Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
File:                     J4dqqRe20B2U_yVmKwj7IT8P570.cer (raw, json)
Hash identifier:          lplIQlvGfYnZR3fgHawj1i7Udy5io+oqznHb6xhge7E=
Subject key identifier:   27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D82A3A6FC822D4B85F037C808E611663
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Mar 2025 15:13:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16094
                          AS: 201578
                          IP: 185.26.204.0/23
                          IP: 185.230.188.0/22
                          IP: 217.22.174.0/23
                          IP: 2a00:af00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d8:2a:3a:6f:c8:22:d4:b8:5f:03:7c:80:8e:61:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 15:13:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:88:62:32:43:f6:ef:11:bd:3c:01:e6:c7:
                    f6:21:c1:56:3b:71:a3:c0:fd:13:a4:b1:74:81:ea:
                    0c:69:b4:66:76:5a:39:81:04:67:69:46:0c:97:d7:
                    46:d9:70:a5:a0:11:bd:e2:ef:ba:5c:0e:6c:c6:a4:
                    a6:62:61:0d:cc:84:e0:49:29:b3:46:1c:e3:3d:db:
                    d0:b9:a6:92:51:b4:b5:2b:7a:9c:5c:80:65:a4:b3:
                    0f:3c:a8:47:9b:be:dc:f6:f6:e5:49:02:7f:4e:76:
                    46:17:bc:c5:3b:a6:86:22:90:af:23:7e:7a:58:87:
                    6d:2e:a0:ed:0b:80:36:0f:e8:49:d7:9b:c5:28:1c:
                    d3:ba:c0:d4:1b:61:41:18:2f:d8:97:bd:b0:22:65:
                    58:72:93:de:a3:b3:28:ba:f0:0a:e9:0b:bc:18:47:
                    a5:49:40:73:86:72:a2:80:d7:e3:98:2d:fa:41:c7:
                    27:2b:52:9c:05:db:5f:3c:a2:ea:08:0b:57:aa:aa:
                    a4:9d:87:98:7f:3b:5b:48:b0:fe:25:bb:9a:3b:08:
                    b8:02:9e:b5:9a:55:88:78:ac:55:81:6f:0a:67:af:
                    a7:4a:6b:92:fb:dd:5b:2e:17:19:07:e1:46:0b:af:
                    ce:e5:5b:92:5a:f8:af:b9:13:2c:ce:e2:94:46:43:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.204.0/23
                  185.230.188.0/22
                  217.22.174.0/23
                IPv6:
                  2a00:af00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16094
                  201578

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:2d:eb:7e:d9:86:54:49:ac:6c:d7:dd:2c:07:c6:17:22:
         b1:60:5b:91:d9:f2:95:04:ed:4d:0c:db:e3:d8:1f:ed:64:40:
         7d:d9:53:ba:b5:88:4a:32:d6:d4:d6:76:f4:21:b0:3b:0a:0c:
         89:ef:d1:ce:2b:71:b7:6a:3b:b2:4f:09:ea:03:d1:75:20:b8:
         81:9c:0d:bf:81:8e:6b:9b:c6:37:1f:6f:ba:46:fb:84:e0:1c:
         76:96:7d:ea:a1:a7:d1:5d:2e:bc:a4:77:44:62:2a:8d:f0:46:
         55:42:ae:17:0f:18:e3:58:99:a4:9c:2d:42:1d:2e:6a:3f:31:
         0a:6e:88:29:8a:4c:e9:ac:01:48:f9:e8:1f:2e:02:be:19:1f:
         25:a7:d8:61:ce:d4:ff:63:3b:26:98:38:ff:7a:1f:46:82:ae:
         c9:87:06:93:7d:80:57:78:35:08:9a:e2:40:e9:d9:99:7b:4c:
         82:e8:de:8f:aa:d7:cc:1c:19:6e:a8:60:3a:36:68:ce:93:0a:
         e8:7b:3d:37:57:02:fa:51:fb:4a:f6:b2:98:6d:bf:7c:b4:97:
         06:42:ac:a7:a3:ae:8d:87:c8:bf:c0:46:c6:37:d9:ec:45:66:
         6f:5b:dc:f3:05:f2:33:e3:f4:22:ca:c2:59:2d:91:e8:24:92:
         ab:88:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----