Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
File:                     _j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer (raw, json)
Hash identifier:          g0vI0V8jbJCBzNplcBXLY91FfKFzDBvROZpBX1RzRSw=
Subject key identifier:   FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B19909789B379F66203E8DC2E97972
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203102
                          IP: 185.144.64.0/22
                          IP: 2a03:a340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:99:09:78:9b:37:9f:66:20:3e:8d:c2:e9:79:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:5d:bf:81:f0:30:f4:83:57:f2:03:9e:63:
                    f3:00:86:26:f1:97:04:85:25:5b:22:4f:fb:05:cc:
                    61:7d:e1:32:0f:c5:97:d0:31:9c:41:1d:f4:b1:45:
                    e3:e3:fa:23:42:37:d6:96:02:fe:1c:e8:2a:e3:25:
                    53:f4:99:c6:03:75:8d:78:6e:04:44:79:d4:9c:d1:
                    87:e7:aa:33:86:6a:ab:1e:b8:52:e6:1b:a1:d4:ea:
                    11:50:fd:98:c0:fd:93:31:39:27:94:28:89:da:d2:
                    ff:4c:94:e8:26:e6:f1:60:d7:63:ac:93:4f:ac:6e:
                    1f:5a:9a:0d:70:16:14:3e:c2:e8:c4:ad:22:55:4d:
                    b9:48:8c:69:ea:aa:9c:f2:b6:b9:a5:6c:f7:86:14:
                    d3:33:67:72:9f:77:35:13:94:7e:0b:ee:14:9b:cf:
                    b6:40:1f:f5:f2:f6:a6:d3:0e:d4:10:14:4d:eb:a3:
                    d6:9b:79:3a:10:61:9a:89:fd:dd:67:e3:bf:2e:e5:
                    af:83:18:79:d3:f9:5a:da:1a:f6:28:9e:b8:9c:42:
                    65:fb:f4:55:6e:7e:fc:59:76:93:e0:c4:aa:14:46:
                    70:4e:e0:cd:06:89:83:33:df:73:78:fd:2b:e6:4b:
                    09:a3:45:c0:1a:c6:e1:41:9c:dc:31:a3:85:c2:f5:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.64.0/22
                IPv6:
                  2a03:a340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203102

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:2f:12:60:09:e4:68:6f:24:4b:1e:6d:15:7f:6f:76:8e:
         c0:b3:72:fe:c1:dc:2a:d7:3a:0c:d5:a3:3a:5d:68:6b:ac:f3:
         2f:71:aa:4f:8a:ad:26:bb:a2:a3:b7:df:d0:d3:b5:7a:21:ee:
         66:1c:62:8d:d6:da:72:5f:98:f2:7c:0d:3e:b6:4f:9f:e0:e5:
         94:a2:b4:1f:cf:28:d1:51:ff:a8:21:8e:08:4d:88:70:86:96:
         24:68:36:7a:87:d2:de:81:47:2c:d3:19:63:c1:8f:e7:90:d3:
         d2:6c:c0:8b:00:f6:6b:ff:40:94:54:f5:95:55:8b:52:df:22:
         9a:d7:81:93:4b:cf:b6:4b:4d:66:10:e2:96:9c:71:55:6a:d0:
         e5:31:d0:3b:39:38:d5:df:ca:fe:c8:40:10:11:50:89:41:9c:
         39:fb:30:2d:5b:01:c7:d5:d1:4d:53:fa:9f:28:2d:5a:8c:b6:
         a1:b8:b4:d0:36:0f:31:b6:fd:a4:d5:91:8e:eb:78:50:be:0e:
         c0:06:e9:5c:b0:2e:af:c7:6d:f3:ae:3f:98:9c:96:25:fb:ae:
         a8:bc:54:24:f2:85:a4:89:c3:1f:c9:01:59:07:11:3e:27:44:
         ce:f2:25:74:24:df:29:00:20:3d:02:60:14:7b:19:01:19:0a:
         e2:aa:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----