Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
File:                     _8OB9T8l28Kg76v4ifyjJBmVjdA.cer (raw, json)
Hash identifier:          jh2c6X6sGToHiOqaXvrN0p3kejBLljhrfxQ/y4rUgEc=
Subject key identifier:   FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942826D1C9EFD2C7670940E9BEB9047612
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16339
                          IP: 46.28.48.0/21
                          IP: 185.80.220.0/22
                          IP: 212.78.64.0/19
                          IP: 2a02:20c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:d1:c9:ef:d2:c7:67:09:40:e9:be:b9:04:76:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:29:4c:82:a3:63:3a:11:d2:e6:37:bf:81:
                    28:f4:05:b5:9d:ce:3c:14:b2:e3:ca:82:7a:ed:db:
                    b9:b6:0c:ca:67:dc:77:e9:40:47:9b:86:6b:54:af:
                    5e:b2:6b:0c:65:66:94:82:79:8c:2b:66:5d:2e:ff:
                    b0:3c:fa:e4:e7:8a:9b:4c:58:51:34:17:36:96:10:
                    2d:1d:71:1c:bf:c4:0a:cc:41:c4:15:a8:07:a8:29:
                    b3:62:f7:44:4b:db:94:b8:0e:94:8a:56:50:8a:a6:
                    57:2a:2d:13:8d:58:c8:2f:56:01:e2:fb:99:2d:6b:
                    d0:d3:f9:a6:28:48:93:ed:28:54:10:62:ea:41:a9:
                    57:61:df:3d:09:3b:87:8d:eb:1e:a5:c8:c4:a8:f7:
                    ca:a4:25:03:5a:6c:13:c6:3c:c5:3a:1a:ee:1c:44:
                    c2:9d:a1:c6:a1:3f:23:21:57:33:91:53:8f:e0:00:
                    f9:aa:c0:c7:76:c5:99:47:ef:b9:a6:d9:7e:15:2b:
                    c6:aa:ae:80:38:5a:9c:c1:cf:d7:e3:5e:27:16:01:
                    6a:df:dc:01:6a:da:b2:b1:e4:7e:d6:6e:09:8c:15:
                    6d:6c:d3:1b:bb:86:82:9e:7f:fd:c4:87:d3:81:da:
                    b3:30:cd:db:0c:74:ad:71:ef:4a:34:8e:e6:dc:68:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.48.0/21
                  185.80.220.0/22
                  212.78.64.0/19
                IPv6:
                  2a02:20c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16339

    Signature Algorithm: sha256WithRSAEncryption
         49:80:7f:66:df:98:bf:98:35:30:c2:73:62:a2:f5:e9:f7:1d:
         82:12:0c:f1:69:c3:de:c3:3f:b8:42:97:17:f3:48:b7:b7:17:
         68:ef:87:69:e4:69:9c:63:e4:9e:e1:17:cf:f2:7e:f0:8f:fb:
         3a:ab:6b:91:ef:1c:6d:7e:fb:a3:d0:d0:f0:ed:48:c4:ed:43:
         e2:4c:ce:83:10:3d:a3:31:ee:ae:bd:05:38:d1:39:aa:c0:44:
         f0:97:ec:60:56:fc:69:b2:e8:99:0b:8d:cb:1a:c7:f9:ca:06:
         48:2e:b8:cd:84:0e:c0:46:5b:cd:fb:8c:75:42:ab:5e:ec:01:
         0f:46:c8:bf:6e:aa:01:8f:27:fc:bc:de:4a:b6:95:38:db:a4:
         2f:79:29:93:50:2b:d2:84:a1:a7:c7:a9:3b:42:d0:7d:cf:1f:
         7e:3c:50:d2:e5:be:35:d8:08:e7:5a:00:b2:b2:8a:0d:bb:d9:
         e3:bb:e9:a0:90:19:45:99:f2:fa:23:47:07:c4:15:bd:55:a5:
         f2:aa:91:bd:19:32:7e:43:06:cf:23:68:e5:36:24:7e:89:13:
         1c:7c:56:61:83:4c:aa:04:a1:3b:d9:f1:f4:7d:40:7b:e0:a4:
         62:52:ca:90:5f:a2:dd:73:71:61:18:e3:6e:74:9a:48:1a:70:
         da:4d:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----