Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
File:                     ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer (raw, json)
Hash identifier:          qKoAFHkTEyF24A5AFhy8s3XXzYwJzGc1/D/nAl6MZ2o=
Subject key identifier:   8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424459A528F3D40870D377BB2AC5650BB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198370
                          AS: 201047
                          IP: 37.18.184.0/21
                          IP: 2a03:4960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:9a:52:8f:3d:40:87:0d:37:7b:b2:ac:56:50:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:34:9d:3e:82:00:3e:0e:b6:e2:01:73:f8:
                    31:30:cf:c2:55:2b:0a:32:ee:06:79:7d:0b:9c:24:
                    82:8b:23:74:35:86:95:96:ef:7f:ef:85:d2:4f:fa:
                    a8:c1:a5:3e:26:84:c3:ba:e4:63:57:3c:b3:22:85:
                    ac:e8:7b:12:be:b9:97:7a:14:a2:7c:78:9d:72:b7:
                    07:9b:16:ed:04:f7:ae:b8:e5:d0:18:c9:9a:7e:e3:
                    2c:8b:89:e5:47:07:e8:6d:84:66:02:f3:8c:a8:74:
                    3d:4d:64:cb:cc:11:5a:af:b0:42:89:c8:68:25:f7:
                    b3:03:5f:69:11:a3:95:6a:a6:d1:0c:67:54:99:d4:
                    b8:29:7f:f2:6f:fd:74:cd:cf:c0:9b:0c:51:89:07:
                    01:71:24:d8:4b:bf:f5:80:86:88:2f:84:1c:e8:73:
                    14:52:06:6b:ce:6d:08:b5:76:5d:15:c6:8a:cc:b4:
                    3d:6a:6f:a1:8a:e8:f6:e8:de:8d:10:e5:c6:55:84:
                    a7:f1:41:38:50:43:0f:5d:e4:37:84:47:ae:d3:63:
                    d4:62:37:34:31:9b:b1:ff:ea:28:24:44:9a:57:2a:
                    31:23:4a:d7:4d:0f:fe:a1:2b:7b:03:0d:c4:68:4d:
                    25:04:06:d6:eb:5c:fe:44:24:51:93:8a:c1:ba:0a:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.184.0/21
                IPv6:
                  2a03:4960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198370
                  201047

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:98:86:b6:d9:19:8d:87:07:b4:c4:12:57:8b:23:60:54:
         33:df:fb:fa:00:a8:ea:81:18:ec:c0:9a:09:36:b2:5f:de:14:
         9d:65:e3:98:9a:32:6e:9a:d9:92:cf:01:76:11:c1:9e:40:ce:
         84:bf:b1:cc:54:25:1e:7e:23:27:ff:7a:5c:ae:e6:81:b9:5e:
         fe:f1:78:62:8d:19:ea:29:f8:3b:70:95:15:08:7f:c9:4f:44:
         db:50:00:7e:28:22:d6:f1:c6:50:e1:41:0a:73:e3:0a:ea:44:
         17:18:f6:b0:fb:6d:cf:5b:d6:60:92:59:c1:4b:87:c8:0d:c4:
         11:4d:30:e2:04:0f:88:5d:a6:ca:84:36:71:66:c4:84:99:18:
         82:d8:9e:97:17:45:73:67:93:33:20:b5:aa:3d:05:d9:bf:b1:
         d4:70:d8:2c:64:dc:34:44:e4:f3:e0:b3:4e:66:10:65:1a:c3:
         22:54:f6:f0:95:30:ca:a5:2b:68:19:92:cf:d7:17:a0:bb:2a:
         2b:ac:74:97:df:a0:63:93:8c:b3:5e:01:f5:a3:a0:bb:18:92:
         e2:66:dc:53:a9:ac:4f:b9:11:75:b9:0a:b8:c3:fb:af:8c:bc:
         65:b5:4a:04:29:7f:14:ec:b9:fa:00:ee:32:8a:11:74:f3:c3:
         3a:0c:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----