Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
File:                     MhV9a4wSwFtBvEEkHQYVBAryQeE.cer (raw, json)
Hash identifier:          r/v4yps1086g4wGDQQ6NmI8sNQqbyhLX6yLP1ROu1f8=
Subject key identifier:   32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019528375CC17989F165040B5C1E1D06E0E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 11:14:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 2376
                          IP: 86.232.0.0/16
                          IP: 90.72.0.0/16
                          IP: 90.97.0.0/17
                          IP: 2a01:dfff::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:28:37:5c:c1:79:89:f1:65:04:0b:5c:1e:1d:06:e0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 21 11:14:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=32157d6b8c12c05b41bc41241d0615040af241e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:85:5a:87:98:75:b6:77:52:41:0c:c7:7e:
                    73:a9:97:0b:e4:2d:bf:fe:e1:75:54:0c:97:3b:4e:
                    a3:4f:fe:5e:33:62:e1:3f:27:38:ae:7f:21:64:c3:
                    5e:42:85:a7:a4:f1:b3:c2:ec:fd:8b:00:35:08:8a:
                    6b:2e:45:22:83:cf:a0:f0:81:33:7f:dd:bd:8c:98:
                    c8:1a:0e:45:b8:a1:6b:13:87:32:6d:6d:15:1d:e6:
                    d7:f2:61:be:59:3c:b8:61:aa:72:31:d8:9f:15:01:
                    17:2c:1d:c1:df:d5:8a:32:03:d2:9e:85:e1:48:f4:
                    be:96:04:50:b8:cb:8d:2d:bf:f2:f6:f6:df:84:4e:
                    21:c9:d6:1c:c5:3b:30:db:7b:5f:28:d8:30:aa:18:
                    3a:4d:d9:e8:6e:7d:35:31:0c:37:8f:b0:6a:3c:fb:
                    00:ca:cf:72:4a:88:a4:10:f4:b7:a9:32:52:40:da:
                    12:68:80:38:c6:5d:31:e9:9f:58:2a:c1:a1:ea:c2:
                    6c:ad:c6:fe:dc:33:e3:e1:37:3e:c7:c1:45:fc:ff:
                    3f:e0:11:b4:05:7e:8c:e5:7f:f4:47:76:67:27:fd:
                    18:8f:48:da:e8:7d:f6:7e:46:a4:f5:29:0c:75:ff:
                    3a:27:ad:ef:d9:18:4f:10:80:4d:56:4c:80:01:3e:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.232.0.0/16
                  90.72.0.0/16
                  90.97.0.0/17
                IPv6:
                  2a01:dfff::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2376

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:5b:88:cb:70:89:39:77:c5:ee:74:68:9d:7f:06:a3:cb:
         8a:36:18:8b:6e:b8:74:3f:2a:ad:f6:66:55:29:7a:77:0c:cc:
         17:e8:d0:b3:09:d6:b1:50:0b:c3:b3:58:a8:14:5e:8a:41:ef:
         1f:67:a9:1a:95:7c:5f:db:41:af:85:d7:1b:49:d0:ba:bb:a9:
         f9:65:37:d8:3b:60:c4:78:89:58:ec:18:a7:92:40:9e:73:d1:
         0c:fd:f5:8f:df:65:17:a4:26:b5:f7:bd:35:ed:8e:f2:7c:a6:
         32:83:ec:4c:e5:7d:d5:be:df:42:50:bd:19:0d:fb:35:7f:79:
         2f:e5:79:67:9f:9d:6e:74:7e:22:fc:a6:cf:6f:7b:95:3c:2c:
         c9:9a:b4:a3:fa:e5:2e:97:3f:b1:50:8f:dc:b7:6d:91:04:84:
         14:ec:9d:71:73:06:90:5c:29:1f:8d:03:fd:2d:91:82:60:bc:
         0e:32:14:f0:3e:30:9a:1a:f0:e2:0e:31:83:5c:2f:ca:94:b8:
         dc:99:4e:d3:08:3d:44:f1:06:2d:23:82:0c:20:35:a0:25:3c:
         39:cc:c1:68:ae:83:cb:f7:c3:f6:2c:27:c8:9b:0b:38:24:96:
         70:7c:d9:bc:13:61:71:53:8d:49:2a:39:be:5c:d8:25:4d:9b:
         6e:25:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----