:ae:7e:f6:b0:2a:89:3d:80:d4:e4:2c:e1:fd:
                    64:bf:e9:f8:d7:a8:13:a2:16:53:4c:ee:67:45:0d:
                    f8:a9:3e:7d:49:42:9c:7d:0a:07:e0:54:b3:a4:32:
                    77:31:87:99:a5:5d:7e:3f:a6:f0:30:5e:6d:1c:a2:
                    2b:c2:cb:c7:33:cd:74:5b:30:9d:3f:29:38:80:0e:
                    80:19:d7:b5:56:90:a9:11:7d:a5:c0:c2:d5:99:01:
                    9c:26:aa:a0:25:2d:43:b3:f0:a1:4f:ec:d7:66:b4:
                    5c:ff:49:41:87:a0:d7:da:b0:14:3c:fc:aa:03:06:
                    8a:21:1e:3f:8c:a7:f6:94:4e:c5:27:39:35:80:92:
                    63:47:e3:3a:f8:4b:ed:c7:75:3f:24:03:b5:56:4d:
                    f9:e9:b3:ef:89:ca:bf:ee:bf:f6:3d:26:5f:c2:4e:
                    ac:a2:db:c3:58:73:b5:61:9f:a8:b1:d0:9d:9f:8d:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.80.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48594

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:c1:2e:66:bb:1b:d6:1e:6c:a7:8e:dc:c6:7c:f4:0c:f8:
         6b:8f:cc:61:75:30:3a:e1:a9:f9:de:1e:ff:33:28:40:f3:93:
         0d:11:a1:29:ae:5d:be:b6:c6:93:43:5b:1c:5e:49:4c:f8:e4:
         3d:6a:6c:c9:98:ed:ea:40:e0:f3:f1:58:b5:fb:de:44:4e:84:
         28:f0:91:5e:2c:f7:b3:65:60:c8:ad:cc:48:35:ba:ce:a0:eb:
         47:21:e8:f2:21:04:c6:62:39:80:c6:c9:6b:dc:ac:89:71:62:
         5b:06:29:3a:13:ff:83:77:4f:48:19:69:a2:4a:c8:ca:ad:72:
         3a:75:1a:7d:fc:ed:a4:58:83:97:e8:bd:61:e1:d0:18:75:3e:
         71:86:fe:13:a0:85:6e:68:80:8e:68:5d:e5:1c:ee:56:17:26:
         13:85:7d:8b:92:da:be:c0:5d:fc:d9:8b:06:40:1a:2c:67:1e:
         5b:ca:8b:91:a1:c7:18:84:90:6b:9b:75:9a:e8:c9:2e:6d:03:
         70:8b:8a:b4:fe:94:71:5c:c0:ac:e3:fa:06:5f:5a:43:c2:ca:
         fb:27:a4:ed:0a:20:9b:df:53:bc:7d:f4:1b:05:06:75:bb:ab:
         ea:92:6c:7e:61:04:41:a6:e5:39:03:32:08:59:b4:c4:7f:a2:
         03:2e:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----