Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.cer (raw, json)
Hash identifier:          mR/LMnbYVIQPefjzJahii6/aBJjLezF/HvL17EIG5RM=
Subject key identifier:   20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FDF46D48D26C4362584EFFAD30838
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47895
                          IP: 78.142.232.0/22
                          IP: 91.205.128.0/22
                          IP: 185.34.20.0/22
                          IP: 185.189.100.0/22
                          IP: 185.244.20.0/22
                          IP: 2a00:cf60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:df:46:d4:8d:26:c4:36:25:84:ef:fa:d3:08:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:23:09:aa:96:01:b9:1f:60:d5:67:d4:3c:
                    80:63:00:f4:94:d3:52:4a:bf:4a:d5:70:f1:64:59:
                    39:a0:9c:40:f7:9e:e3:ad:3f:be:9f:5b:64:23:e2:
                    ad:55:bd:b9:ec:e4:dc:4f:dd:07:b7:b6:6e:42:06:
                    b7:95:75:e9:54:24:64:4d:84:e5:c5:63:20:99:ca:
                    40:6d:3b:8c:c0:15:2c:44:45:b0:1d:86:3a:f8:2f:
                    64:0f:d9:83:fb:f1:b8:f1:c5:d4:0e:3a:ed:f2:25:
                    32:75:b6:57:b0:ae:2a:12:a3:48:66:98:c8:cf:3f:
                    0b:26:dc:54:cc:d5:8f:ef:bd:ab:9f:98:d4:9f:d2:
                    8c:d5:a6:78:1e:c9:93:6d:a3:29:b8:ab:6f:b4:80:
                    16:bd:bd:5b:f1:a1:17:38:af:95:7d:91:d5:fe:1c:
                    13:20:2d:d2:a9:ee:b5:ae:81:50:b5:57:70:0c:00:
                    dc:7c:be:86:aa:c3:36:d4:1e:bf:54:f5:f7:bc:cb:
                    a1:d6:0e:97:3b:30:6a:a2:9e:f9:df:c7:74:20:c1:
                    47:f9:67:23:f9:53:64:da:28:ea:bc:1f:51:77:5a:
                    be:fd:57:14:83:e7:e0:61:03:08:8b:4d:6a:a1:fe:
                    40:aa:11:b9:23:9c:9e:bf:06:35:46:5a:6f:81:6b:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.142.232.0/22
                  91.205.128.0/22
                  185.34.20.0/22
                  185.189.100.0/22
                  185.244.20.0/22
                IPv6:
                  2a00:cf60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47895

    Signature Algorithm: sha256WithRSAEncryption
         ab:2f:60:21:1a:dd:8b:c8:71:a7:01:06:f6:c0:06:2f:2c:12:
         4f:4e:34:8d:b5:7e:3b:bb:23:f7:5e:5d:a3:99:f2:4a:83:85:
         88:c2:df:b6:f5:1b:38:84:41:de:cd:e5:67:de:5a:0f:c4:0f:
         eb:c8:16:d0:35:b0:cb:2b:79:2b:be:b3:1f:1c:8f:06:28:34:
         95:b9:30:c5:59:dd:f4:27:7a:7e:cf:3a:9c:75:6e:f4:66:ae:
         ae:c6:fa:54:3c:49:01:b3:c8:1a:ea:07:25:e2:f2:61:1c:bb:
         b7:a0:d9:d9:87:80:99:01:e2:57:41:4e:1b:45:5f:1a:62:19:
         16:c2:0a:62:db:9d:9f:4b:d0:d6:4b:59:26:db:44:a1:3d:63:
         83:1d:e3:8c:66:c7:95:72:3f:ec:c3:ef:4a:8b:57:01:e1:86:
         f4:cc:40:98:5a:9b:e8:05:81:4e:d8:c5:46:53:a0:39:6a:27:
         8d:d8:14:9a:b4:ce:b2:9a:72:98:4d:00:1d:d9:da:b8:fd:5a:
         50:7c:56:7e:47:db:e8:fc:69:fd:28:fb:a8:e9:a8:84:4b:25:
         aa:22:21:16:42:e6:a7:21:ce:ed:a8:13:e8:ca:6a:1b:6c:d4:
         81:8c:9c:e5:1c:23:8b:84:65:41:e7:7e:55:10:1f:54:c5:45:
         1a:3c:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----