Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
File:                     LNH_SXJfYzHmO47XZEjXJd16hN4.cer (raw, json)
Hash identifier:          LjxDkdWRC5qi/DF5HTrHUlOH7VtMH/d7RvYeydEyvIg=
Subject key identifier:   2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068513F62AC530957907D453DC6EF17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57070
                          IP: 146.0.16.0/21
                          IP: 185.200.248.0/22
                          IP: 2a0a:bac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:51:3f:62:ac:53:09:57:90:7d:45:3d:c6:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d7:84:c3:64:08:d4:74:6e:db:7c:75:c1:57:
                    07:90:26:af:9a:e4:63:50:1a:aa:55:d3:f9:85:c8:
                    27:b8:08:dd:4d:30:e6:0c:8e:b8:4e:54:49:6f:a6:
                    b1:96:e2:1a:bd:99:9a:85:c7:50:84:13:20:84:e9:
                    e5:a6:be:f3:26:b6:27:63:ad:1e:e2:ec:3f:00:39:
                    6b:8c:70:87:46:0b:18:ca:0f:63:ff:e8:1f:30:4e:
                    a6:87:1a:49:06:32:cc:31:ad:9e:03:06:6d:4f:92:
                    bb:46:a9:6a:21:02:fe:76:3c:6f:8d:7e:59:c6:86:
                    4e:16:e2:84:1b:5e:e7:fa:9b:52:78:2c:56:22:e6:
                    1d:44:94:36:81:60:00:41:92:17:69:ab:ca:8f:3f:
                    f6:08:ac:98:b5:9b:be:63:c3:97:60:e7:8b:fd:f8:
                    c4:30:5c:41:f0:f8:48:e1:37:cf:7e:dc:16:3b:3e:
                    d3:31:56:fe:b7:f2:97:de:34:6c:73:25:84:3b:0e:
                    ef:c1:56:c2:ec:e1:85:44:27:6c:94:c6:2b:27:24:
                    98:aa:2f:04:c1:2e:92:ce:78:6a:5b:9a:45:70:54:
                    f8:5e:3a:35:7b:04:f7:02:87:c9:4c:4e:04:5b:66:
                    7f:6a:62:3d:c0:ba:48:0d:70:36:3f:81:df:fc:06:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.0.16.0/21
                  185.200.248.0/22
                IPv6:
                  2a0a:bac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57070

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:7b:18:24:44:57:e2:d0:ac:c6:11:ff:b9:45:05:d4:39:
         46:9a:ab:fb:15:28:90:9f:de:51:ca:a6:e1:13:a9:77:17:fc:
         39:15:ef:93:a8:d3:2d:32:9a:2c:22:2f:2f:70:bd:ec:12:f3:
         5f:61:2c:07:6e:e9:34:f9:c3:44:7a:1f:3f:de:9f:f8:6f:5f:
         f0:1b:77:2e:8d:eb:2f:43:7f:93:63:53:f1:7b:62:79:b2:ae:
         a9:67:68:7a:8c:0f:19:1c:37:44:5e:19:c9:94:d9:8f:2e:13:
         4d:c1:da:a5:75:86:32:7f:e5:d0:7c:12:1d:fb:c9:9f:0b:1b:
         88:d9:e1:02:74:b9:4e:8e:f9:15:37:47:f9:fe:ad:b7:59:22:
         2e:3a:56:61:7a:fa:f5:52:03:b0:a9:61:6f:fe:03:18:65:be:
         48:a9:a2:c3:c7:4b:9b:63:4c:08:6b:57:d9:f2:6d:62:6f:e0:
         5d:d1:ad:9c:69:7f:4f:8d:69:f7:e5:fb:3e:98:fe:d9:d5:a6:
         ac:e0:d1:e0:ca:83:36:60:8f:89:2f:70:4d:26:27:df:6a:e3:
         f4:a5:de:ab:e0:29:bc:51:99:3f:dc:ea:51:f9:49:30:a0:57:
         95:cf:53:f7:85:2e:35:5c:ad:c2:6f:f8:f5:c9:ab:ea:01:d1:
         dd:41:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----