Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
File:                     goiQPZDAHi1c4YeIBa1KktKK7ck.cer (raw, json)
Hash identifier:          6VJJ50nApZY4G5Ex+YbSCctkZ3NrI+7NOJCOCgIHuZ0=
Subject key identifier:   82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB08CC7AF13EBEF2FDD81060CDEE8D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206732
                          IP: 185.178.8.0/22
                          IP: 2a12:b140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:08:cc:7a:f1:3e:be:f2:fd:d8:10:60:cd:ee:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:35:72:a6:08:96:bb:aa:a7:56:d1:19:8a:
                    75:15:f8:81:6c:d1:75:49:fc:17:46:ad:89:fd:67:
                    06:55:1e:45:c6:7b:80:6c:96:f7:05:d4:80:b7:bc:
                    37:32:6f:e9:81:1a:28:0a:01:2e:14:03:79:8e:55:
                    dc:36:70:d8:fa:cd:e4:14:bd:e9:43:b4:96:01:c1:
                    e5:a8:b6:ab:7d:13:19:9e:34:2e:45:4f:d4:e7:28:
                    a1:dc:37:cc:bf:20:23:be:3f:d7:8e:01:18:84:9f:
                    a4:be:d0:c2:04:92:65:67:05:54:66:6e:f1:bf:94:
                    18:f9:f6:a8:18:15:39:85:47:39:e5:a6:79:22:6b:
                    0b:30:f3:42:95:f7:7c:7c:17:eb:4d:dd:9a:c1:4c:
                    9c:e3:82:9e:88:3d:9f:d6:03:37:c9:cf:ff:20:5b:
                    83:0b:04:eb:e0:f5:5e:bd:57:8e:db:f9:e9:43:5b:
                    dd:fe:7f:1b:fe:a5:37:dd:31:81:90:dd:d2:e6:3e:
                    5b:f9:c9:50:8f:39:96:ff:90:1c:25:5e:4d:f6:b2:
                    1e:12:78:c1:42:a2:ee:f4:14:c5:cc:86:1c:24:aa:
                    cc:bd:82:46:3e:e0:d3:54:48:1e:8f:c9:cc:9d:21:
                    0a:ac:c8:e1:7c:c6:58:34:7f:66:22:12:bd:ea:2d:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.8.0/22
                IPv6:
                  2a12:b140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206732

    Signature Algorithm: sha256WithRSAEncryption
         8e:97:0e:f7:7b:33:96:ea:15:e1:ed:5b:8b:94:22:eb:67:66:
         ec:ab:70:40:3d:55:b8:cf:35:df:b6:d9:89:51:23:37:8e:e9:
         11:32:55:0a:38:0c:5b:f4:eb:b1:fb:39:91:7c:23:e7:af:19:
         c9:1e:e5:47:dc:c6:3b:b3:01:a8:f5:4b:23:40:bd:96:e9:c9:
         ac:d7:09:a8:be:c9:d6:9b:4f:cf:ed:ba:f5:77:de:b8:e2:5c:
         78:4b:b5:ad:bd:c2:2b:0c:26:a0:d5:01:ec:8d:95:6c:ca:77:
         58:46:85:b9:9e:b9:ab:e8:fb:46:44:5e:b0:96:18:d3:db:49:
         d3:25:50:06:71:88:06:6c:58:1e:ec:62:cc:c5:d7:2e:8f:b9:
         f7:3e:c8:ca:1d:8a:cc:3f:13:b4:40:31:65:01:c3:08:d6:a9:
         3b:c7:33:27:33:50:b7:df:25:08:ee:c3:b9:2e:8c:ac:42:e7:
         6d:f5:c1:a3:0f:5f:f4:b3:31:b5:2e:00:ab:9d:d1:17:b9:93:
         e5:3e:f7:0b:96:89:15:45:9c:76:5d:ac:fe:46:24:62:2e:26:
         c0:e0:e7:31:fb:aa:d4:a5:ae:25:1c:bc:ab:2e:75:50:cc:64:
         56:7b:f7:c1:31:3f:9c:2f:d1:a5:43:d7:4f:b2:46:00:28:3e:
         25:fa:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----