Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
File:                     k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer (raw, json)
Hash identifier:          DNTMn8LqxYtESI/Uq7ON1XyQjhtvZkoZVulFEnlU0tQ=
Subject key identifier:   93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143CDBCB813CAA2A3C0850CA8F79783
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44612
                          IP: 185.214.24.0/22
                          IP: 2a0b:9440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:cd:bc:b8:13:ca:a2:a3:c0:85:0c:a8:f7:97:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=935c42857e302feb14017301e43c39fe45e7f629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:35:ec:7a:fe:7a:9e:a4:89:75:f3:48:2c:
                    a7:da:fc:54:3c:31:c4:ae:62:48:4c:b5:f5:30:af:
                    28:43:d6:72:7b:56:04:5b:fa:cf:f4:85:6f:90:d3:
                    83:7b:ba:64:c1:20:1f:35:4e:99:07:85:9e:9b:10:
                    e2:40:fb:2c:27:32:6e:b5:b1:22:89:f1:7e:0a:86:
                    ac:c2:44:96:97:14:84:8d:83:54:71:a0:5b:5d:af:
                    23:15:59:bb:60:55:ce:f5:e5:e6:90:11:7b:98:1b:
                    3b:9f:01:5c:59:1e:8f:8e:01:b4:12:3d:c4:12:83:
                    0b:b7:ac:22:37:89:6d:a3:e4:9f:3a:f8:d7:03:8b:
                    9b:89:0a:1a:49:d5:3b:1e:2e:b7:cf:c2:b9:e0:8a:
                    b4:9a:54:4b:f4:37:41:44:78:83:70:3f:56:03:ad:
                    31:6b:98:45:8f:cd:91:bb:92:d3:8c:d0:d7:67:0d:
                    69:b3:a9:45:45:b8:dd:92:d1:23:7e:65:cb:ba:39:
                    8e:aa:31:8b:48:ce:77:79:a6:0a:ca:ea:7d:68:8a:
                    f4:e4:b9:b3:34:04:c0:ad:80:ab:19:31:af:67:40:
                    4c:f9:ed:92:bc:a9:be:a2:f0:ef:6a:69:6a:e7:2d:
                    de:ef:9a:44:6f:01:21:3b:ed:81:86:69:c9:11:13:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.24.0/22
                IPv6:
                  2a0b:9440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44612

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:67:d9:77:ac:fd:d1:47:b9:fd:0a:b9:cf:e3:ed:a6:d6:
         09:82:88:02:d8:7c:dc:5f:89:93:da:33:fb:91:23:06:ec:e0:
         35:09:6e:43:f0:5c:e8:be:ec:33:c5:e4:29:04:87:15:2c:95:
         3c:30:35:e3:29:aa:50:22:0c:84:08:72:32:d3:0d:17:74:6c:
         83:17:a3:5a:f1:df:b3:95:e1:a1:96:c3:17:ce:64:df:b2:34:
         5d:e2:0a:ac:bd:f9:2d:cd:9e:90:92:f5:6f:fd:eb:bf:e4:38:
         9d:19:6b:05:94:50:8d:8e:bd:55:bf:85:cf:d6:17:24:e8:5b:
         9f:59:af:d2:a7:83:8e:73:30:98:ec:87:dd:bf:9f:5c:f7:9b:
         d7:d9:2e:39:94:92:43:11:7f:8f:0f:52:2c:86:77:53:76:37:
         ab:48:23:26:43:ca:97:c1:db:7b:f5:bb:ff:ad:2f:c4:eb:f4:
         2a:66:59:e0:49:ee:a4:7c:7c:ec:b7:39:ce:52:4a:f1:4d:72:
         1a:c9:60:fe:98:bb:4a:09:ba:e3:30:2c:02:31:ed:e8:11:99:
         fc:51:b2:1f:32:7b:92:ef:22:fa:9d:54:67:fd:db:25:df:4f:
         bb:d3:f1:fa:43:01:96:9b:fa:77:44:6e:35:28:5c:3e:d8:87:
         0f:6e:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----