Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
File:                     J5YqM_0jSHgawSOhJyKghu6Pun0.cer (raw, json)
Hash identifier:          uBGqROBo3x7M/Ht81fVCQBWS/9izXYYPuqtp6M77ddA=
Subject key identifier:   27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067F29537B8FE081FBE08A95053578E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58081
                          IP: 37.75.240.0 -- 37.75.242.255
                          IP: 2a03:49c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:f2:95:37:b8:fe:08:1f:be:08:a9:50:53:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27962a33fd2348781ac123a12722a086ee8fba7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:d4:b8:eb:b0:fb:b0:d3:a6:8b:7d:03:75:
                    02:c6:c3:a3:2f:8e:49:9c:36:20:c1:97:5a:5b:49:
                    78:a0:9e:88:f3:0e:76:fa:0b:03:99:d1:ab:82:46:
                    e6:b0:e3:64:9b:3f:74:8b:2c:6d:42:15:6e:4e:0d:
                    18:af:2f:43:6f:79:fb:75:85:fd:90:99:f9:90:f8:
                    2e:2e:b2:7a:e4:74:df:4f:10:26:fe:74:8b:51:5e:
                    d3:07:c6:41:86:c3:fd:6a:5b:a7:d0:82:84:7c:34:
                    21:ef:39:f4:31:e0:a1:85:d3:1f:aa:d4:e7:56:e6:
                    b2:48:3a:fe:bb:f8:e6:3d:20:71:53:61:30:44:71:
                    b2:99:a9:16:6d:22:bb:91:65:a3:12:df:72:65:b7:
                    f5:3a:77:79:34:f0:d2:e3:a9:41:0f:2d:c8:04:0c:
                    52:ae:2b:67:a1:cc:1d:e5:f4:a7:49:c9:bd:8a:35:
                    ac:29:a9:71:ab:3e:4c:7b:f1:d7:a3:15:67:db:fd:
                    38:41:d0:14:c5:c0:29:8d:65:2d:85:7b:f5:20:63:
                    bb:dd:ee:61:d3:b6:37:52:64:5e:e5:61:e1:bd:85:
                    94:e0:aa:05:79:84:24:5f:d1:58:d7:02:85:9e:1e:
                    97:dc:ce:8c:06:6a:c4:58:e3:c8:fd:1b:15:2c:c9:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.75.240.0-37.75.242.255
                IPv6:
                  2a03:49c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58081

    Signature Algorithm: sha256WithRSAEncryption
         86:84:11:2d:11:25:7e:f0:81:8f:81:d0:13:e4:88:91:64:86:
         a0:ab:44:09:3b:4e:91:81:39:12:60:37:9b:15:6f:aa:52:6b:
         5a:bb:4b:9d:8f:5f:bf:bf:a1:9b:90:c9:78:48:dc:40:16:87:
         a7:a1:dc:16:62:37:34:5d:8f:db:e7:c7:75:d3:c2:04:41:1b:
         f6:eb:d5:5a:d6:05:33:37:ae:2e:cd:bf:5e:d1:38:86:a3:f2:
         77:4e:e2:01:b1:31:83:08:40:aa:88:bf:d8:01:5e:b9:67:b4:
         93:cc:69:4b:14:5e:ae:ac:d3:7e:1b:14:3c:0f:98:1a:ea:5c:
         4c:6f:37:55:a0:65:74:be:e7:e4:23:59:25:bc:4c:1e:64:33:
         e1:92:ee:74:2f:23:e2:21:c9:37:c4:54:37:de:4b:53:c5:c5:
         3c:cf:41:43:28:0a:eb:6a:a2:0a:c3:2c:d7:49:f2:24:ff:4a:
         97:9b:56:f6:01:69:53:19:0a:99:e4:33:28:f0:d9:7d:07:19:
         ea:6e:3d:cd:6b:d2:b3:31:44:5d:b2:6e:2d:ac:a5:c8:a8:8f:
         28:ab:21:71:f2:fc:68:28:27:b3:80:3c:f2:7c:08:e5:de:31:
         6e:2d:c2:eb:e7:eb:1c:f3:99:cf:a8:a7:39:99:cf:e2:c7:f2:
         35:3f:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----