Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
File:                     IuKOVQMUE4-dg6KLLWZum4dEtRA.cer (raw, json)
Hash identifier:          35+0BqyqSpUDbgIA7hQ7Y6xYVeLXg9rKLNx95O+FUXA=
Subject key identifier:   22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9A82BC7CBD8174E4F8002348D8CCD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60884
                          IP: 185.24.24.0/22
                          IP: 2a04:2580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:a8:2b:c7:cb:d8:17:4e:4f:80:02:34:8d:8c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=22e28e550314138f9d83a28b2d666e9b8744b510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:67:2e:6c:6d:40:2a:e3:3c:7a:48:ef:d0:
                    f2:82:3c:89:74:0b:f9:01:e6:fa:98:e7:04:09:76:
                    c3:0e:a0:44:41:01:a9:de:33:00:a4:4f:51:ff:a2:
                    c9:8c:f1:be:8b:42:eb:e4:5a:9c:5b:82:1e:86:32:
                    8f:53:97:a5:80:55:18:dc:e8:6c:ff:38:53:db:85:
                    ff:5c:98:a3:72:41:c3:d7:55:6f:94:4e:aa:15:7c:
                    07:16:f0:4a:99:18:2a:75:31:61:d7:25:04:03:5d:
                    07:35:f3:fe:94:82:be:41:3e:83:4a:52:22:e7:d3:
                    9d:41:29:5b:12:e4:60:85:48:a9:5b:83:4d:81:51:
                    09:e6:9c:e8:62:46:29:8d:e7:89:bd:42:80:4f:df:
                    19:71:4e:56:2d:8a:31:d5:fb:10:1f:6c:f7:f2:4a:
                    1a:74:af:e6:65:6d:9b:0f:db:8e:d6:32:19:21:69:
                    75:dc:e3:7d:90:19:a8:4e:7f:c9:79:eb:4c:b9:03:
                    4f:4e:27:1d:b2:fc:be:96:18:4f:62:bd:1d:bb:cc:
                    84:f7:0f:9c:c0:e0:04:8f:dd:7c:12:98:2e:e2:8f:
                    7d:8e:fc:70:14:a3:ec:12:e3:c7:bc:c0:c8:59:60:
                    e5:ef:60:45:98:8b:25:ba:25:02:bf:8a:76:9e:e8:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.24.0/22
                IPv6:
                  2a04:2580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60884

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:71:a4:2a:4c:41:1e:83:91:d0:e4:26:bb:6a:78:2d:fe:
         62:0a:6d:ba:13:e0:55:aa:5c:c1:45:c0:9b:c6:79:da:a2:d7:
         9b:19:c4:71:a2:f0:f5:a1:eb:eb:02:1d:eb:f7:65:7f:7d:b6:
         97:db:41:c6:2d:9a:50:bd:6e:b8:34:1d:b2:96:f5:9c:bb:9c:
         9b:75:32:4a:cb:7a:8d:90:ed:e9:9a:b0:cb:84:7b:db:b3:97:
         69:48:d8:d8:22:88:04:d1:0c:5f:ff:a8:5c:63:e4:14:2e:8e:
         b0:bb:83:00:ef:b3:40:41:d4:1d:cb:2c:f3:51:35:70:26:0f:
         55:02:39:34:fa:59:3d:60:96:13:5b:b5:00:d7:12:e1:2f:52:
         dd:5f:e1:88:06:c6:3a:e1:60:34:f1:d2:4b:fa:bd:20:b9:92:
         3b:2d:9c:ea:8a:5e:0c:88:06:3e:c6:7f:a1:4b:c1:a5:d5:67:
         8a:f6:19:36:b1:74:d0:63:19:ba:99:4b:8a:a4:02:ca:ed:c3:
         6b:5d:e8:f7:52:5f:96:d5:c7:77:d3:06:da:1a:cf:94:53:ae:
         a6:17:d3:5b:e3:8c:35:f2:f2:af:90:0e:aa:8e:83:e5:f9:3a:
         57:3b:7f:4c:95:03:29:3d:cc:e6:8c:d5:6e:78:93:e2:ef:8b:
         b8:cb:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----