Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
File:                     evZ3nmK0YSiH_m-NTpwONzH24Qg.cer (raw, json)
Hash identifier:          ycMvLpc3ND8LPFFCwDekNbiQCgDL9IJDFwGo3+eztfU=
Subject key identifier:   7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6B7897D862D8C5A50FF41844E9867
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208236
                          IP: 45.150.152.0/22
                          IP: 2a0f:d600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:b7:89:7d:86:2d:8c:5a:50:ff:41:84:4e:98:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:68:43:2a:83:78:3d:6d:54:b5:01:2e:59:
                    4e:2b:74:73:cb:4c:5d:a8:ad:26:a0:2a:3f:2b:05:
                    27:d6:8c:39:37:79:2b:e3:d4:d2:69:43:20:5e:0b:
                    15:54:f1:b2:17:aa:b8:6e:e9:31:3c:f2:7a:8c:7b:
                    fc:61:12:ab:4f:f9:19:5d:fd:63:ac:20:9c:6d:56:
                    9c:fb:aa:98:60:c7:61:94:59:31:c6:34:62:07:24:
                    00:ba:47:d6:52:91:4c:f7:90:e6:95:1d:43:75:db:
                    48:3c:22:a2:f3:f7:b5:8d:5a:97:af:d2:cf:0a:95:
                    95:2d:91:b9:21:0a:92:6c:10:1b:a6:dd:b2:1f:e5:
                    a8:76:18:c8:3d:c7:4d:84:34:96:59:85:e7:1d:75:
                    ed:fe:e9:14:f1:41:ed:98:04:69:7b:dc:be:77:75:
                    23:d7:84:5a:c0:e5:c4:c9:1b:70:32:31:9c:67:25:
                    d6:a1:ab:ba:e0:45:eb:3b:c9:c6:92:39:79:21:c3:
                    b8:d4:f9:51:74:4b:30:c1:11:32:40:e4:41:d0:6b:
                    d1:7c:c4:f9:45:72:24:cc:b2:37:b8:0a:52:85:ff:
                    1d:a0:f1:6d:81:53:81:fe:c8:88:e4:52:b2:e9:b7:
                    b6:da:4b:07:65:d5:de:b4:6c:82:0a:b5:8b:2a:59:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.152.0/22
                IPv6:
                  2a0f:d600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208236

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:65:90:24:ea:c7:ee:7e:5f:b6:fb:9b:39:32:a9:8d:21:
         09:55:e5:95:0b:04:97:c8:c5:b9:8b:6e:18:8b:a0:dd:66:5f:
         ef:f8:a7:f7:31:60:e8:58:3e:c2:33:67:2e:ad:6d:81:4d:9e:
         72:f0:12:45:e3:11:54:bd:4b:2a:d3:43:a9:5a:36:30:d4:0e:
         ee:fd:f9:5c:16:86:ac:9f:3b:00:ef:5a:f1:fd:58:ee:3f:14:
         67:42:aa:08:72:f3:ba:4c:5a:cf:ee:07:2c:8b:c1:79:49:85:
         84:8f:be:9c:ac:4f:7b:89:db:cc:c1:07:38:01:73:57:27:13:
         ed:a1:60:0d:e4:dd:24:87:31:e6:ca:d4:7f:f6:80:04:7e:61:
         00:51:1a:28:be:0c:a3:16:f0:97:dc:68:96:8c:cd:78:a3:2c:
         f9:f3:9a:61:6f:11:5a:bf:34:f8:0d:a3:dc:f2:2d:b1:d6:73:
         1f:2e:65:b2:6c:ce:fb:93:c6:4d:62:62:73:73:00:47:76:ae:
         93:62:1e:85:2f:5d:46:cd:3c:8c:6d:9d:d2:dd:58:fa:5c:df:
         b6:74:dd:07:82:92:1c:73:af:b2:e2:8b:47:23:53:77:55:51:
         d9:6f:6c:08:88:71:0a:ae:b1:c2:ff:36:68:26:5b:ea:0e:94:
         87:f7:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----