Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
File:                     M4QkGt5fJhrI7OhD5efbfuEI4zw.cer (raw, json)
Hash identifier:          v8LrwcIt3DLmKqcsVUOcyNslNphPsHyKrJ3wcGaeGEk=
Subject key identifier:   33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBE86018B562AD6E59F3F3D41AD894
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210491
                          IP: 146.19.58.0/24
                          IP: 2a14:5b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:e8:60:18:b5:62:ad:6e:59:f3:f3:d4:1a:d8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:88:38:8a:3a:23:01:97:fe:8c:1c:1a:00:
                    7c:83:8c:77:fa:05:e4:90:d2:c1:98:9b:ff:11:5e:
                    4f:4e:11:d6:3c:d6:54:6f:cf:db:ee:a9:4d:a0:0a:
                    28:ec:06:4c:48:e6:7e:6c:d5:44:0e:08:e7:5f:5b:
                    2e:a9:45:77:ad:1c:c1:eb:3e:29:85:0c:bd:21:ae:
                    77:be:4b:d6:f6:85:8b:ac:9a:76:bf:56:a9:6d:86:
                    00:ea:c3:14:05:75:ae:d2:1e:3f:32:e4:00:65:71:
                    6c:62:9b:18:3e:4f:94:34:66:1c:dd:1d:59:e4:99:
                    17:2f:b2:c2:e0:c8:46:37:ee:b3:d4:b1:1e:4c:5b:
                    41:94:0a:5b:5c:21:8b:15:89:5f:07:c7:da:13:7c:
                    84:18:00:c6:cd:55:0c:a8:87:b1:44:e9:e4:71:07:
                    23:ce:55:76:f0:60:dc:64:82:e9:3b:ed:ba:9c:e9:
                    63:34:d0:0e:80:fc:8c:ce:1e:3d:f6:71:c9:d3:8b:
                    6f:cc:9e:01:1c:0e:ce:f9:3a:94:b9:8c:e5:ff:69:
                    99:84:91:07:d8:30:d8:15:3d:b5:7a:cf:2a:3a:7a:
                    b4:5b:68:97:d2:95:da:1d:29:02:08:2c:8c:4e:1e:
                    27:7e:90:e0:df:b4:d8:f0:74:f5:be:a2:1e:8d:4f:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.58.0/24
                IPv6:
                  2a14:5b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210491

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:b5:90:1d:66:7b:96:a6:1a:4c:d5:78:e8:8b:ba:69:e7:
         dc:aa:38:89:e0:59:7a:f2:c2:5a:f6:fb:3a:13:be:ff:76:cb:
         0f:f9:6d:4e:f4:94:21:3c:bb:de:62:d5:77:1a:aa:0b:6d:25:
         ef:36:b0:66:ec:ed:99:41:37:64:c2:36:b6:34:d1:4a:c0:67:
         dd:a2:fa:9b:b7:d2:2b:a7:92:05:3a:cc:66:a9:32:aa:2c:94:
         a0:6a:df:67:d2:c3:8d:0b:50:5d:84:d9:43:3f:a7:ec:22:3d:
         40:79:3c:cf:32:df:da:a1:6c:c0:84:c2:5f:17:b4:02:29:67:
         02:14:9e:69:fc:55:f8:55:d4:11:89:9d:69:a3:ec:9a:a4:6c:
         90:81:95:e6:db:e0:22:c5:f0:7e:29:a3:b3:7d:69:c6:76:a7:
         38:80:5b:48:91:28:67:b8:23:05:6a:b1:bb:fb:cb:13:1f:0b:
         4a:37:e9:9a:72:b0:76:cc:15:80:d4:c8:33:23:7f:4d:7d:4b:
         3f:00:c6:3b:60:83:3d:7d:d0:f2:03:a0:9a:98:29:ee:b0:3b:
         bd:92:0b:da:15:6f:7c:99:f0:51:34:64:b7:c3:b7:d8:61:67:
         61:f7:52:e5:5a:3c:b3:79:96:41:96:54:ef:18:74:b4:35:59:
         0d:4f:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----