Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
File:                     kR2gx6mUBcRrqthMudk-g0WZyOE.cer (raw, json)
Hash identifier:          p9AvCvKDHcEkdGoit7IMEios6u2WokuH+AuGqOB2s/U=
Subject key identifier:   91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444F16D4819F6CFD5CF5B7D3F709FB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201031
                          IP: 185.88.24.0/22
                          IP: 2a03:7d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:f1:6d:48:19:f6:cf:d5:cf:5b:7d:3f:70:9f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:8b:60:ab:26:65:da:2e:bf:32:d9:29:a2:
                    80:bc:27:3d:c0:f5:12:7f:10:28:2c:1e:d2:5d:4c:
                    7d:6d:23:58:00:ee:04:bb:42:b4:31:dc:b2:13:8d:
                    c6:b6:08:bf:bf:49:f7:0e:ce:de:c4:2d:a0:c4:96:
                    52:07:9d:43:82:d7:1c:41:69:df:db:c9:e8:26:2c:
                    a4:29:da:59:59:d1:26:6f:27:38:1a:d1:1f:98:7c:
                    30:9e:41:b8:e1:37:29:bb:e1:11:70:1f:2c:52:40:
                    b0:ab:b0:2b:1a:01:37:81:ff:6c:79:f3:48:ae:81:
                    8d:63:6c:dc:ca:75:22:e8:d4:b0:c9:cf:2a:59:22:
                    72:1b:f8:18:13:02:6c:6c:13:bb:7b:24:c4:be:1d:
                    1c:c4:94:a7:6b:f9:1e:fd:4a:98:6f:52:ad:6f:a7:
                    35:b5:15:f1:74:1d:98:a0:bf:28:0e:83:d7:5c:cc:
                    45:b6:2d:e3:5d:ea:6f:90:f9:77:bf:e3:b4:ce:b0:
                    8b:7d:ef:af:67:68:18:2d:c4:d4:6b:6b:b1:18:c2:
                    16:1f:57:18:ce:5f:f7:62:e5:2a:b4:9c:71:5c:3b:
                    fd:d6:57:af:e1:23:13:e5:43:be:71:68:5a:9d:50:
                    6b:4e:ed:48:c8:56:2b:09:85:94:c4:45:3e:ba:af:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.24.0/22
                IPv6:
                  2a03:7d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201031

    Signature Algorithm: sha256WithRSAEncryption
         56:71:0d:a4:b8:6a:7f:17:f9:a0:b9:b9:6d:1e:14:d8:68:4f:
         bc:7d:04:b0:63:29:6d:66:c8:c9:b4:ac:28:72:56:10:10:9b:
         4b:da:85:8c:64:6e:30:f6:00:34:b3:df:73:ab:82:f7:10:f5:
         1c:dd:af:06:52:65:a5:ae:20:a4:db:48:f2:26:7e:ae:d9:53:
         c6:d5:88:a0:c9:1e:72:3b:4c:41:ac:af:97:4c:04:62:2b:72:
         73:06:37:e5:1b:70:7c:0c:21:fa:c6:ee:02:b4:87:97:d4:07:
         76:d0:78:46:22:30:aa:bf:22:d3:7d:77:3d:8f:4a:86:9b:b5:
         a4:58:60:34:46:39:35:3b:8e:81:4f:cb:91:56:85:af:70:40:
         48:96:83:4a:a6:f0:28:35:42:56:9f:71:89:d2:97:29:3b:1e:
         18:1a:18:8a:d9:3d:55:90:a2:be:51:1f:6d:5f:56:b0:61:d5:
         2e:e2:1b:b0:00:be:01:31:ba:87:d4:6e:2c:b4:0d:e5:7b:49:
         5c:cc:73:7a:23:3a:3c:3e:02:1a:d4:19:9a:7b:7a:a2:07:87:
         f4:35:a0:65:d7:32:7b:75:53:03:1c:ea:6f:ce:56:77:a6:39:
         39:b4:14:5a:7b:ca:0c:bc:63:22:b0:fa:c8:92:dc:5a:b4:4b:
         3c:23:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----