Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
File:                     Jnzx804vAQuQLcFCRVtrtzJs8I0.cer (raw, json)
Hash identifier:          Ru/+bk6vkZe4LZHDEmWAX4ghZpBMCH4ZsdzT7O7GK04=
Subject key identifier:   26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6263A8720A225597BB5B7F69335A1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41893
                          IP: 91.143.240.0/20
                          IP: 2a02:650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:26:3a:87:20:a2:25:59:7b:b5:b7:f6:93:35:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:49:8d:42:b0:ba:22:e9:84:14:78:da:0d:
                    b6:9d:7c:b8:f6:a1:47:e1:ff:9e:45:f6:58:72:c4:
                    d1:41:fa:b8:0c:32:89:96:cf:9b:cd:0d:05:2d:f9:
                    4c:01:3a:9c:ea:83:2d:85:c2:b0:de:45:48:49:65:
                    1c:42:cb:b3:ae:2f:a0:7f:69:bd:d3:ec:09:61:5c:
                    04:2b:25:bc:31:08:17:74:d0:0b:13:a7:58:db:a7:
                    da:f8:18:2a:cf:f0:46:12:26:de:c0:6f:0a:4f:37:
                    16:b8:38:60:0a:48:8e:28:ec:e0:19:61:2a:0f:2d:
                    df:c0:de:86:f0:33:a0:10:65:fb:e1:47:c7:14:49:
                    c3:71:c0:df:13:65:3d:e9:c2:a5:4b:37:57:64:34:
                    ff:78:0b:52:8c:84:f2:22:ae:4a:65:c7:52:65:1c:
                    18:8c:5f:18:ce:c6:d3:9f:81:2a:6e:9f:0d:f6:b6:
                    49:fd:6f:f7:fc:7f:b2:97:5c:07:ae:66:96:49:9f:
                    e9:6c:6d:7c:02:ee:10:82:f2:54:e4:11:a6:2b:5a:
                    ee:a7:b5:26:44:f7:93:d2:1b:8b:e4:fd:2c:e5:7d:
                    5b:48:ba:52:b8:54:8e:a1:a6:cf:7f:08:7a:22:c5:
                    46:aa:9b:24:1c:fb:e9:f8:21:16:20:e5:9e:98:7b:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.143.240.0/20
                IPv6:
                  2a02:650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41893

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:7e:3d:8f:aa:18:f5:f3:42:d2:19:4f:ce:6a:8a:26:a3:
         a8:60:36:c5:f6:a7:e5:05:ce:96:40:ae:a5:3d:ee:08:7d:74:
         3e:34:cd:72:ee:e2:4f:82:5d:40:8a:bb:6b:64:15:8a:7b:00:
         72:21:53:f7:e9:5f:c3:28:12:89:40:6c:7a:ce:f0:99:d8:57:
         fe:50:09:4e:01:ef:69:79:ce:88:0e:2d:31:fe:e7:b7:7d:87:
         2d:5e:62:b0:e2:2e:41:36:4f:8b:e7:81:07:68:df:d7:85:62:
         32:52:1b:49:12:46:2f:dd:42:cc:f4:b3:61:8e:7b:b4:af:cd:
         59:71:06:ea:8e:63:71:35:96:a9:ba:f5:4d:8e:1c:82:bc:91:
         e1:db:6f:a0:3f:2d:58:c9:c1:9f:31:48:f4:b1:1e:d1:29:2a:
         87:cc:65:25:1e:ea:38:94:78:8f:09:c5:c1:74:b9:12:71:7a:
         07:96:8c:76:87:91:4a:74:64:59:8c:b3:c2:df:70:82:14:28:
         8f:73:2d:bf:31:cb:03:55:05:5d:9c:0f:3e:65:f0:2a:3e:39:
         51:3a:3f:49:d9:1e:28:d6:60:4b:be:e6:fe:7b:48:1d:77:e6:
         86:36:c2:6d:6f:07:ff:1a:9f:36:20:5a:88:13:07:12:d4:8d:
         bf:7f:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----