Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
File:                     JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer (raw, json)
Hash identifier:          7zZuLecHQv/7f5vERrnMd3zI1H2gHGyAaI3AO6SPMQ8=
Subject key identifier:   24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6DBC1B2F77AAD403B5DAB7DAA0CFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207108
                          IP: 185.139.7.0/24
                          IP: 2a12:ab40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:db:c1:b2:f7:7a:ad:40:3b:5d:ab:7d:aa:0c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=24954f608ac12b684ef865f39af0e94e250b9454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:32:3d:75:4b:59:fc:e0:02:06:7a:eb:f9:
                    7a:24:97:c0:50:f1:7b:cd:a5:3c:55:76:7e:84:1a:
                    30:c6:54:7e:f2:b4:3a:77:05:f3:d0:15:c2:ca:ae:
                    89:21:19:dd:84:0c:a3:da:12:87:37:0e:b1:cc:08:
                    9e:49:f3:eb:41:ec:46:e1:70:62:24:54:22:58:3e:
                    4d:c8:e2:2f:b6:3a:b9:32:80:11:d8:19:b5:75:d7:
                    8d:98:a6:5b:19:ff:11:18:b0:bb:4f:5a:34:8a:02:
                    45:50:11:f3:8d:69:7a:86:0a:bd:77:bb:55:f2:4e:
                    b5:58:a5:88:cf:76:51:71:d4:85:1b:31:4c:ac:7a:
                    59:56:d3:46:9c:ef:32:38:f5:3d:1a:41:ea:5f:6e:
                    7f:aa:c4:8e:60:3c:77:53:83:d3:da:08:5d:d2:6b:
                    71:0d:03:40:9e:57:52:c6:e5:1c:95:40:56:94:33:
                    1d:f2:ef:b5:11:1f:4f:6d:99:dd:83:20:a6:f8:80:
                    f6:f4:21:61:c0:ac:77:af:f3:2e:37:bc:c3:e0:62:
                    b2:a9:57:bd:a4:85:b1:14:c9:7c:d9:5d:14:b8:e8:
                    10:04:9a:62:b1:1e:a0:05:68:93:0d:59:a5:5e:4d:
                    03:5c:c9:66:9f:33:af:7b:ee:30:98:b1:69:f3:e1:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.7.0/24
                IPv6:
                  2a12:ab40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207108

    Signature Algorithm: sha256WithRSAEncryption
         60:89:9e:b6:da:2a:31:64:04:21:40:f0:c6:4b:09:9f:13:e3:
         bf:23:78:f1:25:2e:05:8b:a3:6f:07:d5:5a:f9:0d:ac:58:b5:
         6a:8c:69:02:78:db:e4:5d:a4:60:f7:03:81:52:ef:82:a6:e6:
         87:ef:ab:a8:42:f8:ae:6c:75:58:ce:b2:f6:fd:e0:1f:db:24:
         3c:27:da:ca:d7:51:7d:3a:88:77:e6:35:16:1a:c3:98:60:d9:
         1f:df:0f:d4:20:8c:9c:13:9e:95:01:80:6c:c4:8c:b6:2b:e9:
         ff:47:15:f9:0b:d6:e8:84:0e:d8:d9:3d:18:52:96:e7:3a:65:
         23:cc:1c:88:f2:de:e0:0b:08:be:93:5c:e4:83:21:aa:3b:c8:
         bb:1d:e2:96:01:dc:51:1a:85:e6:ab:ba:10:0c:32:08:10:04:
         37:05:d4:62:92:0e:35:20:a5:54:4b:c9:52:d9:2b:40:01:65:
         53:69:0a:47:16:d5:39:6e:50:22:44:74:5f:bd:ef:90:70:d9:
         06:1f:1a:01:24:aa:ac:c6:49:99:c6:6c:71:ce:ce:f8:f3:67:
         8c:34:cf:dd:4e:84:c4:b6:c0:aa:e4:c3:c2:b1:fd:7c:3a:88:
         20:ba:09:3d:a4:47:4c:35:c8:34:5a:7b:b6:d2:bd:e2:f8:a4:
         a0:be:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----