Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
File:                     bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer (raw, json)
Hash identifier:          dmSK058Y6hS7gt2S1KFDyjq441W9vBYC84kH9DAOBJ8=
Subject key identifier:   6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942522193F2AEE6011D63B1AF06A35402D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51704
                          IP: 46.60.128.0/17
                          IP: 185.224.12.0/22
                          IP: 2a03:c500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:19:3f:2a:ee:60:11:d6:3b:1a:f0:6a:35:40:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:fa:ae:6d:13:61:55:3d:3e:93:1e:fe:57:
                    08:5b:78:3f:6d:7e:7d:a0:b8:20:0e:c6:87:6b:24:
                    77:cb:d8:fa:52:09:2a:53:0a:c5:a9:43:26:80:96:
                    4b:b4:0e:25:2f:37:c2:24:83:51:73:8c:1f:b8:b1:
                    32:14:1e:d9:5c:de:21:6f:87:f4:0e:8c:e2:ae:88:
                    00:d7:f0:e5:f2:90:9a:e2:06:40:ab:49:b9:08:c6:
                    80:fa:7d:2b:cb:28:76:60:38:f6:61:9d:cd:6e:47:
                    f5:d3:9e:63:7c:23:3b:97:75:45:4b:91:84:8c:2b:
                    33:f9:00:55:f2:c5:4e:41:c3:31:ce:b2:f1:18:11:
                    12:86:ed:93:7a:b8:62:27:da:a2:00:df:b9:09:d2:
                    b8:b0:93:3e:27:94:69:87:29:14:de:06:0b:77:59:
                    f3:a9:29:70:33:b8:a9:f8:f3:11:ae:e9:03:43:4f:
                    8e:91:79:04:86:c5:e2:99:47:0f:e7:01:50:3f:f4:
                    5b:be:bc:75:21:d1:6f:8a:65:52:8e:1a:a5:53:bb:
                    da:9c:6d:fc:c4:90:79:8d:2b:ea:22:49:bc:a3:2c:
                    9a:20:af:bd:9c:e1:53:63:b2:c1:8a:c2:ae:3e:bb:
                    4b:62:2d:99:6a:5e:bb:0a:9d:9d:13:11:53:bf:c2:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.60.128.0/17
                  185.224.12.0/22
                IPv6:
                  2a03:c500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51704

    Signature Algorithm: sha256WithRSAEncryption
         81:55:a6:09:d8:7e:cc:f5:e2:b0:8c:55:7e:61:47:8e:95:d5:
         97:ba:ea:f9:47:43:a4:52:e1:d8:c4:94:54:9b:c6:31:61:1a:
         0d:e4:bd:5b:2c:58:3a:07:ae:3e:c0:dd:80:ca:ba:50:01:66:
         f2:41:94:9b:6a:67:71:62:94:6f:ba:5b:7f:2a:a2:97:db:aa:
         aa:68:7e:ab:c4:f9:f0:ae:d8:b5:ed:fa:30:a8:ab:46:51:cc:
         d4:a5:77:2f:92:19:a0:64:71:4f:96:70:19:ec:db:59:08:67:
         d9:d9:97:d1:90:7e:fa:db:8d:57:e7:94:cb:5c:c0:60:ab:f9:
         ab:21:92:69:7a:d8:f1:59:45:54:09:7d:14:51:57:84:8e:0b:
         bc:36:56:3e:ac:83:96:84:e4:69:f4:d4:c6:8c:8d:f1:75:35:
         4d:be:9e:40:87:dd:07:f4:89:4b:d1:76:43:88:5b:da:30:8f:
         fd:81:1d:b8:8a:e5:0d:de:45:83:38:5c:61:22:d9:bf:47:09:
         21:38:9e:47:80:df:3d:92:df:cf:17:af:32:0a:dc:da:d1:68:
         1c:9f:bc:9a:2c:9d:6c:62:ce:84:a4:eb:ff:5d:57:e2:7e:68:
         27:01:8a:d8:8e:a0:4c:ed:25:99:ad:38:4c:ec:26:8b:aa:a7:
         b1:9d:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----