Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer (raw, json)
Hash identifier:          DrRXaDLvVqtDLvoHgQylBJJtGoKgAhztUA070dnEeIw=
Subject key identifier:   86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143FD0D610074F5F06BC90C4DE44DDB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216380
                          IP: 91.207.205.0/24
                          IP: 2a13:c940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:fd:0d:61:00:74:f5:f0:6b:c9:0c:4d:e4:4d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=86623a8458eff347d424348588829ee137b45a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:6f:5f:c5:84:71:70:aa:9b:29:b5:dc:b6:
                    28:c5:1e:78:86:19:3d:e2:12:ec:85:39:c0:34:1b:
                    99:e4:71:5d:0a:8e:54:11:9e:b7:21:0a:f4:ff:4f:
                    f2:a8:e7:38:03:0c:da:f2:47:88:0e:94:dd:ab:f2:
                    b1:94:2c:d5:53:6e:6d:ea:29:a7:b7:47:19:53:d7:
                    4f:0b:2a:50:8b:80:cf:bf:62:66:77:0b:4a:09:45:
                    63:32:d6:43:5e:c0:7c:64:03:7f:15:39:e5:f0:fc:
                    6d:da:be:4c:44:90:5e:a4:c7:26:92:37:1e:25:f8:
                    d4:6c:8c:c6:a9:a5:23:05:44:aa:d4:84:91:12:68:
                    2f:b4:31:83:b2:f2:31:b4:dc:72:2a:82:d6:86:71:
                    8c:d1:6e:8b:8f:a8:24:e6:38:b7:d9:ff:f4:87:a6:
                    a1:13:50:3d:57:47:a3:12:12:07:1a:86:39:68:a5:
                    72:d3:87:23:96:a2:c5:bb:1f:ee:85:1d:c9:6d:4b:
                    46:1e:3a:0b:bf:5b:ee:47:24:bc:3f:7a:19:ce:33:
                    42:06:af:1a:2d:db:95:bc:c9:1e:21:63:b9:29:83:
                    6e:cb:a8:43:db:f7:db:ff:c8:bf:95:e6:fd:93:1e:
                    06:e6:5d:c8:96:8f:64:01:35:35:d4:f2:1e:c6:0e:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.205.0/24
                IPv6:
                  2a13:c940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216380

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:0f:de:2a:85:48:43:8e:02:88:ce:29:2e:2d:e4:1e:67:
         c4:5e:5e:1a:0e:4b:45:93:ab:07:67:8c:8d:75:79:46:55:38:
         73:9f:8b:b4:dd:2d:ec:6c:f1:93:8d:6c:dd:46:f4:a3:a2:c6:
         c5:23:03:d6:35:0c:bb:d6:51:6b:2c:3b:3f:99:46:6d:e4:9d:
         9e:af:36:6c:7d:56:f9:39:b9:60:af:4b:ac:28:ab:0d:37:70:
         49:39:8e:c3:6c:8a:9e:4b:0e:58:23:a6:d5:2f:a7:bb:a3:67:
         18:85:96:f3:1f:9b:c6:af:53:9a:28:dd:53:5d:ae:cf:3d:5b:
         a5:82:81:a6:c1:14:79:75:6a:f7:78:4c:4c:28:a8:0a:ef:ba:
         c2:db:35:b1:b7:6a:1f:2a:89:af:85:de:6f:52:d4:db:da:fa:
         b3:0e:52:b9:cb:22:32:3f:99:2d:74:c3:bf:3d:0f:68:e9:96:
         ec:cb:6e:86:de:05:8d:e9:11:fc:d7:1a:d4:d7:01:0c:9d:33:
         1e:38:93:57:c7:8b:2c:f6:88:5c:f4:44:fa:10:a9:a9:8a:64:
         e6:76:6e:d3:f8:14:96:59:26:ef:7a:87:1b:c6:7b:77:04:9b:
         56:b3:86:80:01:d2:ab:55:71:b0:2e:60:59:d7:fd:e1:3a:b8:
         17:c9:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----