Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
File:                     jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer (raw, json)
Hash identifier:          4v/dhqIZeiUSFHm3mve6dLRSab9kv8Zh7CXdrrFVT24=
Subject key identifier:   8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D602137E7F07A8F11F51F80F8D02D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205493
                          IP: 185.215.192.0/22
                          IP: 2a0b:ad40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:02:13:7e:7f:07:a8:f1:1f:51:f8:0f:8d:02:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:c8:6f:20:3e:36:47:27:ab:cc:24:57:73:
                    a1:ba:10:ae:15:9a:73:1d:14:76:75:93:ad:32:2c:
                    55:d6:dc:16:9b:86:02:d4:42:cf:0c:94:bb:74:0a:
                    5d:32:d4:06:c2:ef:22:0e:7a:b9:15:b7:04:12:78:
                    33:43:0f:38:58:72:54:25:dc:28:df:bd:9f:13:72:
                    a4:38:41:3a:dc:18:8e:68:6e:62:ec:a2:bd:38:ee:
                    16:f2:25:51:6a:e1:d7:55:b3:8f:47:f6:ac:54:df:
                    7d:49:e5:4e:c7:4b:dc:53:56:4f:7f:0d:be:8e:bf:
                    9d:e2:f5:60:79:41:69:2b:e4:e7:01:fa:8e:aa:d3:
                    8e:29:d6:85:9b:9a:ac:d4:65:a9:96:96:8d:ec:27:
                    e0:3a:5f:95:51:33:af:05:cf:38:94:bf:91:4e:cb:
                    4e:dc:d3:77:d7:78:fe:e8:40:2c:40:d6:11:ab:47:
                    3f:ca:da:6b:73:f3:4f:74:7b:29:60:7f:3c:ac:45:
                    5e:a9:9b:82:c5:75:c9:74:79:bc:5f:a0:60:d7:37:
                    c0:cd:bc:15:3e:11:01:57:82:a7:49:d2:27:e2:8f:
                    72:10:e6:2a:e5:19:38:26:27:c5:22:fc:b2:6d:aa:
                    67:45:9f:76:90:cc:e0:6b:0b:a6:02:4d:a5:36:c8:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.192.0/22
                IPv6:
                  2a0b:ad40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205493

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:be:11:63:89:04:b1:70:fa:77:5b:5f:4f:9a:1e:ed:b4:
         a7:aa:e2:1a:9b:c5:0d:92:f0:5d:2f:4b:28:e0:f1:75:e9:93:
         1b:41:e9:f2:fd:f8:98:ca:30:d3:60:94:01:30:a6:68:d7:6c:
         b7:f6:70:1c:8a:30:6d:f8:24:07:12:d8:7a:29:b3:6d:49:d0:
         07:23:fa:e6:de:d6:a8:1c:a2:f5:d2:2f:59:32:11:bf:83:44:
         2b:27:38:47:74:4d:00:5c:27:5e:7d:7e:8c:1f:21:ff:d1:4e:
         01:86:0d:1e:dc:30:52:9c:0b:c6:4f:fd:d8:6e:09:9b:bb:a1:
         e2:ad:c8:c9:29:ce:ca:e9:e1:6f:74:3f:38:23:2e:9c:40:ae:
         0b:15:da:ae:39:08:8d:7c:ac:ab:ce:cb:9d:c4:2b:bb:88:ad:
         76:1b:8d:18:93:e7:e1:45:9d:ef:d7:80:94:4c:ac:88:14:ba:
         3e:39:79:bf:05:9b:53:c9:07:4a:d5:84:88:ee:68:f8:86:a5:
         bd:d8:2e:f0:f9:ca:33:d1:c0:e3:65:53:0f:57:99:55:78:6e:
         77:aa:18:4d:b8:25:c1:99:97:5e:48:25:c7:26:c3:19:7e:71:
         3d:6c:8e:f4:2b:e7:4e:75:9a:e3:5b:1b:13:f8:ee:99:c5:ab:
         1d:61:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----