Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
File:                     GnU2E7QiD2jytUbQkqIwvtbtrLg.cer (raw, json)
Hash identifier:          8UNUN0isKBxbd8rbtHGfd7km0iahyTOYwfRcZoaa3N4=
Subject key identifier:   1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6A0B8B525DA171F62D4D9A60E3F64
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57247
                          IP: 194.116.230.0/24
                          IP: 2a02:4680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:a0:b8:b5:25:da:17:1f:62:d4:d9:a6:0e:3f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a753613b4220f68f2b546d092a230bed6edacb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:25:b3:45:3d:12:7b:ce:3d:e4:dc:32:b2:
                    c7:f4:5d:b4:d7:ab:25:ae:e8:58:42:51:78:e7:cb:
                    46:63:04:2c:f0:d9:5b:56:78:d7:e0:a6:63:61:65:
                    11:59:73:8c:12:db:5a:b9:29:02:00:15:67:3f:88:
                    4f:90:f8:27:53:7a:54:1b:87:5a:34:92:14:13:cc:
                    c0:3c:6a:68:58:0b:ba:13:e0:8b:0b:ee:01:c0:83:
                    79:2d:9d:9c:94:c6:0e:9d:9f:b9:a1:69:74:0e:5f:
                    d9:31:52:34:3a:ec:0b:eb:a5:2e:3e:27:21:3c:c7:
                    6a:be:c3:ac:a7:a0:0b:b9:c2:9b:8e:a9:66:91:57:
                    9a:33:0f:36:06:da:4b:6f:cf:20:60:7b:86:54:b1:
                    61:1c:c7:f8:51:8d:32:a6:d4:9b:68:fd:93:6c:03:
                    ed:2b:4f:52:52:75:0f:61:e0:a0:df:e9:0a:ca:17:
                    4c:d6:a6:9a:76:f0:e3:96:15:16:b1:8d:6f:64:20:
                    2c:fd:85:5a:f0:1e:7e:e7:ca:27:60:e3:c8:a5:d1:
                    06:72:dd:30:56:36:b9:8b:b9:7d:36:86:3e:22:b5:
                    c6:b8:8c:28:c7:89:0a:78:56:1b:cd:9d:7c:d2:a3:
                    73:e2:e7:3a:ec:bf:da:ed:6f:13:62:8c:3c:9c:42:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.230.0/24
                IPv6:
                  2a02:4680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57247

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:d9:13:10:15:df:1d:5c:59:d1:fa:fd:68:c0:0c:9e:c2:
         70:8a:d0:b4:26:a1:b7:12:a9:b9:9a:a3:da:e6:65:b7:63:e5:
         00:b1:08:b3:7e:6a:28:71:07:44:57:76:df:97:93:92:5e:5a:
         ca:62:d8:c2:72:34:60:5a:36:ee:d0:f8:cd:22:7a:29:5c:e4:
         6c:92:39:8f:de:32:20:f3:43:ae:cf:e5:65:b8:d2:eb:20:f7:
         fb:87:87:45:43:10:d9:c5:74:f7:d1:9f:7c:3e:e3:2b:7a:22:
         e8:57:31:b6:47:5c:11:48:a2:56:9c:c0:a4:96:96:bc:9c:d2:
         f6:46:37:9e:30:b4:3f:2e:1e:2a:bd:41:55:4e:6a:39:dd:15:
         1b:d0:9c:e4:bd:f9:6e:df:55:8a:34:c0:d6:8e:7f:f6:a5:ae:
         1a:db:37:66:a7:07:9a:b7:3a:7c:a1:82:af:9c:45:02:50:16:
         ba:4a:8d:cc:7a:e3:ba:e5:ee:f4:ba:6d:a7:5f:62:9a:63:b9:
         4d:b4:30:88:56:45:67:a9:1d:78:1a:f0:95:bd:ce:c6:48:d6:
         40:1f:f8:ca:8c:79:61:5f:91:6f:2e:40:eb:f6:ec:21:1c:c3:
         7f:9a:dc:05:94:4c:b6:aa:e0:49:86:8f:94:5a:67:00:e4:ef:
         42:35:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----