Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.cer (raw, json)
Hash identifier:          lx/tSkOd7xhiuF2/9e0eY5+bRNF/0aDjgM+A7P9fRiU=
Subject key identifier:   49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521F0E3018CEAF5E204B0935B0D299C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44400
                          IP: 185.204.180.0/22
                          IP: 2a0a:fbc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:f0:e3:01:8c:ea:f5:e2:04:b0:93:5b:0d:29:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:56:ef:61:d8:2f:69:76:2f:0c:8f:c4:44:
                    14:76:e6:86:f0:04:6f:1f:a0:fe:05:a5:1d:61:c5:
                    70:53:b5:3f:ef:b6:4f:a9:98:52:c1:36:39:84:fa:
                    f7:c8:2e:c6:77:99:9d:89:34:a2:80:2d:70:c1:22:
                    3e:81:2b:77:df:b4:62:41:90:73:74:d3:6a:c9:d6:
                    59:14:87:cc:52:39:c6:84:25:87:1b:b7:8b:73:ab:
                    30:27:07:3a:81:8c:8b:87:74:0d:9e:5f:2e:e7:ee:
                    ef:58:95:4e:30:41:a1:8a:9f:fe:27:c6:80:f3:cc:
                    42:37:98:77:40:9a:90:04:51:03:20:01:a8:7f:5b:
                    2c:ce:2c:96:1e:68:e0:dc:97:c0:4a:f3:63:e9:19:
                    d2:c5:06:4e:4e:be:53:a2:b4:57:f5:8f:7d:cb:d4:
                    20:8d:ff:c2:1d:8c:e5:98:00:56:02:47:39:16:dd:
                    81:99:85:6c:a6:df:a0:47:98:c8:ce:87:23:f7:94:
                    a7:a9:12:85:07:23:71:1f:29:b9:47:6c:e2:5c:5e:
                    f5:0e:b6:50:ae:51:b3:73:02:31:67:62:32:50:7b:
                    e4:9b:e6:88:0e:86:05:86:01:e3:ba:83:fa:78:5f:
                    40:2d:96:c1:9e:1e:db:59:77:9f:29:be:02:d7:6a:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.180.0/22
                IPv6:
                  2a0a:fbc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44400

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:63:b7:98:6a:3d:29:4a:c9:e7:fb:5a:92:81:95:95:2d:
         51:bb:71:5f:d9:ed:1c:a2:80:3c:3e:66:a6:96:c2:82:81:0c:
         6a:ad:8f:00:d1:04:86:b6:18:5b:c7:4c:a2:ac:f5:22:eb:cf:
         5a:ea:39:2f:81:15:2a:2b:fd:1d:c6:0d:e7:74:75:80:58:39:
         29:7e:da:41:82:2a:51:76:f7:43:a3:90:b3:1e:c3:40:bd:3c:
         fb:c1:c4:7f:b8:66:48:0e:7a:f6:37:74:d8:a7:2d:74:fd:c0:
         de:c1:c0:6a:4a:7d:fe:db:44:c0:9d:56:cc:f6:20:17:78:69:
         3c:94:da:cd:2b:e6:24:79:29:a2:ec:85:39:8c:b8:b9:8c:65:
         91:6d:10:9a:83:48:3e:b9:2d:f6:4a:fc:6a:b9:72:ae:48:9f:
         3e:90:bb:75:83:ca:24:9d:d6:94:d0:fe:0e:4f:ee:36:a0:4d:
         a9:ff:27:65:9b:45:07:28:cc:a6:be:b7:16:bb:02:7b:44:80:
         e0:ee:6c:ef:db:83:ad:12:ed:89:9d:36:70:47:36:9e:a9:b5:
         61:aa:17:51:e5:27:fe:46:1c:da:ee:1b:ce:1c:48:fa:2b:b9:
         8d:8a:a8:e3:65:70:69:ba:26:ab:4c:e4:fa:c2:f7:4f:bd:60:
         14:87:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----