Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
File:                     RGMFqaHfoG26hXtD8N6eYi9JUaM.cer (raw, json)
Hash identifier:          nAzZ+vmhnMpru86vL3113tAnz0dzWCgqTsd8j0cS7nU=
Subject key identifier:   44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521F03C17763999A7E877E774465BE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208237
                          IP: 185.15.124.0/22
                          IP: 2a02:fd80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:f0:3c:17:76:39:99:a7:e8:77:e7:74:46:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:6d:85:0f:4f:03:f0:59:4e:fe:63:60:8c:
                    13:49:87:34:69:38:7a:7b:86:47:b8:39:a1:2e:71:
                    fe:1f:b3:8a:d7:10:16:f9:58:09:99:61:9c:6f:32:
                    51:eb:ff:d7:80:0b:e1:7b:86:22:55:3f:85:11:cf:
                    ab:ad:fa:f4:61:71:13:c0:cd:6c:be:58:25:22:46:
                    02:70:25:de:9e:08:e4:b5:f5:21:78:22:b0:ef:9e:
                    6d:f9:63:f7:e7:a3:f5:56:b4:42:eb:62:b3:7a:22:
                    e2:8f:6c:77:bc:ae:36:31:1a:18:7f:45:7b:60:78:
                    10:da:e8:90:d0:36:ce:09:4d:48:1e:27:b7:fe:2a:
                    30:91:0d:da:40:b0:24:e3:df:6c:76:d2:c3:0e:07:
                    98:49:48:c4:b1:81:86:e2:83:de:8b:64:9d:b6:c9:
                    fd:aa:47:3a:dc:17:5f:f4:e0:ce:c3:5c:c1:36:8f:
                    15:7a:3d:fe:fe:12:9c:5a:17:d2:69:e1:77:19:58:
                    4e:d3:69:1f:9d:24:db:2e:55:4e:71:2b:82:d1:81:
                    fe:a8:b8:ae:b7:3a:e7:45:ad:75:0e:3c:60:b5:90:
                    16:94:cd:52:7a:c2:0a:63:2e:c4:7a:5e:f3:36:50:
                    8d:12:0f:88:bf:e6:32:22:6c:b9:9c:ce:aa:44:f0:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.124.0/22
                IPv6:
                  2a02:fd80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208237

    Signature Algorithm: sha256WithRSAEncryption
         a8:91:eb:57:3a:f9:60:53:ea:55:9e:d7:3e:da:ab:5d:82:db:
         64:95:f8:f6:49:e4:06:6d:64:71:51:ae:11:15:9b:8d:08:94:
         7b:b9:39:2b:09:3a:62:b6:30:20:f3:81:73:52:78:57:27:1c:
         b6:10:b8:86:eb:f9:fc:52:7c:86:fa:c5:73:1d:87:2b:32:2e:
         35:07:2b:48:6d:1e:b7:5b:b3:a6:3d:29:c9:d1:e2:4c:13:45:
         fb:94:62:08:e4:b0:bb:b9:82:14:9e:76:8e:7e:e7:d8:c1:8c:
         07:c5:f9:b8:2f:a7:81:ae:68:02:a1:34:a4:33:85:a9:ca:78:
         05:f5:1f:e5:48:e4:5b:d8:17:24:2b:69:fe:13:d1:c2:01:3e:
         ab:9d:8f:d6:98:e0:74:6b:98:b9:4b:8b:98:25:a2:86:92:21:
         3d:83:7e:f4:76:bd:68:f6:b6:d2:88:0f:e5:33:e0:2f:78:7a:
         1e:7a:df:ce:6b:1e:81:94:3a:e0:6f:b5:9b:0c:c2:41:a1:17:
         db:32:cb:dd:44:e8:81:8c:46:2c:bd:43:02:10:8a:8d:cd:9d:
         20:44:67:b6:fe:6e:20:32:88:73:3a:67:6d:e0:66:ac:d0:10:
         9b:e0:23:e5:3f:de:1d:f7:ec:0b:a1:23:0a:4e:06:9d:b0:39:
         97:e7:84:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----