Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.cer (raw, json)
Hash identifier:          zJ4jerHoI/hY5BXXyfgWIEZq5kqtWFBzcMUMpeJ47ho=
Subject key identifier:   98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB01C5705DEB9E7F937017F1673DDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51484
                          IP: 46.45.64.0/18
                          IP: 2a03:24c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:01:c5:70:5d:eb:9e:7f:93:70:17:f1:67:3d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:85:ef:35:02:0d:0d:b9:7f:3d:14:22:fb:
                    7d:37:c7:d2:f7:1d:a5:12:69:c5:2b:1f:eb:93:e3:
                    62:00:19:5d:08:83:77:6c:2c:89:cf:a9:77:70:60:
                    39:82:bb:29:33:8b:16:7c:34:3c:f4:98:88:a8:12:
                    05:9d:71:04:8b:9f:24:8b:08:f6:6e:7c:41:71:b5:
                    d3:17:e7:26:36:4d:75:91:36:ae:4d:7d:7d:90:07:
                    b5:4a:1e:67:32:67:07:3a:e2:7d:34:ad:3d:ed:f7:
                    a6:c4:8f:6b:aa:94:91:e6:b0:9e:fd:08:50:3d:8b:
                    e2:bf:eb:3c:8b:31:dc:31:b0:3f:a3:84:ba:79:dd:
                    87:33:c2:72:dc:2b:dd:e9:5e:f6:e3:85:6c:1d:2b:
                    69:91:7c:f6:f2:3f:46:4b:6b:70:fb:52:9c:d2:42:
                    7b:04:84:d4:bd:95:00:57:93:44:8e:94:12:db:a8:
                    1f:a9:ca:18:f2:4c:98:a6:41:b4:29:64:59:3b:04:
                    ba:d4:39:ac:5c:55:76:df:7c:78:c6:c6:e4:30:07:
                    d5:8b:09:97:69:00:3b:2b:2c:f9:10:f5:8f:2a:55:
                    ad:8b:a1:59:37:87:0e:2d:93:75:77:6e:3c:1a:85:
                    08:a4:9f:95:e7:f0:a4:09:21:24:5c:f8:12:c2:7b:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.45.64.0/18
                IPv6:
                  2a03:24c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51484

    Signature Algorithm: sha256WithRSAEncryption
         10:f7:5f:f5:3d:26:9c:ec:43:85:e6:ab:0a:98:bf:cb:94:79:
         9e:b8:13:c7:6e:fc:ab:88:34:75:c2:d3:eb:73:67:a1:a3:d0:
         96:88:0f:99:c4:28:17:de:bf:b9:a3:03:0c:b9:7e:cd:6a:19:
         8f:41:11:9d:f2:de:1d:a5:05:6c:5c:f1:c2:45:c7:a8:26:4c:
         cc:a4:9e:fd:0a:fd:20:6b:80:79:ce:98:58:38:0a:cd:72:05:
         d0:73:bf:48:a4:2b:57:27:40:71:3e:a4:b2:fc:d8:d6:e8:00:
         54:96:53:a6:cd:1c:b8:13:c6:d8:5e:ba:6e:97:34:19:4c:ed:
         42:3f:2c:7f:13:d1:c7:e4:f4:07:c6:37:9c:46:f1:98:a7:ac:
         bf:5f:1a:fc:6f:83:a0:36:a0:0f:87:fa:4e:58:5c:2b:7f:30:
         be:50:14:c8:50:aa:a3:17:2a:17:21:b6:ce:12:1d:2c:ed:11:
         cd:90:cc:0b:22:23:67:7a:b0:07:00:59:f5:59:ad:c8:74:be:
         55:e5:10:66:ee:92:b1:ee:71:2d:aa:65:21:60:15:18:bf:43:
         ca:05:a6:00:a0:98:47:e8:f3:8e:3e:e7:6c:43:14:61:f5:a6:
         0c:03:28:a0:a8:6f:70:6f:42:ab:44:00:1f:61:33:37:a6:a1:
         54:17:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----