Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
File:                     H5TRNU5yMGqff5Ufk_UujROkCr8.cer (raw, json)
Hash identifier:          pllK3uEuJphAvUAP8FhhYoP73yX8QrjyeyITFPQM6PQ=
Subject key identifier:   1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067CE7292803338788755892D74CC8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205850
                          IP: 185.204.84.0/22
                          IP: 2a0e:e000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:ce:72:92:80:33:38:78:87:55:89:2d:74:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:ab:71:ed:39:25:1c:d3:c5:96:6b:33:6c:
                    4a:02:35:b3:17:d2:df:c2:e9:b1:f6:a5:65:18:83:
                    ed:db:72:c9:f4:9b:fd:8c:af:ed:3a:bb:24:3d:15:
                    79:d8:d3:7b:77:45:ce:ef:30:41:a0:15:c8:b3:0b:
                    bc:ac:6b:40:79:e8:5d:26:ce:c7:c2:9a:1c:e8:6e:
                    c7:48:3a:86:f4:65:6d:c3:a6:54:1e:c9:63:63:4a:
                    43:fd:79:e5:d9:c5:7b:65:c3:cc:47:06:25:a1:1f:
                    be:4d:69:3b:a1:e7:02:e7:13:8f:02:12:8e:77:9a:
                    b9:6e:eb:39:36:d3:44:11:66:8d:10:1f:1c:34:4b:
                    36:30:04:8a:c9:3b:d8:b1:e3:36:35:f0:44:d3:86:
                    76:5f:32:d1:cb:c2:c5:a5:1b:23:a1:13:57:f6:81:
                    a7:1e:5b:7a:5c:fd:a0:82:dd:99:ec:9f:ef:2f:28:
                    a6:43:64:09:c3:0f:18:40:aa:c6:e7:d8:86:b5:f3:
                    e7:09:68:66:57:76:b1:40:80:40:0c:90:e1:c1:99:
                    50:dd:f8:e3:cc:9f:4f:0e:38:13:c5:30:e1:fd:b8:
                    69:dd:05:b9:74:03:56:67:df:f5:44:3f:6a:bd:ea:
                    3b:06:6e:88:ec:0e:84:71:09:bb:bd:b7:7e:5a:86:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.84.0/22
                IPv6:
                  2a0e:e000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205850

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:90:d0:b0:d8:44:97:66:78:f9:79:16:a3:f5:0c:1a:c3:
         ac:98:3f:b2:d0:a8:45:dc:6b:5c:b7:52:51:f7:23:12:4c:cf:
         9e:33:39:de:32:62:85:3d:55:98:c5:24:f2:83:59:3c:7d:2c:
         5f:5b:9e:e3:4d:bb:92:9b:f4:12:90:90:d6:37:6b:40:90:85:
         39:c0:79:8c:1c:f4:b4:99:c0:e2:04:cd:04:fa:cb:2e:2e:fe:
         15:01:3a:ce:c3:6b:a4:14:76:aa:11:fb:a3:5d:39:6a:a1:9d:
         b3:f8:fd:37:10:8f:95:2e:6c:91:b6:2c:29:3a:e6:e1:fc:ce:
         88:78:31:ab:e5:09:b0:49:22:80:c2:21:39:5a:23:91:a4:37:
         33:50:67:1a:9d:a7:74:44:5a:6b:6b:eb:8f:50:3a:ee:8a:71:
         f7:35:36:4c:64:f8:c9:de:d5:6d:1a:75:9a:93:0f:e3:10:91:
         f5:bb:99:8f:b5:4d:43:71:55:56:e1:8b:62:74:45:71:8a:2d:
         3e:ec:72:73:1c:5f:e3:c3:51:cd:0b:05:0a:e0:78:63:2a:d1:
         74:86:e2:d7:54:a4:0a:c4:85:cb:53:44:1c:f1:7b:de:7f:9b:
         0c:c1:95:ff:f8:59:a7:b9:bb:c9:51:f1:f5:8d:c2:53:8a:d9:
         6b:e1:5b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----