Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
File:                     jw23m-h704ZVurcDpg53TE1sI1c.cer (raw, json)
Hash identifier:          VplIVPlabRNKtgreZnLLE5KxCsjsBorxyexSYbPkwNA=
Subject key identifier:   8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B40E4EF005F35281F5AD4A52D45912
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197138
                          IP: 91.206.50.0/23
                          IP: 2001:67c:354::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:0e:4e:f0:05:f3:52:81:f5:ad:4a:52:d4:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:53:88:c2:10:4f:bf:71:10:18:de:81:75:
                    f9:b7:b4:7b:d3:11:0b:4f:c9:8f:ed:73:15:78:0e:
                    b0:ae:27:ac:08:ef:18:8e:8f:6f:3a:8e:d3:82:2c:
                    2d:92:cf:4d:0f:c7:59:6d:ef:bc:c4:b1:09:b9:d3:
                    c5:2a:a8:3e:fd:aa:4b:ce:30:d7:44:a8:59:4f:94:
                    dd:3c:ab:d1:c2:3a:06:d3:14:d8:73:09:9a:08:05:
                    3c:73:ad:a5:ad:d4:9d:4c:b5:6e:d7:52:03:72:33:
                    4a:17:cd:3f:b5:f4:13:aa:80:32:63:9c:dc:d1:7f:
                    69:3b:34:ba:ec:64:fb:11:2d:9f:e0:69:6e:fe:77:
                    63:2c:25:b7:b0:ed:ab:d6:0a:14:df:9c:d2:b8:fc:
                    26:3f:7f:2a:83:e0:7e:e3:1d:76:30:84:b1:4b:4f:
                    a4:1f:9a:fa:51:2a:82:b4:39:5e:a8:02:01:99:d3:
                    8d:3e:fb:ea:ba:24:ad:fb:3f:4f:f3:0c:57:01:10:
                    fb:20:a8:df:bc:3b:31:c1:80:dd:0f:58:ab:e2:9b:
                    24:44:70:4a:59:37:63:84:b6:e1:5e:98:f4:90:2b:
                    99:d0:7f:06:33:db:05:67:cd:e6:8e:24:4b:2c:d5:
                    85:6f:42:d5:50:c4:bb:bc:15:26:7b:3e:f2:b6:58:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.50.0/23
                IPv6:
                  2001:67c:354::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197138

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:96:67:5b:0a:86:13:48:e8:12:cc:ce:a7:98:b3:56:38:
         4d:8b:60:e0:df:fa:c9:d0:22:00:31:94:06:f9:5a:84:5e:9b:
         5c:fd:ad:4a:e0:99:8c:17:ab:da:51:bc:32:ed:85:27:59:42:
         89:33:7e:bc:f4:9a:76:0b:b7:68:f2:35:a5:17:0c:bd:09:34:
         d0:bc:c9:c7:c0:7a:32:19:d8:27:87:4e:3f:b1:a0:61:8c:35:
         30:1a:64:13:c0:fe:fd:98:c0:c5:dc:5b:ba:1e:05:9f:96:a6:
         b3:cf:d8:93:1e:f0:78:bb:aa:4e:56:03:db:6e:a9:89:8b:6d:
         ba:23:7f:ed:da:06:f7:a5:c0:62:a0:a9:21:7a:1d:1d:b3:21:
         21:26:93:f6:fe:ad:00:cd:ae:a5:65:85:54:a4:83:fa:61:e0:
         b3:ee:06:e1:0f:94:06:0c:f8:e1:10:bb:29:8c:81:4e:52:f2:
         cc:f3:9c:16:d5:64:3f:47:10:db:e3:3b:d3:09:42:57:79:2e:
         45:f7:fb:66:f9:75:5f:1f:2e:ea:aa:66:bf:b3:bc:ef:30:31:
         6e:34:f6:5c:ff:c9:14:5a:18:b9:00:de:30:b7:99:57:81:e6:
         bf:23:ab:91:81:08:ab:05:ca:f2:77:77:22:d2:5a:44:90:b5:
         c0:57:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----