Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer (raw, json)
Hash identifier:          pEHjHMcAMmYFFurpaNiqSU2k2V8pkve9IVRdogVt5AQ=
Subject key identifier:   92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA611887B413B238D865F4584EA89
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8283
                          IP: 94.142.240.0/21
                          IP: 185.52.224.0/22
                          IP: 2a02:898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a6:11:88:7b:41:3b:23:8d:86:5f:45:84:ea:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:d9:92:0e:34:c7:89:29:2a:25:ee:b3:07:
                    5b:7d:0a:fb:1b:48:12:c8:ab:79:1f:9f:d5:a4:f0:
                    25:e1:a8:97:9d:2a:a6:c6:19:ad:ce:e8:a3:89:a3:
                    7f:62:42:73:a6:13:35:c0:67:5b:85:84:5a:ff:c4:
                    72:77:46:92:91:07:c6:0a:65:20:54:19:3d:90:d1:
                    20:91:73:2f:56:41:5c:ea:8c:54:a0:ed:50:84:03:
                    31:28:ff:bc:46:b5:be:6b:63:34:48:f9:de:cd:99:
                    b2:42:1a:90:25:40:89:1e:d5:59:42:83:e8:67:a5:
                    53:86:3e:ed:0f:01:12:17:51:75:fe:8b:d5:d8:14:
                    6e:97:8e:21:9b:69:f1:53:8f:25:9a:1a:b4:4d:c7:
                    33:1a:52:66:66:18:67:62:ed:83:6e:72:96:7c:62:
                    74:ca:69:9b:94:7e:5d:8b:b1:6e:b4:29:08:eb:d6:
                    a4:8c:32:94:8d:eb:f8:a4:68:2e:2e:7d:81:d8:bf:
                    95:c9:17:d4:ca:98:14:47:8b:a8:54:1e:49:17:46:
                    b9:7f:ec:ed:48:2f:0b:1b:25:74:a1:88:02:96:4f:
                    9a:7c:b0:8e:32:29:13:e1:a4:43:e7:ff:ae:5f:7d:
                    e5:9f:c0:6e:c0:0e:05:5c:e5:b8:a1:27:7d:4f:79:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.240.0/21
                  185.52.224.0/22
                IPv6:
                  2a02:898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8283

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:7e:0a:bb:34:e4:c6:21:34:1c:4f:22:e5:8f:59:c8:7a:
         2c:ff:d3:66:db:14:90:93:75:16:b7:f3:91:37:d4:53:2e:7c:
         2a:f3:45:b6:b2:fe:1a:72:cb:a8:04:3e:73:f4:29:ee:cc:55:
         4c:ff:17:eb:86:b9:f3:fb:5e:ec:2b:25:18:c7:12:f1:b0:c1:
         7c:3c:4c:4a:5e:aa:b5:16:6a:3c:6b:0c:ec:2c:02:12:79:03:
         53:fc:45:27:19:5c:f4:1e:6a:8f:94:9f:a6:48:a3:86:86:f0:
         4c:78:0d:d7:10:eb:9d:cd:b3:25:9c:0a:ff:77:65:3b:ec:33:
         af:22:b7:4d:2e:fb:76:3b:d8:29:a7:ea:40:9e:d7:13:e0:6d:
         03:25:cf:76:d2:2e:6e:8c:df:0c:9d:9a:09:8f:f2:e1:97:d1:
         d1:e6:8e:f2:51:47:54:37:1a:10:71:a7:22:83:84:ef:ec:9c:
         62:76:13:cd:0b:bc:9e:85:21:de:2d:7d:27:20:f0:f5:88:5c:
         28:69:b3:34:97:2a:4c:c6:63:42:c6:9b:2f:1c:96:b2:8c:e3:
         cc:53:02:50:29:b7:e8:77:11:5c:9e:71:58:31:4a:28:fb:7e:
         26:f7:e1:3b:50:1d:1e:3b:7d:2c:1c:2a:a9:6d:f5:fd:ee:60:
         98:95:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----