Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
File:                     a08STJHKoMyRw7m7T4rbBjJiJKE.cer (raw, json)
Hash identifier:          33tmmPu+gneDVtWDp2injrn8W52ZNC4I/nvolcaZQB4=
Subject key identifier:   6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444A1D232D86BD907D2A8D816F2544C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210612
                          IP: 91.246.61.0/24
                          IP: 2a11:c040::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:a1:d2:32:d8:6b:d9:07:d2:a8:d8:16:f2:54:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:48:8e:eb:20:24:e0:09:f5:90:d8:e4:6d:
                    67:ec:ce:6d:96:47:61:4f:15:33:6e:38:61:b3:10:
                    07:7b:d8:6f:ab:5d:25:98:e5:a3:4e:a9:68:7b:67:
                    37:18:c8:c3:a6:4e:03:c4:bb:45:d8:c0:8d:6c:05:
                    2b:3f:4f:fb:4b:b6:b6:f5:24:b1:7a:be:f3:47:c1:
                    f7:81:67:87:5f:e1:41:13:22:df:d3:e1:51:c9:8e:
                    18:04:2c:da:e3:8e:14:35:fb:3b:7c:f5:ee:3f:36:
                    94:d7:6f:24:16:06:65:34:ae:1e:99:6c:33:1d:31:
                    ed:cf:2b:c5:d7:be:03:d9:82:5d:8c:be:59:89:00:
                    bc:d3:b3:e9:66:e1:01:bb:fb:f3:3a:36:b8:74:38:
                    1b:85:98:f6:9f:e3:fc:4b:96:ac:5a:fc:3a:b3:0d:
                    be:69:c6:ba:3c:a2:23:1c:ce:69:73:32:07:bf:9d:
                    c9:5a:df:b8:27:83:d9:d5:18:a1:5c:59:28:2b:ad:
                    84:f0:78:7c:08:4d:e3:84:f6:9b:6d:c3:ec:70:77:
                    a1:fe:78:4d:75:6a:a7:c5:f6:00:00:60:81:0c:55:
                    c2:d8:a2:3b:19:8c:c6:8d:16:bb:29:a4:b3:58:8c:
                    03:5f:1c:c8:b8:3d:9b:65:70:43:78:ed:ad:b9:f5:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.61.0/24
                IPv6:
                  2a11:c040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210612

    Signature Algorithm: sha256WithRSAEncryption
         ab:e0:44:9e:4b:25:1c:fe:18:38:51:6e:df:ef:6e:89:1e:52:
         c3:44:fd:cd:39:77:86:9d:f2:38:a7:0b:ce:61:2c:fa:75:27:
         d2:86:11:a2:fd:e3:00:43:d6:7a:0d:6a:e6:a9:8e:f9:68:f2:
         c0:90:54:e1:f0:dd:ab:f2:7c:64:b0:6e:96:65:6c:d4:13:fb:
         de:c8:ad:0a:d3:25:7e:53:b2:63:09:7e:39:72:9e:90:42:3b:
         f2:ec:e2:42:7a:94:90:f6:7e:1a:47:2e:ee:a8:a7:1a:46:34:
         ce:c1:8f:28:da:29:02:21:fe:43:a1:a3:74:c8:6f:17:15:1b:
         47:85:41:29:98:0b:ca:7e:fd:8e:74:37:2e:81:f6:9e:a4:d4:
         a3:93:6f:3d:8e:2c:1c:7a:1a:8a:61:91:bc:e4:81:e3:ed:12:
         28:7c:63:ab:0a:4a:bf:29:1e:b8:e2:c5:1e:87:f6:96:57:41:
         fb:30:ef:97:a6:81:62:57:f1:72:54:b4:03:ac:ad:b7:5b:b1:
         c6:0f:2c:5c:78:61:eb:75:d8:7f:8b:62:c5:bf:34:ee:83:e9:
         a2:dd:bb:e5:a7:0c:4e:17:da:ab:f8:d0:bb:2b:d3:61:4b:cf:
         c5:03:be:27:0b:be:93:a3:32:7a:50:a7:74:25:7f:8c:35:8f:
         bb:96:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----