Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
File:                     IMjVw3OmvzurIpOUNguG0Alq7L0.cer (raw, json)
Hash identifier:          P7rO0l6ot600SSMTYt72jg7AX1QKom71IUU9B5vQzsk=
Subject key identifier:   20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FBB244177C75B602DE50C7FA33AE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211742
                          IP: 2001:67c:293c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:bb:24:41:77:c7:5b:60:2d:e5:0c:7f:a3:3a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:59:0d:bd:17:fa:08:82:3c:f3:73:e0:14:
                    0f:c8:99:b6:39:b8:6a:65:26:d3:2b:ca:db:df:92:
                    13:75:86:f2:a9:67:55:fa:b5:8f:ca:6d:57:b2:54:
                    e7:0e:95:e1:f2:f3:51:30:78:6c:4b:20:3c:08:98:
                    af:66:23:0a:d8:3a:11:bc:7f:36:30:fa:ba:1f:b5:
                    bf:0d:ac:fb:77:e8:5c:39:04:1e:39:67:59:78:61:
                    12:bb:29:79:b4:54:b3:24:76:48:de:4d:1b:8c:39:
                    9b:17:75:97:ab:00:36:4d:b1:d9:fa:fa:25:de:bc:
                    99:46:87:1c:38:89:97:14:91:84:a4:46:37:2b:b1:
                    3c:4f:b3:79:58:cb:07:fb:ff:4e:03:97:02:0a:ac:
                    14:52:54:d5:41:9c:65:17:40:1e:b9:8f:04:81:60:
                    41:88:70:24:df:24:43:e0:65:de:17:d1:df:eb:7e:
                    54:c1:01:b5:82:5a:0b:71:be:d2:40:eb:f9:ef:b9:
                    ca:01:5d:50:16:74:a6:68:93:66:7b:07:de:28:05:
                    9c:0d:0e:f1:0d:1d:90:21:21:35:75:df:8c:9e:fb:
                    6e:64:cf:0c:12:3a:b1:37:13:42:ae:44:b7:1f:4f:
                    00:3d:11:87:c2:69:88:1a:74:a1:a0:85:c2:bf:d4:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:293c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211742

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:56:0f:e6:66:7a:06:2e:4c:31:cf:1c:96:dd:4b:7b:26:
         d6:de:17:b4:14:15:34:e8:a5:fc:09:fd:19:ea:c4:07:46:1c:
         b5:db:97:03:b4:64:74:a9:7e:d6:21:9c:97:b0:44:be:8d:4e:
         ca:1b:79:fd:a1:ed:55:d7:8e:f0:06:e1:4c:1b:94:5b:3f:3f:
         36:c3:ff:9e:af:1d:f9:63:75:9f:a7:7c:02:58:33:d0:49:d6:
         0a:0c:59:86:ef:de:2f:ea:f0:65:d0:98:38:27:51:f4:f2:9e:
         c5:4c:81:ac:b0:f0:02:8d:b5:94:09:54:d2:92:96:68:99:c0:
         45:84:84:8e:f6:0a:47:52:49:b5:93:57:a8:f9:45:a4:61:b1:
         99:c7:ec:1b:2b:e7:24:85:bd:5f:be:31:b6:9d:a3:72:cc:f6:
         cf:df:05:c9:b5:44:8e:08:b2:0d:fa:b5:7f:79:ec:d4:f7:a6:
         de:ef:62:d5:61:74:c4:58:d5:a0:31:4c:b6:dc:31:21:17:5d:
         7b:f7:39:d9:ca:61:45:a2:8a:19:45:3f:0d:d1:64:fe:13:91:
         52:f2:60:ce:15:c5:15:84:9a:fe:c5:1d:0d:b9:a4:3d:a5:69:
         8d:2b:14:61:65:2a:b6:25:16:62:9c:2b:21:64:26:a2:28:40:
         cc:bf:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----