Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
File:                     HJe0gj08nhIexkmCHgDwp5rrm40.cer (raw, json)
Hash identifier:          hkZ57C51XqN7zEXwZJXQPZ3JD83tEReIzSGe4Xk0e7A=
Subject key identifier:   1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9AB0D9D1A4B572B89C87FF3BC6750
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43608
                          IP: 62.77.132.0/22
                          IP: 78.24.104.0/21
                          IP: 185.61.56.0/22
                          IP: 2a00:9500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ab:0d:9d:1a:4b:57:2b:89:c8:7f:f3:bc:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:28:76:4b:47:59:2f:a4:33:33:08:93:7d:
                    4e:ee:03:2b:28:7b:80:db:47:0a:15:80:4e:31:f3:
                    9c:f3:1a:47:4c:ef:7b:1a:17:a0:f5:b2:0e:b9:8f:
                    7c:44:ba:4f:e5:a9:5e:3c:27:9d:53:a5:4c:f2:c8:
                    4e:0b:5d:99:11:76:51:8a:3a:bd:b9:81:1a:93:29:
                    3e:6c:99:16:c0:0e:8e:20:c0:f0:eb:e7:bc:ba:cf:
                    d9:d7:5c:e9:f2:15:c5:7f:b3:c7:ad:04:bf:1c:d1:
                    c8:97:fd:b4:7c:3c:b5:f4:80:3d:0d:e5:d5:96:6a:
                    62:ac:cb:d5:84:b7:b6:27:19:d6:07:fb:9d:6b:df:
                    75:28:f1:f3:c8:d3:d5:05:a8:1a:d7:67:2d:d6:b4:
                    bf:91:25:08:b9:de:1c:d9:54:14:fa:b4:9c:ae:50:
                    b7:78:78:e4:a6:5d:db:ba:8d:76:00:ff:37:87:e8:
                    f6:33:7c:93:69:d0:e7:fe:ae:52:3f:b4:05:18:9a:
                    a9:a0:d8:79:d6:d9:be:1c:57:ab:3a:85:f5:c4:64:
                    cd:90:48:bb:71:c7:1e:02:bf:9d:dc:ec:3d:08:08:
                    2c:c2:d2:20:38:5f:42:27:a2:03:03:c7:43:bb:86:
                    90:5d:b3:cb:e6:cf:95:57:44:7b:16:d8:a2:74:7e:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.132.0/22
                  78.24.104.0/21
                  185.61.56.0/22
                IPv6:
                  2a00:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43608

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:f8:ff:26:37:fd:ea:65:37:2f:e1:e4:70:5e:fb:cc:26:
         f2:7f:c2:89:c0:78:97:d4:b7:22:f1:b5:49:38:66:56:42:65:
         5e:e9:3b:10:3e:71:72:2b:f2:59:ee:d1:0d:a9:9a:7f:f9:f8:
         1f:d4:81:f2:d4:5a:98:15:f7:cd:36:cf:f2:04:a6:7b:91:30:
         9c:16:09:f4:0c:50:4c:c1:60:38:8d:68:4e:d8:87:db:65:06:
         13:19:29:b1:ee:5d:26:4b:0f:39:ba:dc:b3:31:ad:f1:c6:a1:
         ee:6f:31:81:b4:3b:e2:d4:64:44:d7:6b:ef:6e:31:61:12:d9:
         a0:57:27:f5:26:85:d5:0a:da:21:5b:5b:49:ae:c8:d9:c3:ca:
         15:0d:ce:0b:18:ef:0d:49:c8:79:46:41:5e:18:28:ef:5d:88:
         da:06:97:1d:b1:70:87:a9:fa:77:91:28:57:ca:fc:6a:bb:74:
         26:f6:f3:13:73:52:97:2c:05:1f:f1:fc:0f:77:0e:0a:e1:b3:
         e3:19:8c:e3:64:16:03:fa:27:15:a8:c4:33:62:55:7c:13:98:
         28:4c:28:d3:03:77:df:db:31:11:4b:fc:52:f4:a7:39:66:43:
         22:4f:44:2e:23:f6:ba:f2:d9:37:11:00:15:a1:f0:4d:dc:4c:
         a1:2d:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----