Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.cer (raw, json)
Hash identifier:          FyzZ40F83foIhUHOgGAhSTV2iZ1fVMdARM2+Fr5RjdY=
Subject key identifier:   70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427480CFF4680284B0A51DE00CD07CF02
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34884
                          AS: 43056
                          AS: 60972
                          IP: 185.38.28.0/22
                          IP: 185.95.252.0/22
                          IP: 2a05:fd40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:0c:ff:46:80:28:4b:0a:51:de:00:cd:07:cf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:15:8d:24:f0:be:70:72:6d:b5:5d:1a:ba:
                    7d:ef:a9:ba:44:8b:6b:b6:1c:e5:33:d1:73:7f:3d:
                    e2:ec:b2:a6:4b:0e:98:40:83:69:2b:ed:f0:3b:af:
                    a5:87:bd:96:ee:96:36:83:b0:2a:62:a2:89:9c:45:
                    1d:1c:9d:b8:59:69:15:19:75:c3:24:3c:35:76:31:
                    1d:23:80:e5:66:be:0c:21:a9:90:a1:9e:2c:37:c2:
                    e3:56:52:03:43:a6:66:29:cb:df:89:53:5a:5b:d8:
                    6f:a4:76:07:60:4e:9b:9f:e2:81:a0:87:47:de:e6:
                    76:f6:ab:64:0f:99:f8:19:3d:e0:ab:fc:e2:94:e9:
                    bd:4b:15:67:43:d8:51:f4:4f:03:4e:8c:5c:5e:8c:
                    ce:de:e0:17:e9:ec:12:5e:4e:1a:88:38:96:c3:40:
                    e9:bc:eb:12:f8:58:7f:d9:6d:68:b2:66:dc:de:cf:
                    74:8b:36:5a:02:35:60:11:fd:57:0a:f5:a3:b5:13:
                    4b:32:60:12:17:74:a7:1b:03:83:ae:ce:fa:a0:2f:
                    5b:53:a7:5d:1b:34:35:da:26:db:97:a7:c4:a2:1c:
                    86:aa:2f:b3:e7:9d:78:4d:cc:19:f0:c7:cf:f7:71:
                    ff:7c:d5:37:04:34:83:46:58:21:a9:fd:af:7d:94:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.28.0/22
                  185.95.252.0/22
                IPv6:
                  2a05:fd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34884
                  43056
                  60972

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:6f:3e:44:23:8e:ef:3d:fa:b8:29:f6:26:a8:38:93:cf:
         90:19:54:4c:65:71:b9:ef:2f:5e:db:78:2d:91:c6:de:86:c3:
         83:c8:ed:9c:51:6b:7c:05:91:27:3b:fc:8e:ac:a9:bd:42:56:
         05:8f:63:68:01:df:3f:2b:15:23:a9:38:63:74:e6:db:a1:71:
         75:2f:06:8a:ad:b8:f2:a9:d9:cf:38:1c:74:82:f5:21:c2:98:
         e2:ea:91:3f:dd:bd:6d:f2:e3:b5:79:e9:74:d4:ce:00:66:7b:
         75:2a:87:1b:41:53:3a:2c:24:2e:cf:29:21:02:0b:de:58:16:
         6d:6d:d7:96:58:6e:f2:a2:d1:40:a6:b2:fe:8e:6a:0d:9e:64:
         db:e7:9d:d1:ae:cd:33:87:99:12:1c:8b:27:7a:07:6b:f5:0c:
         32:26:b7:37:af:e4:20:c1:55:b9:35:03:29:5d:92:9e:ce:b8:
         8d:0a:d3:b8:1c:0f:eb:85:31:1d:a1:ca:c2:92:dc:5f:ec:92:
         f5:4b:df:95:7b:6d:c5:4f:06:4c:e1:3d:77:8f:8e:d1:9b:05:
         f5:60:09:4c:e6:ed:3d:e2:51:fc:35:e4:c7:10:e0:bb:56:dd:
         a2:4c:6c:83:0a:04:3a:6b:10:9c:46:e8:55:15:17:b3:22:98:
         9f:a0:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----