Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
File:                     hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer (raw, json)
Hash identifier:          Q0CPJDNHYupigMjLTINsMmf3UiAF28Tf/8+cVQSwEk4=
Subject key identifier:   84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961A2B46BCD9F636C1592B6A78F47299DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 10:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34121
                          IP: 91.201.184.0/22
                          IP: 2001:678:d8c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:2b:46:bc:d9:f6:36:c1:59:2b:6a:78:f4:72:99:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 10:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:40:5e:0c:03:1c:85:e0:1d:22:79:ae:12:
                    e2:c4:69:2e:ce:f1:84:91:1c:ad:13:54:f0:78:b5:
                    97:88:14:c9:7b:40:af:83:08:3e:31:a1:d3:76:b1:
                    aa:3d:0b:48:95:ea:82:58:df:97:77:7e:d2:f3:a6:
                    4d:62:40:b8:5f:fe:16:ce:e5:3c:ed:8a:5d:bc:5e:
                    2b:40:3c:b1:2a:fb:65:f8:0a:f8:8f:f9:c2:fb:51:
                    49:19:b4:8e:2e:39:d2:1c:3f:65:25:b2:a0:96:85:
                    dc:f7:24:1c:25:23:ab:36:88:df:0b:41:0a:cd:0e:
                    82:fe:df:a5:36:a2:2d:42:3c:41:dd:99:dc:ae:14:
                    a7:37:d5:d1:25:60:c5:b0:26:c1:5a:76:59:fb:f5:
                    a6:fd:67:6c:c5:a2:26:c3:0a:26:b9:56:53:13:1b:
                    da:bc:18:20:2a:4d:c9:b5:88:0e:10:75:70:af:14:
                    7b:04:70:a2:02:74:c0:3b:3e:bc:72:fd:fd:cc:22:
                    a9:33:1a:ec:81:f9:ac:a6:21:90:08:81:46:43:f0:
                    82:8e:f2:62:f5:e6:e0:38:c7:a6:22:c4:a6:02:8f:
                    e0:0a:27:cc:69:8c:1e:3e:74:54:d1:87:13:81:5e:
                    6e:1d:78:e0:52:10:f1:27:da:02:32:8b:92:aa:92:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.184.0/22
                IPv6:
                  2001:678:d8c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34121

    Signature Algorithm: sha256WithRSAEncryption
         46:85:52:c7:06:40:15:96:c7:ae:fb:96:32:24:25:0c:71:19:
         aa:a3:ae:59:f3:5d:7e:de:13:b3:94:4e:02:9c:21:a2:b1:7e:
         e8:c0:23:a3:de:0b:05:ef:76:85:c0:f4:44:65:44:d0:44:bc:
         40:08:a1:0c:5d:70:3b:04:9a:c0:85:ee:86:3b:e5:53:f9:b6:
         a8:d3:25:3d:a5:70:b9:bd:fb:43:97:59:99:15:f5:ff:09:e8:
         79:79:e0:8e:ef:35:21:96:16:d8:fc:95:9c:81:9d:a2:0d:27:
         1a:23:80:c9:d8:ee:5d:33:a9:3d:06:44:a7:e9:e5:48:cc:ef:
         af:32:fe:58:f6:4c:f4:1b:8c:14:f7:cd:20:fd:b0:f2:a9:4d:
         7b:23:dd:75:3a:ab:f0:54:8e:f6:fe:54:0b:c1:53:52:8c:a0:
         d2:74:9e:4b:b2:1c:bb:62:c4:1c:7b:4d:2b:8b:eb:b1:6c:f8:
         b5:9e:e8:be:fa:82:33:dc:53:ea:45:5e:73:0c:72:58:23:71:
         bc:2d:f4:d2:03:6a:69:f7:8f:2a:ec:4a:a9:60:aa:e8:6c:da:
         76:2d:63:b4:ee:fb:75:6a:3e:09:ef:97:24:1a:a0:e4:89:ec:
         8e:b0:b7:98:65:f2:88:d7:32:24:2b:29:c3:02:9f:c1:67:28:
         05:3b:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----