Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
File:                     KrMqUfAYgPSEFWkbYAi482mcND0.cer (raw, json)
Hash identifier:          vMxyzN0u3mrHDBOcQ4inxkm0zmUZAHKu15u8sdSU5rY=
Subject key identifier:   2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C6D9250F4C32FD7B694E9337E82A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209994
                          IP: 193.176.88.0/22
                          IP: 2a0e:e900::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c6:d9:25:0f:4c:32:fd:7b:69:4e:93:37:e8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ab32a51f01880f48415691b6008b8f3699c343d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:5b:d2:66:fd:eb:91:23:d0:11:8a:c5:75:
                    94:ed:ae:fc:98:c7:d7:12:4b:1d:f3:87:37:eb:f3:
                    c7:32:57:4b:42:ae:5f:b8:d7:0d:d3:44:23:de:85:
                    d7:08:79:75:4d:08:29:3e:cb:7f:d0:55:02:76:02:
                    72:29:0a:04:2e:aa:f3:eb:05:8f:7c:aa:dd:da:77:
                    68:aa:ab:81:2b:93:81:7d:be:00:1a:1e:5e:42:e6:
                    20:07:4c:de:9d:4a:72:c5:06:69:c9:97:a4:37:eb:
                    c5:8c:a6:46:88:0a:aa:e2:1c:ac:e7:cf:19:9d:81:
                    d6:28:bd:ea:f4:43:cc:c3:ae:c9:27:a2:35:24:14:
                    aa:5d:4f:3e:47:69:57:ed:26:ad:0f:c3:4d:fa:37:
                    99:b4:e8:e6:28:85:76:06:f9:e4:c0:c7:22:50:bc:
                    79:98:a3:3b:27:61:6a:33:81:ff:8a:34:60:32:15:
                    4f:51:2f:30:7c:6d:a4:86:10:53:71:71:e5:5b:d6:
                    5b:9b:fc:dc:2f:1c:ca:99:e7:24:16:40:8d:7b:b7:
                    40:50:99:98:cd:a8:32:75:d5:b7:4b:d5:d1:16:ce:
                    36:80:63:10:26:a3:c1:cf:13:73:c1:be:16:f7:d0:
                    8e:17:07:bd:6f:12:0b:88:1b:83:f4:da:1f:f5:dc:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.88.0/22
                IPv6:
                  2a0e:e900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209994

    Signature Algorithm: sha256WithRSAEncryption
         81:71:f6:74:1a:98:67:3e:4b:ab:e9:78:ee:61:a7:1d:ab:04:
         d2:8b:82:36:9e:f4:28:cd:a2:68:c7:75:a7:5f:a3:27:65:83:
         75:ac:cb:84:5e:e0:3a:9e:67:2d:92:96:00:53:87:b9:63:1b:
         1c:8f:81:28:70:b9:53:23:c5:49:32:e9:8d:b7:b0:ff:a3:8a:
         c6:71:7a:ea:df:f9:9e:19:53:e8:9b:7f:a2:c6:ac:68:19:30:
         27:b2:1c:9b:79:4a:d9:46:30:2e:c6:b1:8b:cf:dd:55:9d:45:
         59:5a:04:55:c5:cc:39:98:ec:1d:19:b9:be:bd:e3:8b:83:5a:
         7d:1b:bf:3c:69:74:26:ee:a0:fc:ce:53:fb:ca:56:65:fa:45:
         92:29:89:e1:cd:6e:38:e1:41:df:56:20:d0:63:7f:67:16:90:
         25:5d:db:85:d4:db:4e:2d:0c:c6:77:96:23:45:96:26:4d:cc:
         50:a0:e1:67:05:37:2c:c4:cd:f1:4a:61:13:e3:e7:99:f0:cf:
         bc:f7:11:ec:76:77:7d:41:a4:07:10:97:98:e2:a4:e3:8f:9c:
         45:46:0f:1b:f9:54:22:94:6e:f4:ee:ed:b5:21:4e:82:a5:65:
         a0:24:4d:43:32:55:78:91:b1:99:e6:c8:3c:3d:d3:87:74:f2:
         05:c9:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----