Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer (raw, json)
Hash identifier:          D1wRgqIMQnFG1kieXLfNIh8LDSSSCtHtq5Zm/nCauiU=
Subject key identifier:   79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC492780EB60DA9A7700551B55225A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28849
                          IP: 185.15.156.0/22
                          IP: 217.23.112.0/20
                          IP: 2a03:c740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:49:27:80:eb:60:da:9a:77:00:55:1b:55:22:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:2d:d1:26:ee:ba:8e:b1:44:fe:53:09:b1:
                    e9:74:d4:8c:75:88:9b:1b:dd:e7:a7:4f:0a:e3:b1:
                    b0:38:5c:44:4f:7c:d6:b0:21:fa:41:2d:4e:44:d9:
                    b4:1f:60:36:38:e4:b8:3b:79:60:95:c5:49:21:22:
                    43:61:ec:8f:00:3e:7f:4d:f6:9d:be:b6:4d:66:fe:
                    85:a1:3e:c9:aa:9e:30:c1:b1:13:f9:45:21:5f:df:
                    57:cd:31:78:c8:9a:08:ca:9f:83:85:b7:f0:8b:91:
                    dd:6e:9f:23:92:1e:f1:65:a4:03:47:9d:26:19:e9:
                    67:e0:88:5b:b9:e8:31:7a:3c:e7:87:5d:73:6f:d5:
                    fd:5a:2a:2c:bf:c4:5c:57:af:f1:d9:c2:2a:63:b8:
                    5c:b7:f5:23:1b:b1:84:bd:37:f1:b9:d3:a2:bc:8e:
                    9e:4c:e9:6d:c8:b6:9e:4a:8f:aa:4a:42:ef:55:9e:
                    85:4c:63:90:21:00:c5:83:d5:67:e9:b0:59:fe:5d:
                    78:e2:ae:9d:c9:f1:4b:f5:df:21:c1:d4:e3:46:b0:
                    1e:b2:77:36:83:a5:d9:52:c1:98:23:e2:22:15:8a:
                    8c:fa:6d:d2:8e:8a:d9:ed:bf:01:8d:68:eb:2d:9d:
                    41:bf:46:a7:10:3e:bf:78:e9:2c:bc:86:6f:5d:ba:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.156.0/22
                  217.23.112.0/20
                IPv6:
                  2a03:c740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28849

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:81:4e:99:55:b7:03:9f:17:09:b0:7e:1a:47:17:84:e5:
         f4:c4:2e:d0:e4:05:7a:80:63:82:e6:48:d9:1b:18:35:8f:c8:
         4b:5a:3d:f5:e2:7d:eb:da:a2:6f:13:6d:b3:7e:18:7a:84:2d:
         aa:04:c7:e9:94:7c:cf:81:32:1d:9b:d7:c2:15:3d:d2:ec:b9:
         37:be:a5:a6:74:04:c8:bf:7a:7e:8e:72:9b:c1:ae:25:14:0f:
         6b:da:3f:29:99:fe:7b:a0:a4:5f:a7:c3:7f:6d:7f:a1:15:9a:
         ae:57:11:bd:85:6b:4a:38:55:37:07:80:27:48:c3:73:21:55:
         f7:c8:10:e5:ae:ed:fa:b2:1b:e1:9a:a6:47:5a:3b:0f:af:59:
         f5:dd:de:80:cd:7b:a4:e1:c9:5f:23:3f:fb:51:5c:4b:1f:09:
         6f:20:b3:e6:ff:37:4d:c0:9e:c7:28:89:2d:45:83:fd:ac:26:
         a2:f3:90:db:3b:7a:01:43:a7:4c:03:2e:4d:e8:d2:fa:23:2a:
         af:39:bf:cd:fd:cd:59:52:8a:24:3d:01:18:5e:d8:9e:75:66:
         7f:aa:a6:7b:3f:92:5b:0c:d1:3f:ba:60:c7:2f:f2:72:b6:69:
         be:08:d6:3c:01:60:f6:d8:af:11:de:08:23:f7:ae:e2:38:d7:
         1a:9f:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----