Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
File:                     kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer (raw, json)
Hash identifier:          OxdhuZdrrQTh4dGVGfxGBfv9XWNFUgAvICPk9Ffbqz8=
Subject key identifier:   90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067D334FA4BADF80791FD106CC4914A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205704
                          IP: 185.200.148.0/22
                          IP: 2a0a:b0c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:d3:34:fa:4b:ad:f8:07:91:fd:10:6c:c4:91:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:a8:a3:fc:31:c0:d1:ec:18:4c:70:44:23:
                    af:1a:b9:52:fc:65:af:5b:ad:58:81:d1:bc:29:48:
                    c9:aa:ca:75:f5:11:c4:81:75:bd:bb:8f:fd:59:84:
                    ac:d9:a7:62:fd:09:da:bc:9b:60:12:c6:4c:c8:41:
                    83:24:1d:c1:20:96:7c:08:a9:77:c1:f2:82:d2:af:
                    07:7b:a9:b5:f9:8e:a5:22:7d:7b:98:f9:91:22:21:
                    17:6d:68:14:cc:15:80:87:3f:14:3c:f2:79:38:3e:
                    f5:e2:d9:c2:c4:0e:ca:65:8f:1d:c0:fe:fa:8c:c0:
                    47:ec:a0:ad:89:c1:d7:1d:84:ba:62:e9:1a:0f:ab:
                    f9:cf:64:7e:14:d7:59:3c:03:d6:6b:84:9e:c6:c8:
                    62:e8:af:f9:ba:e6:e0:0b:74:01:1c:92:3b:3e:f3:
                    b4:8f:4e:f3:80:43:a3:76:2d:da:d0:1a:4b:eb:db:
                    5c:aa:f8:ec:58:05:9c:c7:b2:c8:a5:1d:ea:a6:70:
                    69:7f:4b:05:a1:8e:8a:94:e9:07:17:9a:e5:f2:be:
                    d3:ea:1e:c6:0b:3d:5c:44:ec:16:0a:e3:39:e4:b0:
                    1e:ca:b8:99:2f:bb:4b:37:b9:c5:8f:dc:22:22:e1:
                    13:7b:71:ae:56:0d:5f:37:e6:ec:92:ac:db:62:18:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.148.0/22
                IPv6:
                  2a0a:b0c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205704

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:de:c4:6d:84:2d:9a:b6:f6:fb:21:cd:06:60:fc:5a:7e:
         a1:37:29:f1:4a:0c:e3:4b:cc:1d:3a:06:2d:e1:b5:f7:97:cb:
         16:95:f6:0c:09:6c:de:d0:be:d2:8e:76:de:75:de:bd:9c:f0:
         65:31:a8:3e:f4:ac:74:32:ad:ba:e1:5a:74:54:a3:1e:9b:a9:
         57:25:31:71:1e:2d:f0:ea:62:52:0e:5b:21:f7:f5:61:24:de:
         77:ac:d0:6d:9b:40:3c:46:81:67:73:79:6a:9d:43:7c:01:30:
         e5:ac:e4:97:ea:6d:fe:6b:91:a4:a8:58:65:cf:c6:5a:67:04:
         0d:3b:10:93:4f:10:c4:12:d4:e4:7d:27:d6:34:14:18:8a:40:
         85:23:a2:9e:5e:f3:27:57:da:95:e3:4a:34:c8:01:07:84:e6:
         e4:bb:fa:db:1d:18:b8:09:b3:9b:6a:39:6a:b4:24:df:98:94:
         14:13:8e:69:23:9f:d9:e7:66:62:52:29:ea:0d:5f:2d:54:b4:
         5d:7e:41:7b:80:5a:47:ba:ae:1d:f6:35:25:1a:d5:aa:be:46:
         19:72:9d:40:82:a2:b0:35:c9:cf:1e:65:c4:e7:52:12:13:80:
         10:3c:aa:e0:0d:89:da:2c:08:cf:c5:ff:47:d8:f8:f9:a7:8a:
         30:ac:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----