Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
File:                     gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer (raw, json)
Hash identifier:          5z/4reYI6pWdjVynxvQjS+d0oQCTQYU8IC0AdFl9S1Y=
Subject key identifier:   80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942144482AF1ED1F8C025FF19AD383A784
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206674
                          IP: 185.179.56.0/22
                          IP: 2a0a:7b80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:48:2a:f1:ed:1f:8c:02:5f:f1:9a:d3:83:a7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:d2:ce:34:d7:28:77:9d:78:d7:9e:ea:5b:
                    4b:54:ea:30:c9:a9:61:b4:22:e4:0f:b1:7f:de:12:
                    68:77:0d:b7:91:cf:dd:b2:54:bd:e0:16:6b:a7:f6:
                    ee:d9:25:cd:76:14:05:a2:2e:19:5e:d5:ea:88:1a:
                    95:5b:8a:e2:90:2d:c2:41:86:a7:e6:55:24:43:61:
                    ae:31:ed:32:d5:36:40:23:40:b0:c3:ee:0d:b8:4a:
                    10:20:46:a8:f3:7e:a6:c2:a0:78:a8:07:fb:df:db:
                    e0:b4:3a:c2:59:5d:bf:74:8d:9d:f7:67:09:b1:ea:
                    92:e9:b0:c6:22:39:53:7f:ba:1d:81:4b:4b:47:fd:
                    91:61:e6:2c:2b:ba:ef:50:8f:60:8c:01:84:2d:c0:
                    b1:3a:5c:e5:82:c5:0d:f4:65:92:01:b8:10:0a:1a:
                    f9:f6:3e:37:0b:18:d8:b6:db:eb:10:82:59:cf:33:
                    fb:58:de:29:68:32:7a:14:98:7f:34:45:27:62:58:
                    3c:fa:a9:fc:df:57:de:64:34:28:6d:bf:65:f3:90:
                    62:14:a8:1b:f7:88:81:8c:63:27:16:11:dd:67:ad:
                    1a:0f:b7:e2:b7:ee:4c:cc:53:4f:5e:c4:8b:91:f0:
                    60:8c:c0:91:74:22:f1:c0:58:4a:92:a3:4b:49:a4:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.56.0/22
                IPv6:
                  2a0a:7b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206674

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:38:63:d5:65:e0:d4:15:88:29:10:3f:84:48:2c:ef:3f:
         28:ba:bc:6f:59:84:de:04:86:58:66:42:68:c8:7c:f4:4e:51:
         cd:ae:c3:27:8e:08:2c:1b:f4:b9:0e:aa:7b:21:f9:ea:fe:b3:
         6b:cb:5b:48:a1:c2:46:44:15:6b:71:f5:99:89:01:e4:f4:2f:
         3d:e4:17:2e:83:19:bc:da:f7:87:8a:65:ae:e6:a5:3c:6c:63:
         c2:e7:7e:09:d1:7a:4e:45:72:2b:7f:14:0a:8e:e9:df:fd:5a:
         13:6d:6e:28:9f:e2:82:14:10:fc:28:ae:fb:27:99:97:ef:80:
         11:3a:c2:6f:38:71:e9:5f:97:9e:73:ba:2d:48:3d:3f:0c:65:
         ed:c1:60:13:fe:5f:83:ea:e4:36:10:0b:37:99:97:5a:33:86:
         b7:4c:55:a2:23:9f:34:bf:aa:e3:90:63:d5:d9:da:b1:e1:fa:
         3b:2d:cf:e1:11:40:7b:7c:79:9b:21:8d:a6:8c:ca:80:85:40:
         88:6d:a8:1d:fb:06:61:25:c0:6f:f9:a3:48:6d:00:15:cf:b2:
         c1:2e:b8:74:df:7f:b9:cd:32:9c:3c:6c:0d:a6:5d:27:49:e2:
         82:9c:d4:78:3c:a4:b9:7f:9a:d3:1c:91:78:a8:9d:56:4d:2e:
         cf:03:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----