Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.cer (raw, json)
Hash identifier:          CoDLr6qRvaKGmx+syt20TyWkjwPW+ACl75qOGsFp3Xs=
Subject key identifier:   5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B39641A0BB973501F1A00FB1D7DFF1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201073
                          IP: 185.86.204.0/22
                          IP: 2a05:bb80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:96:41:a0:bb:97:35:01:f1:a0:0f:b1:d7:df:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:03:50:81:90:82:0f:cf:17:c9:2d:cc:80:
                    ed:d5:fc:c4:68:e4:a2:a2:51:15:4c:5c:59:6d:49:
                    ec:a5:94:ac:cc:96:08:19:81:0f:00:31:a9:cc:59:
                    77:c1:97:20:ef:75:c1:a8:0c:fd:2a:8a:78:a7:4a:
                    2e:8e:d1:a5:2e:59:53:96:ab:44:dd:5d:bf:39:81:
                    e5:9d:c8:2e:18:1e:99:7a:f2:73:e8:12:fc:1a:bc:
                    03:d5:5b:a8:80:2f:a1:a1:1c:fc:b1:20:26:04:b9:
                    b1:d5:b0:46:01:e9:b8:58:9d:74:b2:59:5f:94:37:
                    93:90:5c:4c:65:95:80:90:dd:d5:cd:33:16:04:e9:
                    74:48:b6:df:08:bb:c0:7d:85:be:55:00:80:64:40:
                    c4:d0:1a:a3:30:fa:32:92:06:49:e5:88:8f:b6:59:
                    11:34:c4:e6:bb:90:50:73:20:2a:52:fb:1a:d4:71:
                    4d:c8:d8:2d:ae:e8:ac:76:0f:13:11:8a:65:d6:8b:
                    22:67:c0:75:ae:2c:b2:7b:79:fa:79:f3:89:88:7e:
                    96:6d:1b:51:4f:52:4f:c0:31:39:83:71:26:4a:95:
                    91:6a:20:2c:4c:e9:76:01:56:6f:c4:ff:40:f3:dc:
                    94:1e:20:53:79:7f:82:06:c6:9c:66:03:c4:77:f6:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.204.0/22
                IPv6:
                  2a05:bb80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201073

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:24:5b:40:b4:22:e5:db:ec:19:8e:4d:be:85:05:03:c7:
         6a:81:c0:e1:af:ad:41:65:38:51:58:76:e0:97:4a:b7:fb:73:
         2e:ac:70:a0:9d:dd:23:88:d7:8f:e3:f8:94:d9:36:14:04:d5:
         58:2f:94:aa:dc:c7:90:f7:13:c6:b0:aa:5e:40:c1:eb:f1:2d:
         af:37:a0:88:81:9a:b8:29:bd:0a:10:bb:ef:e5:11:f1:d9:a7:
         78:8e:b3:72:5d:33:3d:d8:d6:8b:b9:2c:2e:f6:b9:ec:4c:a3:
         d4:31:38:51:25:1c:5d:0c:33:38:a8:64:5f:6f:5b:4e:4f:16:
         70:44:7c:d6:ae:be:db:e5:1b:d9:69:be:d1:30:13:b4:fa:45:
         54:da:37:38:23:68:86:74:3b:e4:06:5d:45:f4:a4:c3:76:d1:
         a5:3b:35:21:5d:a8:11:59:5c:e2:3d:09:9b:36:aa:d6:e3:54:
         86:1d:a8:36:86:19:a3:70:ff:d3:c0:fa:ec:e5:56:52:86:b6:
         08:2f:7c:da:43:d0:cc:60:ff:61:d7:da:b1:70:4e:00:bb:03:
         c6:08:f3:9c:9a:14:df:ed:be:fb:91:da:c6:ef:a3:c0:a1:94:
         8f:3d:f8:66:53:00:a6:a5:d4:8d:a8:d7:82:8a:97:4a:5f:96:
         7f:9f:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----