Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
File:                     cMnQbFGt1oKQY_G2exddDAAB5zY.cer (raw, json)
Hash identifier:          cI7nI8TrDSlPax8gVOwMA6gTTqVQqrNWaWKNHKvAAQw=
Subject key identifier:   70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421442A4146948582EA73C7E3BB4D5189
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216451
                          IP: 37.230.40.0/21
                          IP: 89.107.160.0/21
                          IP: 185.188.200.0/22
                          IP: 2a0b:2400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:2a:41:46:94:85:82:ea:73:c7:e3:bb:4d:51:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=70c9d06c51add6829063f1b67b175d0c0001e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:5f:7f:cb:f9:40:0a:59:e1:a4:ea:48:64:
                    91:c2:5d:a1:96:a7:9e:a8:ae:a7:87:8e:b1:d9:87:
                    86:ba:69:f5:9d:8b:3f:58:96:71:45:7e:ab:06:f8:
                    c0:f0:54:b9:49:01:13:07:12:a6:1f:40:75:5e:1a:
                    ef:38:55:3f:d6:7f:ce:8f:e1:bb:10:a9:d8:3b:e3:
                    e8:81:c5:0d:72:4b:91:3c:6f:5b:e5:87:54:0f:c8:
                    66:7e:0f:57:ed:33:a7:21:5a:29:8d:db:68:18:06:
                    21:2c:33:84:08:a2:14:0f:20:f6:52:01:42:46:8d:
                    d5:0b:9d:39:e4:a0:9a:7a:8d:67:bb:d0:f8:24:1f:
                    82:85:96:8c:e8:f9:72:96:4e:d2:4c:6a:50:c7:c9:
                    a4:3b:85:fb:5c:53:be:30:4a:70:ca:8f:2d:cd:b9:
                    e5:7b:04:64:e9:cb:49:84:f6:74:9f:90:45:e6:5f:
                    f8:80:b9:c7:3b:01:1e:69:1e:59:4a:bc:9a:ad:7e:
                    26:9f:b7:21:c7:bb:0e:72:b6:6e:f4:87:0f:32:6a:
                    c0:ce:db:9b:79:e5:63:0e:89:b5:86:ea:09:75:49:
                    0d:45:6e:e9:81:91:7c:db:8e:80:8d:b8:2b:49:30:
                    ce:e2:fe:59:d0:9b:ed:d3:e4:95:3a:94:38:7e:b4:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.40.0/21
                  89.107.160.0/21
                  185.188.200.0/22
                IPv6:
                  2a0b:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216451

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:e2:10:23:b7:76:42:7e:fb:0f:81:ae:ac:38:42:9d:74:
         b1:44:f7:ec:46:ba:f0:14:9f:40:6e:50:df:a7:01:71:82:d3:
         a7:ed:0c:a1:4a:e3:bf:bf:43:9d:90:6c:33:9b:08:26:d2:ac:
         28:36:e9:7d:d8:06:b5:cf:36:16:e0:2f:1b:8d:52:4d:d3:79:
         31:62:64:95:eb:7e:22:91:7d:af:5b:9e:65:19:b9:6a:ee:e1:
         86:08:da:50:98:a7:16:c1:8b:a8:70:00:53:90:cd:f7:13:51:
         e2:0a:6f:66:1d:b0:dd:49:42:3f:bb:9b:be:f0:7c:34:2f:87:
         29:2d:9d:bc:93:08:44:73:85:a3:f3:5e:ed:27:3b:ed:ec:eb:
         4c:4b:47:05:da:b4:8e:99:a2:78:e2:2d:60:39:5e:41:86:42:
         35:30:19:21:d0:16:0c:3d:95:38:00:2d:18:34:6c:80:c2:8c:
         37:4f:a9:db:79:81:d5:da:5c:36:d2:d5:34:47:cc:3f:c9:b9:
         bb:8d:34:08:7e:9f:2b:22:50:a3:bf:77:1e:95:35:17:bc:ec:
         c1:0c:63:c8:21:d6:86:e7:36:10:11:d7:e0:97:09:df:8f:0d:
         7f:20:9b:cb:ac:f9:1e:00:6f:4c:27:df:e4:cb:4a:04:e5:31:
         8e:68:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----