Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer (raw, json)
Hash identifier:          fCrGFegkw/WD3VsK41wymVCgfu56ghL+zWnYcd2d/ls=
Subject key identifier:   46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444D74786D79248B5BC441A25579AE1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 3168
                          IP: 176.115.104.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:d7:47:86:d7:92:48:b5:bc:44:1a:25:57:9a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:78:0b:56:46:30:fc:a1:ac:2d:b2:6f:3c:
                    f4:61:b1:81:03:3b:f7:2b:ad:71:80:12:b0:2b:f1:
                    ef:0f:b6:6a:42:99:f4:de:12:28:3f:35:49:ba:c6:
                    c0:d9:65:91:03:40:67:e6:19:22:24:76:d0:06:a5:
                    12:82:cc:3a:0a:c0:7a:3e:c2:5f:b3:bc:d1:5d:cc:
                    72:fd:ac:1b:91:db:96:9c:67:cb:9d:fa:92:44:6a:
                    0a:d9:06:3f:36:d6:e4:ee:07:ef:2d:33:ee:d5:85:
                    be:42:c0:61:7d:ab:e7:8a:9b:f9:0b:49:4a:27:35:
                    dc:9f:ac:64:9d:c0:09:c7:94:d8:de:d2:16:1b:6a:
                    32:c9:42:15:8e:3c:c5:c6:07:1e:45:ef:25:a3:47:
                    fc:0a:e6:18:bf:8b:72:9f:2b:e6:12:f5:06:0a:aa:
                    2d:20:21:1a:e3:dd:f9:c1:00:36:cd:69:ac:f1:4e:
                    5c:f0:9f:a8:93:e9:ea:65:22:8f:8f:09:5c:73:81:
                    d2:d0:71:a1:80:a8:35:9a:ec:7d:71:53:1a:42:4e:
                    15:e5:0f:66:e9:f1:59:5d:c4:64:55:ee:41:cc:93:
                    20:7b:98:66:47:e3:8a:3b:66:70:0a:8a:56:fc:32:
                    a7:77:fc:cd:93:21:c8:55:cb:05:25:f5:ec:37:08:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.115.104.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3168

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:ef:02:b3:4f:e6:7a:ce:6c:6f:d7:de:4b:78:3d:60:0d:
         e4:e8:55:89:0b:86:80:69:6a:3d:d6:74:e9:08:84:28:ab:82:
         dc:df:f1:1a:e2:70:d1:10:8e:e1:7d:5f:cd:3a:19:74:95:56:
         64:f8:6c:41:81:40:91:c7:24:ee:29:86:90:bc:66:d0:3c:c9:
         c6:47:fb:dd:c6:21:91:8c:68:9c:d0:a0:40:c0:18:b9:29:90:
         ad:e7:7a:47:da:22:6c:a0:90:4f:5f:14:59:c5:65:85:92:99:
         12:40:a7:3a:38:64:31:de:98:57:c5:bf:4b:ee:02:6a:90:46:
         86:0f:de:08:1b:43:30:3c:14:75:e8:a6:cb:f5:40:2c:e2:cf:
         11:e1:4c:21:93:08:18:48:f3:b1:6a:4f:6e:9e:81:28:4e:a6:
         63:e9:e2:27:a4:94:0b:9c:1b:45:b3:82:d5:da:b8:8a:4c:99:
         e1:43:73:4d:41:7c:62:56:28:b1:58:ef:ff:37:be:86:a1:83:
         36:7b:c3:88:b2:c0:1c:c2:de:7e:d7:14:f4:a3:d6:8b:9f:c9:
         39:5f:df:e2:db:ff:88:fe:d1:a5:41:82:59:ea:e5:36:30:fa:
         79:0e:96:1c:16:92:b6:2f:f7:45:72:16:8a:c4:0e:21:98:5c:
         02:01:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----