Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
File:                     h5Q8uG46cDgTd4-reQ1l8NohYVo.cer (raw, json)
Hash identifier:          dJOFgs7AWNoIXiLc1MM33r2dTYF/0II8o02YGMa2QFg=
Subject key identifier:   87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0196240442C8CA5FB44304DF36F3C60B1F52
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 08:43:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43882
                          IP: 79.133.160.0/21
                          IP: 79.133.172.0/22
                          IP: 2a09:5a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:24:04:42:c8:ca:5f:b4:43:04:df:36:f3:c6:0b:1f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 11 08:43:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=87943cb86e3a703813778fab790d65f0da21615a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:37:af:14:15:c7:63:45:54:86:87:37:64:
                    44:0f:65:5c:96:c1:69:07:3f:2d:dd:ed:c8:76:ac:
                    08:e7:b0:8c:69:9c:e5:9b:8b:3d:a4:38:5d:a0:20:
                    94:d7:51:aa:33:8d:ff:17:92:39:e9:d4:4e:48:15:
                    c3:68:66:e5:85:20:7e:bd:d7:77:6a:95:dd:1e:3b:
                    5f:52:10:03:78:8e:84:13:8a:ee:c7:85:18:20:97:
                    1f:e4:11:28:4d:96:a4:28:ca:f3:a9:e5:d2:71:e5:
                    24:7e:8b:5b:24:cb:59:d4:9e:25:ac:17:85:c7:17:
                    67:ae:95:44:51:7b:7f:99:d5:7e:cd:fe:34:b9:cc:
                    6b:2b:fd:0c:d7:32:3c:25:7a:d6:34:06:84:b6:15:
                    c4:04:1f:bb:37:14:e4:50:b7:4f:7d:5c:e9:61:0d:
                    6e:c8:0f:a8:54:66:03:e7:b9:5b:77:18:be:e7:a3:
                    21:1b:56:a3:7c:4b:3c:ed:ec:e4:45:84:25:cc:f7:
                    ce:16:91:fa:8a:2f:d6:3a:cf:69:68:ae:65:ef:f0:
                    00:51:b3:70:20:44:4b:e9:1a:74:0a:4b:54:80:dc:
                    bc:ab:98:15:b9:43:b8:2e:d5:a0:ce:7f:37:3b:88:
                    7c:21:dc:88:61:70:2e:f6:8b:c1:3f:5a:04:88:b8:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.160.0/21
                  79.133.172.0/22
                IPv6:
                  2a09:5a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43882

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:33:a1:43:1d:29:20:93:8a:f8:16:b3:ad:10:f0:5e:c2:
         b9:d1:48:b0:08:37:ff:1d:f4:25:59:8d:21:e8:b8:9d:dc:e7:
         c8:89:2f:e0:cb:89:1f:c5:e5:70:8e:3c:f9:9b:d2:f1:14:c0:
         22:e8:ef:e9:ef:40:6c:e5:33:4a:1b:ff:e7:22:24:6d:2d:60:
         81:61:a5:3e:1c:e6:11:5c:c7:16:59:1f:c0:4d:93:5f:d8:f7:
         d4:0e:dd:9d:24:3e:b4:ac:f2:50:24:f5:c3:c1:b8:03:78:c8:
         c5:9e:ae:7e:53:c7:77:6c:5b:a6:e4:e1:7e:b1:69:a0:2d:af:
         92:93:ca:20:9f:0a:81:c6:84:31:b6:10:f7:ef:f9:8d:87:90:
         29:8f:9e:ba:83:16:2a:5b:c9:28:61:51:06:65:6a:1a:9e:e6:
         e8:09:d1:14:f9:fb:30:b9:f4:ea:a4:81:1a:f3:b0:0c:87:de:
         9f:7f:0f:fe:db:77:43:4d:b5:c6:df:7e:a6:79:fd:2d:78:5c:
         92:c2:1a:d6:16:a2:ce:79:07:74:fa:c9:94:2d:2d:e3:33:e6:
         7e:ca:55:08:46:21:13:6c:14:5b:62:9f:bb:42:14:9a:d5:53:
         4c:a2:61:a6:03:fe:67:8d:3b:f0:81:e2:5e:a9:02:c6:c1:cb:
         40:3e:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----