Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
File:                     aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer (raw, json)
Hash identifier:          Th+wFyXCVhz1otU1k+7mjcGgoKVtG/xIL1nFmWABAyQ=
Subject key identifier:   69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D73F26A8F4F63668F83A4DB0CD7B48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203908
                          IP: 185.150.240.0/22
                          IP: 2a03:ad60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:3f:26:a8:f4:f6:36:68:f8:3a:4d:b0:cd:7b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:a9:b1:e2:20:a0:8a:f0:8d:98:a7:c6:c2:
                    7e:3c:b2:dc:69:4c:71:ff:76:3a:0d:75:28:e9:2e:
                    79:1e:a1:88:45:9a:8f:c6:4c:d4:b1:01:ca:8b:17:
                    04:79:77:c8:95:59:62:08:ee:9c:55:6d:2c:c1:70:
                    f2:37:76:fb:06:ed:fd:08:0d:6f:d2:4f:b9:bc:94:
                    95:0f:c5:e2:66:1b:9a:e4:6c:4c:eb:01:0f:15:aa:
                    11:d4:97:4f:39:01:e9:86:d5:6b:13:a1:34:a3:e5:
                    70:87:20:26:7d:4d:fc:85:d4:3d:a5:bb:fb:58:d4:
                    37:9b:ed:e0:9f:3f:59:81:bc:1a:32:f4:ba:2a:5e:
                    90:42:6e:5d:1c:45:72:c2:1e:5b:87:cd:38:2a:63:
                    06:d0:31:d6:bd:7f:eb:c3:49:f2:d5:3d:63:7f:d3:
                    bf:c7:6a:e2:cb:ae:e3:e6:70:cd:74:11:d9:10:55:
                    1f:e0:47:25:cc:74:79:07:54:31:f4:45:bd:9b:ba:
                    70:60:ce:cb:f2:f9:bb:a6:4c:22:1c:b0:15:a1:04:
                    cb:4c:f7:1d:fc:10:7f:9c:e6:ae:1b:e5:92:5f:f4:
                    bf:27:ba:e2:1e:ed:13:bd:57:c2:2b:5f:9f:08:da:
                    54:15:68:81:a4:94:b7:36:03:2c:8f:e7:31:0e:21:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.240.0/22
                IPv6:
                  2a03:ad60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203908

    Signature Algorithm: sha256WithRSAEncryption
         57:77:dd:04:e1:a5:bb:15:2a:89:6e:c4:04:1c:28:cb:50:81:
         1e:51:78:05:cd:c7:86:d5:fe:60:7a:b5:bf:6b:24:8c:74:43:
         12:8b:92:45:2a:d2:7e:cc:20:10:0c:cf:47:bb:5f:e7:28:ed:
         5e:5c:9d:ad:f9:b2:3e:0f:26:5a:dc:a0:39:f6:60:aa:c3:8e:
         92:55:d9:c1:6b:3d:23:8b:78:70:97:af:1b:84:23:3d:66:ca:
         b0:7b:ec:81:32:fb:36:06:65:dd:f6:a7:0a:78:87:9b:77:cf:
         bd:5b:6c:7e:6c:40:28:92:f5:05:cc:5a:af:d0:51:6f:a8:fa:
         2d:1c:71:25:a3:95:c7:90:0b:15:ac:f0:4e:15:9b:e7:f0:97:
         62:76:7c:f2:1e:e3:b3:27:d6:37:95:f9:c5:03:f0:c0:b5:3d:
         01:74:30:36:50:c7:82:bb:99:45:16:2b:16:36:18:7a:01:a2:
         dd:02:61:29:7f:7a:b2:33:fd:a7:ee:e6:c0:7b:ed:6e:f8:a2:
         14:22:e4:bf:1b:41:9b:74:fd:fc:00:74:8f:a9:89:fe:36:dc:
         4e:3f:16:ef:4a:7e:27:d0:7c:9b:a8:3e:2d:fe:71:c9:44:f5:
         61:2b:49:f8:55:c8:b3:4c:e5:3e:1d:f5:ef:57:7e:f8:16:29:
         3c:66:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----