Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
File:                     b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer (raw, json)
Hash identifier:          4s6rEEj4R4L6i1vWT9jLDN+qj9FI/Cfpp3bnm9KdTmg=
Subject key identifier:   6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B37F088A7818A55E9288701752EAC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197302
                          IP: 91.223.124.0/24
                          IP: 2001:67c:20a8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b3:7f:08:8a:78:18:a5:5e:92:88:70:17:52:ea:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:05:6e:4c:64:8e:9c:9a:9c:b9:47:16:ac:
                    ef:83:7a:36:da:6c:82:f0:ef:38:0a:5e:6a:f7:ce:
                    58:50:f7:1a:9d:ec:bd:37:50:f7:9e:ea:da:33:c8:
                    07:ff:bc:cb:72:82:04:58:3c:ce:3e:bc:e7:04:d0:
                    17:d8:98:a0:48:55:1c:77:72:c9:c1:ac:32:ca:f1:
                    ce:a9:81:99:be:e6:42:01:a8:43:5f:fc:9d:78:7a:
                    f3:21:47:80:a6:6f:7b:9f:e3:86:68:0a:40:02:8b:
                    b2:7c:15:74:34:0b:9c:96:42:bf:0b:5a:d2:a9:21:
                    1a:bc:5b:b5:48:d6:40:6e:12:4b:06:07:ad:7c:49:
                    80:ca:98:33:1f:61:50:86:f0:f5:5a:88:25:e7:3a:
                    72:06:47:a6:16:0f:66:f9:90:9f:60:38:b1:e3:82:
                    05:9b:a1:ec:55:f1:d6:f1:01:0e:66:b6:61:91:10:
                    44:63:94:08:e9:09:17:ab:9d:ee:dc:74:79:8f:5b:
                    62:20:e0:cf:25:ee:d7:da:45:04:3c:bb:e2:97:a1:
                    d3:5f:b1:31:e6:9f:fc:6e:46:ae:07:be:f1:60:cb:
                    24:e5:9c:a3:41:dd:f2:82:6b:0e:9c:75:0e:53:5a:
                    87:2c:f1:25:d5:8e:2f:95:15:ae:4a:2a:61:cb:77:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.124.0/24
                IPv6:
                  2001:67c:20a8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197302

    Signature Algorithm: sha256WithRSAEncryption
         78:59:13:85:ee:42:cd:3e:63:ce:35:29:b1:88:c4:e1:20:e6:
         48:4e:9a:b4:e7:bd:22:55:00:c4:61:93:d7:a9:b1:13:43:5f:
         8b:e9:5d:4b:e5:b7:67:ee:20:eb:17:7f:9f:03:01:f0:db:3a:
         29:57:14:7f:86:22:0e:ba:b9:83:9a:71:d4:aa:e3:a1:f1:a8:
         12:4a:3a:9b:50:1f:22:c3:fa:93:f8:a7:c8:6d:a7:e8:cf:89:
         48:86:29:b5:0a:59:a5:a3:42:d2:e5:cd:2d:78:94:8a:d9:84:
         ba:24:a4:32:bf:fb:50:a7:3e:aa:44:b3:92:d7:8c:33:60:51:
         02:89:eb:fa:e0:b6:8e:e7:e5:21:49:70:38:f6:60:35:bc:a8:
         ef:dd:13:82:8f:07:49:5d:1c:5c:2a:33:c8:45:74:bd:93:c8:
         ab:a5:71:71:85:97:78:b9:b1:e8:c8:33:ea:af:53:0a:5b:8b:
         57:15:0c:ef:95:71:e5:22:66:39:64:54:33:56:26:26:6b:14:
         c5:9b:09:5d:ab:51:4f:b6:bb:fe:63:1f:df:22:08:f9:fa:29:
         78:2c:ce:ca:a8:31:4f:03:f5:4a:46:66:80:69:36:1a:a0:70:
         34:e3:18:e2:61:6f:a8:f6:b7:ce:e0:e5:bc:f2:95:5f:77:5e:
         64:55:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----