Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
File:                     IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer (raw, json)
Hash identifier:          S2KYZcLbaUNQgvUJxB62iV1LS8pM/tk2q3vQA9GBDMw=
Subject key identifier:   20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F3604E061AEA6BCFAFA4DA06C25F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209888
                          IP: 185.180.216.0/22
                          IP: 2a0a:af80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:36:04:e0:61:ae:a6:bc:fa:fa:4d:a0:6c:25:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:e9:18:95:2d:6d:bd:22:8f:b9:7f:48:c9:
                    94:c7:d4:08:98:04:73:c3:c7:bc:94:5c:b8:3b:82:
                    c1:e2:c5:bc:f9:5a:2d:3d:11:5b:de:9c:6d:6a:c9:
                    4d:cb:a6:16:08:35:f5:fc:68:c3:8e:40:e1:bc:7f:
                    74:b6:df:5f:35:37:cc:f3:14:84:64:e3:b6:94:74:
                    ad:64:f3:57:05:8c:d2:6b:c7:19:a3:6b:c2:36:27:
                    ef:8d:9c:6f:97:2c:54:42:e7:7c:8a:84:ab:f5:2b:
                    9c:93:bb:4e:14:15:d5:56:5c:6a:8c:66:4b:87:5b:
                    72:2d:11:e5:3d:9f:21:f0:da:51:f1:25:59:46:40:
                    55:01:03:da:78:3b:13:09:bc:fd:5b:51:52:15:24:
                    9c:2c:a6:71:29:e9:38:39:84:f8:3b:1b:71:6f:f7:
                    8a:76:72:00:ba:16:17:8a:94:a6:3d:0c:5d:ca:d2:
                    81:95:1d:4b:22:30:58:9f:d1:ec:9a:ce:91:7a:c0:
                    5d:ad:91:3c:33:ed:4c:86:bb:d3:d7:ad:fe:c9:96:
                    2e:a1:37:e2:3f:a0:e1:4b:3f:b3:e4:40:ce:4f:4c:
                    d9:14:a1:ca:96:05:9c:8a:17:e6:e9:bc:1a:ac:d8:
                    54:ed:c4:03:97:35:9a:15:53:d9:b5:a8:90:7e:b9:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.216.0/22
                IPv6:
                  2a0a:af80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209888

    Signature Algorithm: sha256WithRSAEncryption
         35:00:0a:46:4c:99:09:11:1d:93:12:8d:61:de:c7:68:81:dd:
         63:7d:83:5b:35:14:e2:ac:eb:16:d0:66:29:2c:72:94:19:b4:
         df:f1:c9:39:00:d9:09:2c:0f:3f:ce:93:82:26:3b:25:04:a9:
         ae:f6:13:4a:b6:78:4c:41:7b:c8:7f:e4:ef:62:dd:b2:e7:21:
         5b:eb:98:27:a0:d4:d1:1b:96:14:10:f9:ab:30:4a:71:c3:98:
         49:c5:e3:28:b1:39:ae:24:12:ca:e8:45:c1:4e:08:7d:7f:4b:
         0f:8c:78:10:8b:be:0a:14:34:9c:51:48:a5:90:92:87:da:18:
         58:e5:36:4c:9f:83:d9:c6:9c:a2:21:78:61:44:ba:c9:bb:7a:
         9a:4c:4a:07:18:f2:14:0b:5a:3a:23:3b:13:a5:3b:20:3b:3e:
         db:90:35:30:b5:9b:be:34:0e:c8:9b:3b:a9:60:d1:84:e4:46:
         a3:cf:e1:f3:7c:6b:12:68:26:c5:0f:cf:37:07:cf:5a:cf:10:
         9c:45:11:47:9d:63:ac:9b:d3:ab:17:d8:0f:c2:b6:7b:8e:1c:
         d0:b2:03:fe:68:e9:a9:bb:97:c4:bf:99:b7:80:d4:be:64:55:
         ee:56:c7:74:c2:8b:7e:43:19:ba:63:71:ba:1d:5f:1e:13:7d:
         c1:43:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----