Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
File:                     gvWThvzeWW90WQde3qTXTBmwHKI.cer (raw, json)
Hash identifier:          9uJCQX9eM8pbTtX1E2j4ravKgPIItx+ZqWBVTe/IUN4=
Subject key identifier:   82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC1910FC8570E02F152AF0D62FD981
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203360
                          IP: 193.56.80.0 -- 193.56.102.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:19:10:fc:85:70:e0:2f:15:2a:f0:d6:2f:d9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:25:3a:85:b9:58:27:df:5f:33:1e:87:c4:
                    7b:27:42:32:6d:30:78:17:d1:f4:6b:ca:a5:e0:39:
                    fc:39:f8:8d:a4:da:09:aa:a4:5d:36:9b:8d:91:00:
                    7d:23:35:d4:ef:75:e0:b9:6f:e2:fa:80:3f:fe:25:
                    c3:2e:80:3c:47:8e:59:74:73:17:97:ce:36:6e:4a:
                    77:0a:b3:55:95:f0:57:8e:ee:26:58:2d:4f:be:76:
                    c5:51:5d:e7:76:7a:a4:1d:63:76:20:bc:c3:2e:b4:
                    0a:89:ab:85:75:7e:8f:40:f4:f8:1f:26:18:39:8d:
                    af:a9:79:5f:b0:ab:df:1a:ea:fb:d5:26:9d:50:f1:
                    d2:93:d8:88:15:de:5f:99:ab:81:ae:a9:57:22:e8:
                    06:26:52:95:f8:d5:86:28:54:f8:b8:cc:29:87:3b:
                    e3:58:46:36:fd:b5:06:b5:8a:66:47:d9:95:dd:fd:
                    8a:63:98:91:ed:16:8d:0b:4e:4d:aa:fe:61:4e:54:
                    3d:7c:cc:75:9d:64:e0:9d:7f:6b:ab:77:7b:a2:5b:
                    c5:6a:22:46:31:64:29:6a:dd:26:51:bc:04:01:ea:
                    bd:0a:10:bf:17:ab:54:84:9d:f6:1e:ee:46:bf:6e:
                    84:51:8e:c0:fe:71:4d:35:03:9d:06:3f:8f:c0:81:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.80.0-193.56.102.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203360

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:30:b2:36:45:52:07:d2:91:55:aa:dc:ab:c0:ac:8e:05:
         9d:9a:00:7c:ad:8b:93:01:e0:7e:16:27:c1:80:82:b5:35:df:
         4d:7c:16:49:5b:13:bb:a3:87:b3:f4:0a:a2:96:02:b6:9b:0a:
         c6:ff:e7:dd:2c:a3:9d:2f:11:f6:11:fb:36:22:05:c5:86:47:
         37:c4:6b:de:ad:c6:e3:60:b3:6b:fa:4f:9a:c2:b9:3f:69:1a:
         43:22:28:35:3e:d4:ae:4b:d1:34:bc:96:ad:0e:14:9f:69:63:
         7d:39:e2:f1:8b:d5:44:e7:1a:09:b9:97:5a:25:2b:a9:69:a2:
         79:76:d0:71:66:0d:bd:0b:a0:81:93:b0:20:aa:83:ae:03:57:
         8f:0c:e2:71:32:1d:3d:77:e1:fd:e1:54:e2:ee:23:ff:cd:dc:
         52:07:9a:8c:3c:da:29:2e:b9:d3:d3:15:05:c4:af:bc:a3:b4:
         17:95:c6:ec:0a:bc:bb:66:d2:26:46:55:75:f8:b9:08:a1:b3:
         7c:6d:96:49:0d:d0:3c:92:91:cc:13:0d:31:6d:f8:a4:e2:fc:
         14:95:17:c1:96:d1:69:04:af:c6:96:2c:8f:f2:63:af:25:17:
         fb:f5:97:ef:0b:91:96:e7:70:29:b9:71:2e:0d:07:5e:ca:46:
         a5:32:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----