Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
File:                     XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer (raw, json)
Hash identifier:          zKcVk/DuLiemzN0njeAExh2XYVNUHCjDC7cSF0XVmpo=
Subject key identifier:   5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B251DDC96D63EC32997995D9C10DC8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200931
                          IP: 185.91.4.0/22
                          IP: 2a03:8860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:51:dd:c9:6d:63:ec:32:99:79:95:d9:c1:0d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:7a:a9:a6:55:e8:59:c9:24:b3:60:b3:66:
                    86:94:a2:65:32:da:98:e8:76:97:b6:d8:d9:f4:2d:
                    84:17:31:b1:34:9d:37:61:f9:3c:84:f6:65:f0:93:
                    8d:95:36:e4:7a:41:d5:cc:48:2f:73:e2:90:75:50:
                    d6:91:5f:97:2c:a0:a0:c6:90:73:78:35:5d:de:98:
                    56:ee:bc:db:6d:2f:22:30:85:6b:7b:fd:86:50:60:
                    65:d6:d3:3e:0b:d2:de:e9:a1:58:4e:89:b2:0a:df:
                    12:86:1b:7e:88:85:2c:11:9d:89:5c:5e:fd:1c:46:
                    4e:c3:fa:7f:83:65:ce:3b:f4:16:ae:2f:b9:df:71:
                    1f:3c:90:4a:2f:86:d4:c6:12:bc:bc:60:2b:e8:df:
                    03:f7:1d:3f:83:a3:87:e3:93:cf:3c:52:a3:70:e3:
                    75:e0:49:c0:cf:78:78:bd:cc:e8:f3:d2:45:12:43:
                    d5:01:26:8c:3e:b4:4f:4b:ad:36:fb:88:ce:e6:a5:
                    98:89:ec:07:34:10:6f:fd:52:55:2c:d6:c8:de:d2:
                    0d:05:6f:f4:5c:e8:97:93:b3:83:67:f3:62:32:ec:
                    7e:d8:04:da:bd:17:f3:b2:36:40:15:68:bf:8a:1d:
                    03:72:7a:8e:b1:e8:71:b9:42:cf:30:f0:74:6d:9d:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.4.0/22
                IPv6:
                  2a03:8860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200931

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:35:45:d2:b9:d2:dc:ae:97:e3:e2:e4:c6:b5:86:7a:5e:
         0f:5a:6b:f4:34:a2:0a:ef:84:87:1a:78:b6:9f:49:b6:aa:2f:
         40:b2:a7:62:3a:e6:03:dc:b4:69:48:c8:2b:a6:8b:10:86:14:
         5e:fc:95:ff:5a:fe:37:00:1e:0d:38:47:d1:fc:69:33:10:c4:
         e8:d5:71:14:b4:95:f5:47:80:e9:c7:7b:29:14:11:db:52:f0:
         d9:5c:04:1a:22:ca:32:ee:14:9d:44:ed:46:ee:60:0e:d7:4c:
         b4:8b:7e:3f:48:64:d2:53:2d:a9:5f:8b:c2:84:e9:0e:cd:d9:
         75:6e:06:ff:b7:ec:5c:be:a3:42:00:7b:dc:b1:a2:49:00:07:
         34:6d:73:60:00:46:85:e0:00:1e:e4:22:a3:9d:1a:0b:5b:bb:
         c3:62:1a:1a:a6:46:d8:c5:d0:61:23:19:38:55:67:fc:4f:52:
         4e:46:85:c1:7b:df:39:77:7c:97:0a:24:4d:c2:b1:d9:93:00:
         a8:67:a8:f9:5e:87:50:91:38:26:00:0b:d1:36:13:be:6f:df:
         3f:8b:b0:e5:2a:f7:e6:a8:2c:d4:c4:39:61:0a:01:14:fa:82:
         b5:4c:f5:33:59:ab:5a:57:12:03:e8:0e:be:f3:ff:7a:27:ec:
         b0:48:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----