Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
File:                     ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer (raw, json)
Hash identifier:          eCzpD6dg92NuXocgCtDuVuGpgcIczdZd5kDvTD807A0=
Subject key identifier:   79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B676D8E0357D1A09EEA6AD0FE3978
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208633
                          IP: 45.92.48.0/22
                          IP: 2a0e:1dc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:67:6d:8e:03:57:d1:a0:9e:ea:6a:d0:fe:39:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:0b:d4:cd:41:99:aa:33:ae:b2:0c:3c:f1:
                    43:f1:da:b8:14:21:16:49:14:b6:52:27:8b:31:e7:
                    88:e6:6e:27:05:86:e1:1a:98:23:34:97:c1:6c:7d:
                    16:e2:95:57:fd:de:78:c1:56:57:e1:2a:3d:e4:09:
                    7e:32:70:01:af:bc:76:65:b5:ec:ae:82:47:e5:29:
                    50:7d:64:b6:08:1e:b5:9f:4b:a8:8a:fa:67:81:46:
                    ec:9a:85:34:e1:d2:2d:ea:e2:30:64:56:7d:40:55:
                    0d:bb:5e:2f:90:0c:f5:03:11:73:79:db:56:e0:cd:
                    7d:c2:9a:4e:b1:a0:06:ea:61:f3:b2:01:ba:5a:42:
                    71:e0:02:cc:c6:45:3a:df:7c:0d:59:23:75:a8:10:
                    84:26:58:3a:67:15:95:e7:a0:b9:fa:7a:b7:e1:89:
                    0f:c8:84:85:7f:d2:e5:57:b6:65:18:4f:10:b5:43:
                    d6:bf:8d:c6:92:a8:f8:2d:13:37:2d:97:d7:2e:dd:
                    a5:be:70:8b:52:f0:08:41:fc:a4:49:bb:fd:cf:50:
                    6c:be:1c:b7:9a:57:bd:27:66:72:43:ea:7c:3b:a5:
                    fe:fd:eb:4d:aa:5a:e7:c2:17:df:34:98:13:24:ca:
                    20:e5:29:f6:fc:e1:f3:66:50:65:23:cd:7c:e2:be:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.48.0/22
                IPv6:
                  2a0e:1dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208633

    Signature Algorithm: sha256WithRSAEncryption
         80:83:e2:78:9a:61:71:3f:b9:d3:dc:b2:4a:ad:e8:77:f8:90:
         3a:c0:74:df:d5:52:3c:61:56:78:15:97:37:8f:ad:24:32:ca:
         3c:ec:78:29:52:55:cb:c3:5c:06:ca:ca:ff:f6:31:a1:9f:1b:
         fd:d7:54:39:54:69:79:47:45:69:8b:b4:6e:39:d0:f3:df:58:
         47:cd:88:a8:fe:f1:90:49:87:65:c0:db:c0:f4:ac:34:db:7c:
         c6:89:c3:2a:9d:73:c9:b3:3c:5a:30:bc:95:6d:a1:55:38:36:
         ae:d5:75:dc:04:26:5a:a8:bf:a4:35:83:4c:0c:f2:76:96:9f:
         61:a6:0b:58:7e:10:14:fa:63:97:a1:99:01:50:f7:8e:89:a4:
         4a:ea:85:10:f2:28:1c:06:64:d8:f8:3f:60:87:e8:c6:37:90:
         96:e2:47:87:f5:0f:b0:77:da:67:a6:ab:61:b2:49:f0:a9:38:
         cf:6f:23:a8:55:c8:0f:8d:c1:7c:3f:9b:3d:95:e2:e0:2f:a5:
         e1:9d:d2:d2:fb:25:28:a6:4f:bd:02:8e:82:27:79:b5:7d:a3:
         c3:0f:82:20:0b:20:1e:b0:02:4e:4b:35:fd:d6:b6:74:1f:ec:
         9e:cf:85:c2:a2:32:24:4d:8d:66:f1:fc:ac:21:63:13:7e:d1:
         cb:23:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----