Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
File:                     Gw4VwVrnA6iXkEavXezEky7cf24.cer (raw, json)
Hash identifier:          Z04g1OEQ8rMB+bAVZUXH+0OcoV/666aIe1mb9eNkZdA=
Subject key identifier:   1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368F8D0F05211A22CFA403F0C567E65
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198901
                          IP: 91.240.88.0/24
                          IP: 185.245.8.0/22
                          IP: 2a0d:4780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:f8:d0:f0:52:11:a2:2c:fa:40:3f:0c:56:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:00:7e:78:9a:83:e9:fd:15:59:00:6c:a3:
                    2c:44:ef:bf:35:7e:05:ed:14:71:2e:8d:50:da:bf:
                    0d:0a:1c:7a:b5:ed:27:d1:f8:10:97:b9:ea:ad:8b:
                    a0:49:4d:6a:03:6c:14:b4:7a:96:ad:8f:b4:36:81:
                    56:bc:99:8a:fc:3c:6e:7a:17:45:5a:9e:88:d6:b6:
                    4b:d0:1a:f8:98:2d:9d:aa:d1:64:40:9f:87:6f:44:
                    56:3e:bc:55:1f:97:f7:61:5b:40:a5:a2:ff:12:ad:
                    92:58:d0:f0:5a:e0:8e:e8:83:8d:14:0a:72:da:19:
                    27:92:2f:83:10:62:0d:3c:4f:80:a9:53:ce:34:a5:
                    f7:15:40:d2:97:54:74:1d:49:f1:b6:b8:2a:f7:6f:
                    4d:08:51:00:c9:a6:ee:72:15:1f:f5:23:0a:ac:d2:
                    78:15:8f:3c:3c:a3:e7:89:2b:d0:46:3a:1e:9d:f5:
                    8c:0d:01:8c:b9:88:e9:55:d7:65:ab:8a:48:bc:9d:
                    a5:aa:e4:6d:34:05:48:10:d8:18:ae:11:0d:4b:81:
                    47:dd:b6:46:8b:16:bc:bc:56:40:9a:54:0e:13:da:
                    43:5d:1f:1d:a6:bf:b1:44:28:98:29:e6:6e:4d:4f:
                    e4:90:41:d7:47:03:33:30:aa:d9:4c:7c:b6:c6:be:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.88.0/24
                  185.245.8.0/22
                IPv6:
                  2a0d:4780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198901

    Signature Algorithm: sha256WithRSAEncryption
         65:37:ea:c7:5c:c0:60:c1:e8:6f:f2:f9:11:ea:81:3c:62:c9:
         27:cf:d4:d3:75:ea:4f:2e:bc:e1:eb:e5:57:8d:b6:64:25:59:
         f1:82:75:b7:0c:77:be:f4:ad:c6:67:a6:2d:ff:32:25:29:5c:
         32:1d:06:90:39:2f:8b:5f:5e:76:2e:cb:de:3c:05:43:77:ac:
         b0:13:ca:25:d7:c7:fb:43:86:0b:8c:d6:cb:22:0f:54:aa:63:
         e6:0f:ad:f5:2e:fb:99:b6:8a:bb:74:3e:6d:a9:77:97:b8:24:
         5a:6f:6f:e4:5a:be:ef:ac:fc:80:03:86:c3:b8:d8:42:04:fb:
         ab:86:75:5a:61:b8:d3:2b:26:b8:d6:e2:c1:1d:ab:e7:0b:c2:
         c2:2b:5f:db:29:f4:6b:3b:0f:a7:09:1f:40:42:66:ec:9b:d4:
         16:4d:3a:72:75:29:dc:b0:cb:31:6a:35:26:ef:9c:08:2a:5f:
         b4:a0:2e:a8:3c:df:94:85:a1:dc:be:e7:19:aa:1e:81:4d:7c:
         ac:c7:36:3f:2b:15:79:96:7b:df:3c:a7:11:8e:f3:0a:10:ab:
         6a:42:c8:37:f0:77:04:06:9f:c0:58:96:e6:94:97:d1:3e:6e:
         3f:3b:4b:64:24:7b:5d:4c:3a:1c:0f:04:4d:f5:ef:60:81:06:
         0b:b0:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----