Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
File:                     KNX3dyLGFlf4HJ965JznKbWA9ng.cer (raw, json)
Hash identifier:          uATnCRqyX5l9mi7NW0ykZ3lyLf0h23ZD7IhG3nkGVKs=
Subject key identifier:   28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445968A5E9E2E5110BF3819F9A06446
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 87.104.192.0 -- 87.104.239.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:96:8a:5e:9e:2e:51:10:bf:38:19:f9:a0:64:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=28d5f77722c61657f81c9f7ae49ce729b580f678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:2b:14:b0:04:5c:04:60:b3:ff:1d:4f:7c:
                    4e:47:13:ba:71:c2:c4:49:f0:ce:48:e9:8c:eb:37:
                    b7:eb:ec:9a:26:52:6d:b3:82:14:bd:5e:31:8a:f3:
                    27:fb:cb:95:0f:3f:fd:3c:7d:48:1d:ca:eb:ea:2c:
                    13:fc:2f:7b:a1:db:dd:7a:9c:56:2e:0f:ea:a1:94:
                    e9:f5:f8:6d:78:63:b6:8f:23:ef:47:a7:d1:7f:34:
                    3e:86:79:20:18:e3:60:47:65:52:42:6c:9e:a8:78:
                    ad:fe:2a:04:52:67:d1:24:a0:97:ff:34:35:38:83:
                    e2:7c:1f:56:be:70:77:8d:e6:9a:ee:2c:85:33:b7:
                    b4:b6:5d:c2:dc:b1:34:95:c3:03:22:1c:37:21:37:
                    74:76:bc:71:01:f4:b9:c0:f3:6f:9b:a1:b1:3d:16:
                    25:bb:c0:f4:38:a4:d6:34:cc:f4:bb:6a:d3:bd:a4:
                    52:1a:71:53:69:51:9c:b6:e0:2f:b6:f9:99:ce:e0:
                    2c:cf:74:42:92:33:4d:b1:4c:f1:77:ad:d0:11:69:
                    80:19:ac:42:7f:dd:44:51:20:62:3f:51:c9:72:7a:
                    69:bb:59:a3:21:eb:3d:14:b3:10:22:34:f6:4c:0d:
                    cd:37:b2:1a:9d:26:ac:ed:eb:76:11:c2:8f:cb:d2:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.104.192.0-87.104.239.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:ca:4f:fc:08:e1:69:5a:72:60:e2:6b:bc:04:e5:86:31:
         8a:ca:c2:6e:f6:c2:aa:b0:62:0b:8b:cf:b4:61:59:13:8f:85:
         e2:6f:d5:3b:50:f1:87:36:04:69:ce:91:43:94:f9:63:68:f4:
         e4:3c:1a:fd:82:28:67:3b:58:5e:6c:44:ce:22:e0:b9:87:9e:
         3a:53:1c:1f:f8:f7:cb:1e:6c:3e:2b:09:c9:4f:67:e4:d2:54:
         5c:da:87:94:48:97:e7:53:33:76:4d:6c:56:92:4b:0a:7d:4c:
         7e:2a:30:cf:b2:ea:b1:2d:43:55:2c:12:ba:d1:39:d0:20:0d:
         5e:98:81:12:ef:6e:5c:05:56:e4:5f:84:ed:b5:01:a4:c7:79:
         bc:47:4f:58:f2:27:b1:b2:2f:45:14:25:a7:c1:94:21:b4:48:
         6a:6d:01:d1:5a:5c:d6:a2:da:b9:45:67:5b:80:7b:b7:bf:1c:
         67:2a:32:3d:17:f9:2f:03:c1:2d:6b:0f:e6:95:fc:53:d2:c2:
         4f:f3:46:54:d3:23:b3:68:25:b5:e3:c2:2e:85:8a:30:a5:7f:
         82:4a:64:d4:a1:82:bd:41:8d:11:2b:e8:23:51:59:83:36:ff:
         82:b4:4b:96:39:da:df:c4:d9:0f:03:d6:88:0c:ee:eb:37:f3:
         a1:9f:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----