Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
File:                     KPVnVJmD9DrdmYw26PeL0V9Fosw.cer (raw, json)
Hash identifier:          WbTiSuJ3IxhYApEpBEJbuZ065HVXmTI9lGDH4/8GdJM=
Subject key identifier:   28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F64917CE785C1EBEBFC446945E3B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199947
                          IP: 45.140.84.0/22
                          IP: 185.41.32.0/22
                          IP: 2a01:5420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:64:91:7c:e7:85:c1:eb:eb:fc:44:69:45:e3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=28f567549983f43add998c36e8f78bd15f45a2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:0a:11:52:b6:32:d0:79:a2:69:fe:8f:03:
                    c6:a3:65:02:68:26:f1:40:56:1e:c1:f7:8e:40:f0:
                    ac:32:04:f7:40:a4:8b:da:8c:a1:10:29:e0:0c:e7:
                    22:2b:80:b4:d3:b0:c3:a3:b3:a7:85:3d:58:38:5a:
                    05:88:a0:a7:7c:eb:9a:d4:b6:79:3e:e8:6d:4d:c8:
                    e7:cb:8e:69:e5:20:2a:bb:43:c8:27:61:de:15:d0:
                    2c:72:6b:43:02:e9:fb:b7:b1:61:3e:86:b2:98:18:
                    33:ba:e2:61:c8:b7:f9:37:4d:df:1c:65:d7:4f:27:
                    4f:9c:e4:44:ab:fa:f2:15:6b:59:99:9f:6f:ac:53:
                    95:39:82:cd:6d:03:58:2f:5b:89:6c:bb:0a:86:0e:
                    e6:71:53:93:a2:66:b9:20:43:79:d6:b9:f0:fc:f0:
                    7b:32:b4:14:de:16:3d:48:66:6b:19:40:40:23:9d:
                    e5:dd:f0:37:0f:56:1b:15:f8:9e:ca:83:a3:1f:36:
                    89:92:1e:ca:5b:2a:a5:dd:8c:dc:f6:cf:c0:11:47:
                    fb:7c:17:73:1c:2e:8e:62:b2:3e:06:58:3d:af:7d:
                    00:c1:3e:21:a5:76:75:11:aa:0c:22:de:91:52:43:
                    e8:48:af:73:03:79:3d:ef:61:39:38:c6:28:16:9c:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.84.0/22
                  185.41.32.0/22
                IPv6:
                  2a01:5420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199947

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:ec:ba:06:d9:a4:d7:13:56:b4:79:d0:bf:de:4b:89:ce:
         7b:a3:43:91:76:5e:49:2a:47:dd:7e:ce:74:50:62:8a:d1:4c:
         b9:3a:fc:78:50:0b:af:e4:de:73:22:c9:b1:91:98:3c:e7:80:
         23:48:4a:8f:0c:bf:e9:86:f6:8c:99:31:68:91:b5:fc:3b:d4:
         ac:d9:b2:2c:23:41:04:3b:ba:47:6d:35:f8:5e:01:dd:d9:6d:
         6c:de:60:2c:34:ec:e0:84:22:c4:a1:1d:fe:55:67:ff:86:a4:
         81:c0:b0:66:f2:f1:78:82:81:ce:07:74:1f:86:56:63:6a:95:
         33:6c:4b:cd:92:05:49:88:ef:21:8d:46:20:ef:4c:e0:3e:dc:
         ef:c2:68:d1:eb:58:61:79:2f:37:79:cf:5c:8a:b5:f0:35:c3:
         ae:ce:75:e4:22:80:d0:c7:d0:31:b7:6a:32:cd:00:8f:8f:cf:
         f7:49:f2:8d:a0:c5:6d:d6:28:d5:aa:1c:c1:cd:3e:38:3c:1e:
         3b:8e:da:7d:22:c0:08:e0:ee:97:b1:e8:a0:bb:f3:26:57:5f:
         84:31:11:17:36:2a:97:c6:f0:92:51:9c:e5:c2:1e:e9:e6:97:
         55:70:5c:b7:41:9f:52:b7:a3:f1:b8:f5:b7:06:ef:46:11:54:
         a9:56:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----