Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
File:                     T893EF-VB1zlhdQn6XdU6PAHqLk.cer (raw, json)
Hash identifier:          N0CTXjVmsThB5n8nv1/Y76v+jcVrB6wBWHqxk6iNqHg=
Subject key identifier:   4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8BFE75DAB4E75B9ADEB92B6A396B5D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199805
                          IP: 185.45.144.0/22
                          IP: 2a01:7e20::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8b:fe:75:da:b4:e7:5b:9a:de:b9:2b:6a:39:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:bb:29:e7:02:27:a0:d4:3b:42:be:e9:aa:
                    f6:03:4a:c9:21:93:4a:ba:73:0d:67:c7:2c:84:5d:
                    01:5d:92:fe:84:ce:46:43:4a:56:c1:8f:a0:88:02:
                    22:20:fe:cc:f4:4b:55:f0:c5:84:07:eb:d3:93:1f:
                    74:93:81:98:3c:fa:9f:43:8c:a6:cb:b1:cd:b5:c4:
                    4c:83:81:c2:36:ec:a2:04:16:bc:36:5d:e7:a1:d1:
                    47:14:1d:45:44:39:2f:96:e9:e0:08:ad:24:06:86:
                    21:19:2c:e1:53:6f:09:37:52:e0:7d:2b:de:aa:33:
                    f1:41:4b:dc:ed:09:80:6a:1b:56:ff:38:c0:7c:da:
                    e6:65:da:e8:89:95:c2:ee:0d:48:fe:4e:39:51:4a:
                    48:b9:a7:77:49:c4:52:fa:ec:dd:a2:e7:d2:97:11:
                    48:d1:c5:ef:da:60:38:a6:cf:37:07:1a:e0:ff:16:
                    53:a8:cc:5e:ac:56:8b:17:d8:4c:45:a8:b1:6c:50:
                    db:cd:5e:bb:8e:ea:42:5e:3c:5f:6a:7a:78:a3:e5:
                    2e:27:e3:10:f2:9c:26:9d:c1:b3:de:93:ec:f5:31:
                    a5:26:fb:2c:db:4a:e2:ea:bf:70:93:b3:0d:d8:4b:
                    0e:39:7a:86:c2:5a:21:eb:69:7f:6c:e3:5d:ea:43:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.144.0/22
                IPv6:
                  2a01:7e20::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199805

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:56:34:b2:dc:0c:81:28:ba:71:1e:62:ca:22:ed:61:ee:
         68:05:84:8d:99:79:7c:61:81:03:e5:b7:ca:e2:79:68:76:44:
         28:1f:8e:66:04:00:d8:ca:c4:ad:c9:df:1b:52:04:d1:6b:2b:
         6a:97:a8:b9:45:4a:06:f5:59:5c:4c:af:e9:64:16:f9:d8:6b:
         d2:0c:3b:ec:15:5a:3a:42:44:91:b4:d3:9e:7a:a5:ec:08:48:
         c9:6d:77:1e:d7:46:f3:32:eb:27:73:61:10:f7:ea:5d:47:52:
         5a:ec:bf:c2:04:fe:ab:a5:6d:c7:91:d5:e2:db:a8:6a:78:dd:
         39:cc:d8:28:66:01:50:76:11:c5:86:91:db:10:01:92:f1:1c:
         85:91:ce:ea:49:9b:76:db:f0:36:55:9c:b5:1f:b4:9c:05:93:
         ba:80:42:e7:c6:b1:54:94:ce:b3:10:ce:8a:67:c0:fc:c3:aa:
         c1:77:d5:c8:9b:b2:19:bc:3d:ae:23:61:d6:07:76:3e:52:65:
         e7:c0:cf:96:d4:ad:d6:15:d0:36:db:0f:61:87:82:29:f4:25:
         68:dd:06:b5:4b:b0:b7:26:60:ea:d7:3e:c5:a4:d2:d9:28:0f:
         68:62:e2:b1:20:c6:1a:0e:84:35:5d:51:85:f7:f2:c0:16:1f:
         8a:9a:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----