Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.cer (raw, json)
Hash identifier:          UMa9Q+ZeC6tgRUgXkZrcloEcIjJMNZO9kEWXpcM2iVE=
Subject key identifier:   32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942748649C495F86E79BDE33550F6265CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56644
                          IP: 91.226.24.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:64:9c:49:5f:86:e7:9b:de:33:55:0f:62:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:e3:c6:56:76:fe:11:f2:75:e4:9c:a3:71:
                    2b:df:50:bc:c8:7e:21:7c:fd:ef:5b:6b:4c:1a:3c:
                    fc:f3:6d:e6:c9:1a:57:72:68:4f:88:af:40:70:d9:
                    e5:81:8e:76:c2:39:95:1b:ee:cb:09:b6:c2:58:6f:
                    f9:93:82:5d:cc:c2:14:63:5b:49:77:ae:78:fd:cb:
                    87:9d:6c:cb:61:2f:f8:98:42:36:15:5a:62:f6:b6:
                    4e:ee:2a:f6:b1:34:00:72:34:58:df:4f:7d:2e:6e:
                    82:61:c9:29:db:d5:d7:fa:ce:66:26:96:66:a1:38:
                    94:0f:d9:2c:b4:c5:ab:48:60:c2:0a:6e:2a:33:cb:
                    07:7e:48:a9:22:8b:52:32:4e:11:9e:91:7c:10:eb:
                    07:c1:a1:9f:2c:b2:dc:80:71:fd:90:ee:0a:28:a3:
                    a1:97:95:28:c2:ec:e5:3b:9b:39:03:e3:e3:72:42:
                    1b:e5:5c:7a:2f:fa:32:33:f6:70:e1:15:39:82:bf:
                    ea:94:0b:61:a1:8c:9f:80:96:86:71:4c:66:41:62:
                    ac:07:45:2e:13:79:cb:ce:c1:5f:99:65:37:19:02:
                    43:ae:c3:57:14:12:1d:e2:c1:b1:d4:f5:34:21:1d:
                    40:d2:0e:02:25:de:22:fb:95:e4:8e:29:c5:45:a0:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.24.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56644

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:00:4c:29:14:c8:b6:37:3f:2a:5a:36:ce:f7:fa:82:de:
         bb:10:ae:46:39:16:2a:fc:58:cd:5d:88:34:eb:c9:b1:bc:30:
         14:b0:48:94:07:d0:73:69:c3:a4:e0:5e:ec:5b:e6:48:35:a6:
         5e:a8:58:2c:12:4d:45:08:2a:62:90:1d:7d:77:02:55:28:70:
         4f:2e:3f:c5:4c:27:92:0c:6f:6d:1a:6c:d7:5b:eb:0f:a0:b5:
         8b:97:c6:27:41:fc:0b:9b:f9:87:c7:4d:55:76:5f:92:5e:42:
         e5:0c:29:29:4f:5b:5a:44:eb:54:82:80:36:4b:36:7d:b8:88:
         6e:e0:82:0b:c5:6d:39:22:07:f5:d6:c4:6e:89:67:61:0d:b8:
         d5:95:d5:93:99:fe:a1:7c:87:2f:a6:04:f6:d7:ac:6c:08:1b:
         98:5e:07:68:df:e8:c6:9f:71:63:35:5c:7a:d1:c7:51:c9:8c:
         44:2e:79:70:da:d7:2e:6d:e3:c6:8f:8f:d5:6e:76:1c:48:a0:
         29:5e:cc:ad:37:9a:69:13:bb:40:27:17:4e:f1:7a:80:01:9d:
         dc:1d:02:3b:f9:bc:15:9e:aa:40:d4:6b:06:13:95:97:77:c9:
         33:c2:73:71:21:f8:20:4a:e0:d1:24:b1:7e:14:15:c8:08:a9:
         cd:60:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----