Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
File:                     STKJJW4ziHd9leTVMVZ842cqFJo.cer (raw, json)
Hash identifier:          e9KH73WKDOKIyzT1ck2wDU+ZCvbr8u5pfu7Gmu1Hsjg=
Subject key identifier:   49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1CC23405A8CD369A543252676B0B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.85.164.0/22
                          IP: 194.145.180.0/22
                          IP: 2a03:7460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:cc:23:40:5a:8c:d3:69:a5:43:25:26:76:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=493289256e3388777d95e4d531567ce3672a149a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:61:cc:c3:2c:61:3e:bd:ec:f3:cf:a9:f1:
                    30:5d:80:90:e0:b1:e5:40:97:97:ef:75:22:8c:91:
                    06:1a:0f:78:a7:2c:59:84:9f:33:4a:5e:7f:79:4d:
                    74:a6:44:e4:66:44:13:77:58:60:25:4f:08:e4:fc:
                    2c:16:fa:e4:48:a0:17:15:60:31:b0:04:22:b3:19:
                    75:d8:86:4e:b0:83:2e:b0:f0:a5:72:53:21:8e:83:
                    65:86:5a:e6:5e:a8:fd:5f:2e:5b:4b:11:3e:5e:c3:
                    61:43:fd:3e:2b:2d:7a:c9:51:47:5a:be:a3:6b:52:
                    98:af:8c:0b:7f:cf:b4:f8:a5:d6:1c:e4:3d:43:a8:
                    5a:f6:c6:97:43:5e:47:90:d3:13:11:c8:ee:24:5c:
                    56:60:84:3f:50:54:53:60:16:ab:da:c1:b0:e6:e7:
                    a5:ab:36:87:fe:73:1d:ed:56:b4:b2:dd:e3:f6:5a:
                    52:a2:56:d2:f8:66:4a:2a:97:e6:d2:a9:ab:a7:58:
                    e0:cd:d8:70:97:dd:f4:b1:23:b1:9a:55:eb:ac:85:
                    6a:37:59:fa:e5:a5:50:3b:38:25:a8:d4:b1:67:19:
                    02:59:22:ed:b0:48:19:d9:7b:ad:31:80:5a:02:3d:
                    67:35:bb:6d:96:bb:4d:be:4c:34:00:7e:24:0e:98:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.164.0/22
                  194.145.180.0/22
                IPv6:
                  2a03:7460::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:99:ab:89:8e:75:49:c0:2d:8b:a9:42:c4:3c:ac:ba:27:
         0c:89:3c:d7:31:6b:a8:6b:69:7b:c6:2f:e8:f1:23:09:53:28:
         b1:ae:8a:cb:c1:a0:27:9b:13:88:d1:8b:07:78:55:fa:7a:31:
         60:f5:1d:43:08:20:af:16:02:0d:60:0f:67:27:46:49:4c:96:
         f1:6e:ed:38:0a:d6:24:43:2e:a2:1a:51:99:d5:0f:b7:b4:ad:
         04:f3:01:5e:ed:2c:65:ec:b2:9d:d5:8a:14:7a:7f:1e:2c:f3:
         22:01:70:89:14:e8:ad:36:f7:85:f4:5e:ad:f3:a8:9f:5f:e9:
         80:54:17:aa:21:c0:e7:bf:d7:eb:24:b8:56:36:08:75:82:ca:
         5a:bb:43:1e:b8:f0:aa:41:73:4f:04:c6:00:d1:3e:64:d0:f1:
         d9:d0:4c:b9:fc:2e:da:d4:e4:9b:96:5a:63:d3:a3:6c:82:2a:
         24:54:c3:c9:9d:22:8d:3f:bd:52:c9:3a:b9:83:29:54:65:f6:
         12:c8:77:4f:cb:d0:fb:df:73:68:a9:e3:e5:e1:d2:6d:09:21:
         04:11:ed:5f:85:0e:31:da:e8:e1:46:77:89:c8:c6:09:ea:68:
         bc:fa:90:0a:2f:cf:39:ec:d1:82:bd:98:73:38:87:cd:33:f6:
         bb:f3:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----