Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
File:                     IxMMmax6pAhscXVxFKQWP4AJAUI.cer (raw, json)
Hash identifier:          dfTDauwjxsnTz63juzMYFCBwl/xaD5EhyWthJoifqJs=
Subject key identifier:   23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244554A79AF31C6CD0B34DC50074AD3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56347
                          IP: 46.175.64.0 -- 46.175.87.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:54:a7:9a:f3:1c:6c:d0:b3:4d:c5:00:74:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=23130c99ac7aa4086c71757114a4163f80090142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:34:94:f5:1e:f7:a9:81:e1:86:2a:55:46:
                    e6:56:4d:42:d0:e3:c1:66:08:4f:3c:09:39:1b:33:
                    db:5b:c0:66:ea:f7:7f:62:34:6b:5e:13:3b:3f:38:
                    6a:76:f9:7a:5e:7a:73:c1:05:13:1c:fb:62:b1:ae:
                    02:45:b9:d2:f3:11:f1:99:15:38:76:58:6d:a7:6a:
                    02:9f:1e:0f:fa:30:98:a8:98:80:ac:ef:42:9d:bb:
                    66:09:9c:60:4e:8c:c1:71:3b:7f:c0:f8:b2:25:86:
                    4b:fc:4c:0e:83:da:e6:d1:35:81:4c:ca:c0:dc:a2:
                    82:86:7b:d6:28:c1:3c:d9:2d:68:4f:66:3d:77:61:
                    bb:be:29:5a:3a:79:6c:93:20:ba:6b:e5:29:ea:27:
                    51:c5:aa:23:d0:3a:06:4e:70:03:79:1b:bf:e5:42:
                    3a:cf:ce:bd:5f:0b:30:bf:b6:1d:0d:97:f1:f2:c5:
                    a5:d6:93:b2:ba:8a:3a:a7:c1:fe:99:3c:9a:b4:44:
                    28:1e:5b:ce:d0:e4:36:c1:7f:86:6e:37:33:48:80:
                    b7:9d:30:d2:2b:b4:73:19:14:4f:cd:ef:d6:a2:0b:
                    f7:a3:83:8b:b4:74:2e:92:76:36:3b:69:84:8b:37:
                    2d:a2:c8:0e:78:05:d8:db:99:3f:eb:88:34:a4:e8:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.64.0-46.175.87.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56347

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:e9:11:ed:62:c2:e4:25:9e:2e:f2:c8:94:8e:b9:e2:7f:
         57:e6:31:12:be:31:e0:8c:60:ff:dc:b2:8b:66:7a:44:eb:89:
         a7:fa:3e:f6:8c:e1:68:98:33:5c:88:be:cf:a7:97:bc:f9:6a:
         84:9a:b6:27:00:c3:ef:45:5d:58:c0:cf:31:30:8c:87:aa:f0:
         78:c0:f6:2b:ce:5b:89:e3:0a:e0:a8:1e:b4:7b:f0:fb:8d:f4:
         3e:e4:80:80:15:cb:9a:ff:db:3e:49:39:b7:af:2d:4b:af:d0:
         1f:67:5e:89:72:cf:fa:25:b8:3e:19:57:f1:f0:79:f9:55:8d:
         31:41:3f:a4:d2:95:41:77:82:47:45:a2:17:04:bf:fa:1a:ee:
         57:a6:a5:7d:55:0b:ff:50:4c:2f:b9:6e:75:b4:be:14:9d:4a:
         f0:60:6d:d9:dd:db:2e:b8:45:c5:79:1b:b0:38:ca:4f:75:1a:
         0d:01:73:59:58:d4:2a:4e:57:60:0c:b7:d9:58:d9:94:a6:e9:
         25:61:93:ba:af:83:c9:f4:f8:dc:bf:74:43:09:64:94:c7:f6:
         7d:35:e8:c7:83:73:6a:07:4f:0d:32:0a:23:c3:b6:f0:8b:da:
         cd:7f:e5:91:0f:8b:fb:c1:c8:c4:f1:4b:a0:75:4f:5a:59:7c:
         ed:a3:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----