Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
File:                     j_he_yRIxzZG41Sv6mQbz3nnx_k.cer (raw, json)
Hash identifier:          Xi3tgWJSI2XpJEHroV3+X7Zafns7NYwozJAoQGUSnK8=
Subject key identifier:   8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369E0AA41FB710C970E593834D4F770
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197838
                          IP: 91.228.8.0/23
                          IP: 94.154.16.0/21
                          IP: 2001:678:a74::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:e0:aa:41:fb:71:0c:97:0e:59:38:34:d4:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:6e:df:f0:85:e8:76:00:31:5f:da:e9:69:
                    76:1f:63:a0:85:ae:24:d2:3e:83:79:75:17:66:1a:
                    9f:9b:b0:17:67:7b:b2:e5:5e:b6:4b:ae:52:58:c4:
                    b3:db:4a:89:5b:2b:a6:dc:23:51:2a:9f:a7:f9:df:
                    93:74:a5:0d:41:53:a9:8d:f5:22:c1:28:cc:c1:0a:
                    ed:2b:d9:e5:54:f1:2c:dd:f0:7c:c7:75:b7:64:47:
                    a0:d1:71:f5:f0:03:ce:79:67:de:cd:fb:94:cc:aa:
                    f2:7b:6f:0e:b5:1b:2d:c8:a5:f8:5c:ef:3e:7a:a3:
                    6d:b6:5e:4d:87:35:a8:f2:38:f0:2d:41:7d:2f:f0:
                    82:da:46:71:38:4b:c9:96:43:f1:fc:e3:6c:10:0f:
                    2c:8f:20:63:f3:54:2b:f0:fc:d6:f8:a4:f0:cf:66:
                    f9:97:0a:4c:c7:9b:41:88:55:cf:ef:de:1b:3c:02:
                    04:06:a6:b3:65:7d:95:76:f7:58:f9:dd:5e:7a:c3:
                    7e:63:c7:17:2b:4e:44:55:bc:59:3c:bd:ef:21:52:
                    43:ee:95:89:81:b3:60:39:6b:27:d5:45:18:8f:80:
                    c7:c3:e3:17:79:ac:82:83:23:3f:71:ba:d0:c8:07:
                    cb:83:ca:14:fe:b7:7d:ac:2a:0f:50:46:af:64:d0:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.8.0/23
                  94.154.16.0/21
                IPv6:
                  2001:678:a74::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197838

    Signature Algorithm: sha256WithRSAEncryption
         84:fe:a4:e5:19:02:09:8c:65:db:31:2b:f3:42:3e:7e:61:d3:
         17:1b:2d:4e:5c:a2:eb:1f:38:92:18:bc:54:dd:36:ed:b3:94:
         79:58:01:e2:c3:02:fd:9a:1f:b3:f6:e6:49:fb:80:eb:ec:11:
         f7:cf:5f:60:82:f9:ac:28:02:86:38:16:09:68:51:af:58:5c:
         f5:48:18:fa:b8:91:67:cd:4a:16:6e:c1:0a:6a:a9:61:49:cd:
         c2:1d:94:8a:3a:b9:2c:6e:2d:f2:a2:f8:2b:05:af:de:ca:a0:
         a4:d1:55:bd:92:f8:b9:e5:e8:ea:91:60:e1:ed:c3:49:4a:b1:
         2f:cb:4f:3f:a3:ce:79:14:93:56:a6:1d:68:fc:cc:48:27:68:
         e2:7d:78:02:44:77:84:e6:de:2c:5a:b6:49:45:c1:89:ff:69:
         43:70:9b:35:97:4b:1a:4d:f5:f0:be:76:a5:bc:54:f3:67:84:
         71:3e:20:81:8c:c5:91:54:0c:94:01:7a:b2:d4:1b:4f:a2:7e:
         90:4d:2d:eb:62:70:83:74:a7:98:c8:d1:f8:6e:d1:5f:af:32:
         18:79:42:60:98:43:7a:25:8c:9a:4b:c0:d9:70:9c:cf:f3:63:
         ee:fc:51:88:fd:70:62:05:9e:e9:14:03:55:91:52:4b:fd:37:
         4d:bb:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----