Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
File:                     J8Y3pwndvn9iN6-NWykTtCI3FXw.cer (raw, json)
Hash identifier:          iPmHAf0Vq/QQXs8Q0dkk/POe/aWPYD+H3PA1rsJiC1k=
Subject key identifier:   27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214422BE90829B88674078D82F89C444
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211029
                          IP: 185.253.244.0/22
                          IP: 2a12:9540::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:22:be:90:82:9b:88:67:40:78:d8:2f:89:c4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:1c:0f:8a:db:b5:fd:3a:96:40:c1:db:27:
                    f5:b2:9a:8b:5a:71:93:23:59:bd:73:08:cd:d0:38:
                    bd:1d:1a:0c:3d:78:c9:30:36:f0:82:94:cb:38:e4:
                    12:a7:65:dc:68:6e:af:ac:90:aa:1b:5f:97:e8:96:
                    69:ca:d8:76:61:7b:b8:21:f7:66:f0:3a:fe:71:b0:
                    f4:43:c5:12:71:8a:01:26:73:94:ec:e6:e2:e8:bf:
                    85:c2:8e:c4:ea:94:43:8c:db:8b:8b:d7:3c:b0:83:
                    da:a8:06:73:8b:19:8f:f6:3d:6d:d5:78:81:d7:9a:
                    67:19:9b:a7:98:09:ce:c4:51:f5:f7:11:64:42:a1:
                    37:fd:e8:b0:aa:08:a8:63:f1:45:bb:c8:64:3f:de:
                    82:c9:0d:be:ee:f5:0b:55:45:2b:60:3a:75:ea:dd:
                    d4:cf:50:48:d6:93:ce:be:06:8c:81:d3:52:c7:81:
                    a9:f1:a2:fd:0f:c3:21:82:ab:41:9f:b9:46:9d:55:
                    21:8e:5b:8f:cf:6c:35:97:8b:48:e8:a7:50:a3:c7:
                    b0:9d:9a:b8:6e:73:3a:40:d7:d6:d7:3e:e4:86:7b:
                    86:4d:a7:9e:b3:2e:92:f2:62:b2:8c:31:6d:e1:ce:
                    5e:58:c8:23:1b:a0:5e:ae:9c:bc:89:fb:de:88:a7:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.244.0/22
                IPv6:
                  2a12:9540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211029

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:2e:28:97:7e:c4:30:d5:5e:97:02:02:a7:6a:83:13:71:
         2b:f4:3a:0b:12:ef:0e:f2:d2:2c:69:b6:56:1c:ce:92:3f:d1:
         a5:a4:16:cd:fc:58:75:dd:56:dc:2e:69:75:52:29:22:9c:3d:
         20:a4:c0:3c:4d:4a:b4:0f:bb:d9:4a:c5:00:13:b6:9c:09:f7:
         9c:8b:a2:43:42:94:4a:dd:a3:46:5c:4b:d2:3a:0d:34:b2:c2:
         ee:c7:3a:d4:f2:8c:47:b1:bd:4b:df:d6:a4:88:a2:bb:39:a5:
         c4:63:d8:56:86:45:da:64:6f:cb:f3:d4:73:f4:7c:95:f4:b8:
         dc:8c:82:65:02:af:93:dd:48:9e:34:53:40:b0:2f:6c:59:9f:
         c1:b5:42:7e:0d:f6:e6:d6:ce:7b:8a:4f:87:fd:8a:21:5e:86:
         ab:1a:5f:84:c1:b9:d3:ad:76:45:b8:95:b8:55:63:5d:f9:94:
         73:2b:c9:33:60:00:4d:5d:78:c4:65:09:45:53:c4:a6:c5:8a:
         fc:ba:82:21:2b:77:61:20:90:44:64:a9:4d:a0:2f:f4:58:7d:
         bb:4f:ef:65:3f:42:6c:69:ba:aa:8d:7a:f7:15:e3:9f:ff:67:
         1c:fb:93:5b:dd:4a:cb:9a:d9:b4:2b:71:b9:11:98:13:7b:0a:
         a9:cf:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----