Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
File:                     iTmr9x7sEMXZBgn8qfNMuF09VE4.cer (raw, json)
Hash identifier:          pEiCOkxAATKQb4Wr2TM7xwxibYCjHBcw6A3jfsVcOow=
Subject key identifier:   89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420680CA7AFE4C6E8AB50CFEFE6867E56
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210885
                          IP: 87.236.149.0/24
                          IP: 2a11:3d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:0c:a7:af:e4:c6:e8:ab:50:cf:ef:e6:86:7e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:96:f1:87:b5:60:bd:47:1c:ad:19:0c:ed:
                    7a:d1:27:1b:2d:31:99:de:2e:47:38:57:46:54:4a:
                    e7:39:c2:64:5e:2a:ee:4b:74:9d:44:8e:c7:1e:54:
                    11:18:03:8e:25:dd:72:67:f0:43:1f:bc:e5:5b:24:
                    ca:03:58:9c:eb:1b:0d:54:0f:55:20:b9:62:68:55:
                    1c:84:76:71:77:61:09:8d:a5:1c:69:02:97:55:01:
                    5b:d7:80:b7:b7:11:cb:98:09:13:f2:e2:22:6d:e4:
                    a5:0c:f5:18:a8:71:d6:ce:2c:71:fa:d1:ea:45:84:
                    70:13:55:34:b5:fc:35:b4:9b:aa:d4:43:89:db:c9:
                    8a:43:d6:99:48:ae:21:e9:8e:2d:8e:47:85:e5:03:
                    39:76:98:c2:26:80:0d:24:33:29:8c:da:81:bd:18:
                    6f:95:87:84:14:09:3b:c6:69:ef:0e:19:92:a7:e5:
                    69:7e:e2:34:89:d1:88:eb:b5:73:64:cf:4b:ed:17:
                    41:37:9f:51:22:1d:26:1e:11:10:bf:b1:62:e4:77:
                    98:ef:7c:bd:0e:9a:fa:3c:06:57:19:4d:90:7e:39:
                    7b:28:24:bc:97:8c:d0:83:13:22:69:a8:62:e7:d8:
                    8f:c4:e2:70:c3:a3:e5:c7:7e:1a:71:5d:cb:7e:98:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.149.0/24
                IPv6:
                  2a11:3d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210885

    Signature Algorithm: sha256WithRSAEncryption
         1d:7d:09:fe:61:d5:e6:54:a4:3a:5d:d4:63:4a:ea:c8:6e:cf:
         21:14:a2:4d:97:56:70:74:a6:e3:48:ef:a1:ac:28:d6:9a:9e:
         0a:e1:3d:f2:73:ad:97:e1:4f:f4:07:02:6a:b0:80:b4:b6:9b:
         ec:87:d1:a5:5e:9e:35:fd:0b:57:fc:87:42:6d:19:42:de:e9:
         07:22:f0:a6:7f:f6:2f:2e:6d:98:c9:83:31:6b:40:a4:66:2b:
         f9:3b:d1:27:2c:d9:2b:4c:97:20:e8:56:df:60:8b:28:ad:d6:
         c3:48:22:03:0e:c5:46:c6:23:39:e0:da:68:e3:40:1e:8d:f6:
         c1:b0:67:73:6e:1d:da:b5:59:80:5c:47:5d:d3:fc:97:93:bc:
         7b:96:ff:e4:5f:9e:20:74:ad:09:82:38:ac:06:75:cb:5b:96:
         5a:1b:07:e0:87:d1:04:31:11:e2:92:84:be:f9:61:5e:7f:6d:
         d4:46:cd:6e:1b:f7:59:f0:0d:5a:8a:4d:5b:b1:cf:d8:9f:8f:
         69:3d:c9:f1:cf:63:6f:35:19:06:d0:39:b3:3c:0e:20:33:6d:
         af:96:a7:4f:99:86:14:c1:fa:1d:7b:54:07:c0:64:32:a2:6d:
         85:fe:44:45:cb:ea:e4:d8:90:45:fe:1b:a1:0a:9b:76:51:de:
         2e:3e:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----