Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer (raw, json)
Hash identifier:          Dia7cn343UT+dTiyqeK9SgXlE1M93hKe9ay+EgyvTds=
Subject key identifier:   58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D0CC0A3F7074BA9A4FF318438AA35
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208070
                          IP: 45.159.168.0/22
                          IP: 2a01:fc00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:0c:c0:a3:f7:07:4b:a9:a4:ff:31:84:38:aa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5871720a8884167fef82a49267661fb346d7561a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:37:8d:bc:b7:d6:eb:f6:f3:69:08:13:3b:
                    cd:a8:47:33:6a:68:4b:db:33:1c:8f:6b:ef:20:b7:
                    af:0e:25:b8:47:b2:e3:dd:65:d7:dc:01:59:0f:85:
                    17:bc:bf:5e:7e:74:2b:50:3f:f6:17:05:2c:d6:e2:
                    98:39:be:76:d0:3a:95:73:cd:56:a4:c9:8c:6d:e7:
                    41:70:6c:5e:14:56:b1:c7:c3:36:6b:ab:e3:09:02:
                    0e:07:7b:7d:76:a4:4e:df:f9:0d:0e:ff:4d:b8:01:
                    74:ce:b1:52:75:ff:38:0a:d6:89:bf:c7:5d:a3:73:
                    9e:85:29:87:ce:20:0e:af:b7:2b:c6:f1:fd:6a:41:
                    54:63:2a:f4:d7:45:82:26:c2:48:0a:a9:56:1d:b5:
                    62:7f:83:28:cf:30:f0:05:c5:d2:f3:77:a3:7b:8e:
                    14:df:5c:aa:cd:7e:89:38:1b:72:46:b3:4d:9d:6e:
                    8c:f8:1a:87:5c:80:8b:db:6a:e9:00:63:87:a6:6e:
                    50:20:79:d8:52:77:16:75:7d:30:e9:85:b3:28:a2:
                    ce:93:4a:21:98:dc:15:94:51:f4:db:20:2d:76:31:
                    4c:cb:1f:7f:b5:4c:d7:54:68:b2:91:c6:7e:0e:06:
                    86:40:67:8b:77:ad:d6:51:c2:7f:ea:67:21:14:e2:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.168.0/22
                IPv6:
                  2a01:fc00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208070

    Signature Algorithm: sha256WithRSAEncryption
         86:77:da:ea:4e:17:dd:06:8a:5f:15:4b:62:88:f5:51:db:23:
         98:ba:33:c1:3b:bc:08:60:01:b5:7e:46:dd:7b:64:c8:23:c1:
         2e:fd:09:55:4c:34:e4:56:4d:5e:f5:ec:01:99:07:6e:16:90:
         70:47:d5:45:9b:32:da:70:ad:36:66:90:b6:6c:7e:83:e9:b9:
         6d:bd:7d:a2:2a:6d:1a:29:24:46:e2:f7:2b:22:a2:b9:23:cf:
         3a:06:cf:a9:52:52:4e:79:01:4e:59:9f:ec:4b:72:3f:38:d3:
         a5:41:ff:18:7a:0f:44:70:68:61:16:61:52:4e:5d:a1:de:08:
         83:85:09:4f:f2:48:01:91:31:d7:e9:7b:55:fd:2c:33:5f:47:
         55:af:88:67:5a:21:e6:3a:a4:54:48:2f:69:4c:a0:22:01:1f:
         ed:bb:98:6c:03:8d:10:59:4a:6d:5a:94:ae:6a:65:23:b7:96:
         e5:32:58:af:6a:4c:4b:cd:aa:ca:43:1d:ba:8b:bc:1d:de:eb:
         aa:3c:76:2f:b1:d1:f3:39:12:30:de:1d:4c:c8:16:09:23:24:
         4a:0f:a4:59:b8:05:c9:91:ca:30:1b:2b:a4:f2:50:64:73:4b:
         f2:1d:28:7a:8a:b8:7e:4a:c7:02:6e:df:2a:9e:12:ff:3d:4d:
         67:c2:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----