Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer (raw, json)
Hash identifier:          O6TT+reVxVrW4KjmLe8BHFbGab/k+BMRNHMpJyFeU08=
Subject key identifier:   73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214399D6CE5741915CE025B593E30AAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51615
                          IP: 45.158.236.0/22
                          IP: 46.54.128.0/17
                          IP: 2a02:2590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:99:d6:ce:57:41:91:5c:e0:25:b5:93:e3:0a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:50:9a:8b:a2:a2:b7:ce:2b:ae:96:d4:87:
                    6b:55:d2:99:97:66:bc:ad:93:be:dd:47:ea:8c:d9:
                    a1:da:80:53:be:d4:97:06:07:41:8d:7b:da:ff:42:
                    93:89:54:61:c3:72:d6:1b:21:99:f3:aa:b6:36:39:
                    42:4d:49:4a:35:8a:13:17:87:af:79:7c:e1:15:22:
                    14:22:d9:90:95:cf:19:24:cf:82:35:41:14:5f:ac:
                    76:7e:ad:e0:3d:dc:75:99:69:74:58:d4:13:1c:e2:
                    36:8d:af:ae:62:38:8c:8e:2d:21:62:5c:34:05:dd:
                    6a:6f:5c:02:23:24:14:52:6c:63:7a:38:a3:db:a9:
                    93:2d:74:5d:66:68:de:62:00:23:69:44:16:bf:f9:
                    c1:7f:f1:1b:b5:93:16:36:2c:0d:88:35:b1:b6:ed:
                    2b:00:57:95:ef:71:b5:9a:e5:36:46:c4:0d:7a:0b:
                    9c:3f:8b:5d:48:33:bc:46:a7:66:31:8e:5d:4b:4e:
                    1a:62:eb:1e:51:f0:fc:47:ad:33:a2:06:c3:62:82:
                    4b:bb:a1:35:42:75:90:43:ef:c6:bf:fd:6d:f0:e1:
                    d1:72:e4:fb:f9:d8:e5:49:7a:fe:c3:3b:8f:55:24:
                    ee:02:66:8a:52:29:c6:dc:cf:2f:ae:8d:60:b7:1c:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.236.0/22
                  46.54.128.0/17
                IPv6:
                  2a02:2590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51615

    Signature Algorithm: sha256WithRSAEncryption
         7c:aa:f9:41:b7:0e:c1:8b:1c:5e:e4:ab:9c:c1:71:d3:24:52:
         9c:60:42:1f:96:0e:2d:45:4a:3d:26:d7:f9:83:9f:f8:b6:6a:
         5c:59:2b:d3:ce:e5:16:f5:02:c7:62:1c:5a:77:44:0e:97:40:
         ce:c5:66:24:d3:e5:5d:1f:e1:37:ed:ec:c8:a1:c7:0e:4a:b9:
         b6:10:01:a4:18:45:9c:df:d4:43:e8:35:79:88:bb:49:f2:cb:
         ed:39:79:b0:5a:6f:5c:f0:79:7b:d0:e7:0d:38:db:4e:b7:be:
         e8:61:25:c0:d9:38:87:fd:fa:64:da:c7:9e:fb:f5:f0:c5:c8:
         4e:16:c9:30:b3:8a:d7:18:cd:81:de:b4:1a:27:b5:29:da:68:
         24:99:84:ec:28:bb:37:38:ba:71:80:fb:f0:38:cb:32:bf:39:
         7f:b5:1f:e2:3a:9a:93:b1:c6:27:c4:cb:61:72:61:e5:8b:37:
         45:d9:21:48:52:c7:e1:48:8a:57:02:97:dd:9b:06:bc:c1:1a:
         2e:bf:ba:f8:09:d5:c9:15:fb:92:00:ad:72:98:98:1b:da:fb:
         fd:a1:42:62:f3:6b:72:97:11:e8:7b:a5:d6:ed:3d:83:83:96:
         69:32:36:ce:29:95:cc:23:02:83:68:11:25:99:bd:68:21:08:
         8b:63:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----