Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
File:                     mR5LF54JU7nsxYWtmFmgC-NWgAE.cer (raw, json)
Hash identifier:          HWIrp8QGaf3extve72lnFEoynPwpWWfPdtmj6ErevwI=
Subject key identifier:   99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423699AA96CF852FF03B706D87F60C5DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8726
                          IP: 81.21.192.0/20
                          IP: 185.73.60.0/22
                          IP: 2a00:85e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:9a:a9:6c:f8:52:ff:03:b7:06:d8:7f:60:c5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=991e4b179e0953b9ecc585ad9859a00be3568001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:37:db:58:cd:70:e6:95:03:6f:bf:f4:04:
                    35:8f:c8:8a:66:91:4b:a6:3c:03:7d:35:23:61:d7:
                    bf:87:35:2a:60:36:58:3d:f8:62:88:ca:06:21:0a:
                    0b:06:c5:33:b5:93:e2:9a:2a:7b:60:45:ca:df:41:
                    04:7d:86:18:1a:3c:e8:98:d9:72:ba:f9:83:be:ab:
                    27:96:7e:3a:15:d2:8f:37:e8:db:1b:f1:96:33:f6:
                    dc:89:8c:4d:6d:68:4f:56:6b:2f:2d:cc:f9:9d:97:
                    26:a6:d8:86:3d:b5:c7:92:bf:46:fe:50:73:08:23:
                    de:a4:2f:ca:19:1a:f6:bc:40:d6:fd:8a:17:e6:51:
                    71:38:2a:01:2d:47:25:be:7a:f6:19:70:62:c2:80:
                    fb:67:8b:bb:1c:8b:3e:d8:45:13:c9:69:20:e5:84:
                    22:a1:e7:e7:d3:51:c4:4e:b8:e6:bf:2a:a8:6a:49:
                    5d:59:08:2b:b4:6f:4f:f2:72:71:3d:01:ae:11:74:
                    47:64:be:4b:cd:13:1d:87:b3:18:1d:ed:ea:da:8a:
                    13:72:ee:56:56:91:00:c2:5d:1a:0c:4e:72:c7:2c:
                    f8:e9:98:27:36:d3:9d:9d:c8:13:e9:b6:01:a7:8b:
                    c4:d8:53:d7:b5:b5:b3:dc:36:a8:b4:57:5a:02:5d:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.192.0/20
                  185.73.60.0/22
                IPv6:
                  2a00:85e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8726

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:41:f7:ae:5d:29:d4:ea:47:97:19:f6:56:f9:a2:7f:a3:
         f4:a3:ab:50:07:f1:d7:79:d1:79:24:a9:cf:4e:03:6b:21:ef:
         1b:f5:f0:c8:45:ad:7c:dc:4b:84:aa:7c:72:a2:03:82:3d:9b:
         d7:7d:ee:6f:3a:94:33:7e:6d:d3:04:60:0d:b7:88:53:33:5c:
         ef:56:c5:aa:51:82:78:55:91:2b:95:48:e5:af:28:50:b4:1f:
         36:ee:d1:5b:67:60:93:07:03:e5:52:a0:4f:59:70:c8:ea:20:
         14:e3:48:d8:58:a6:ad:d0:df:72:85:fc:a4:02:28:cd:53:c2:
         a0:6f:85:69:8f:89:8f:7a:ea:5f:05:a0:23:ef:7f:c2:0f:ff:
         8d:8b:2b:c0:9a:94:3d:93:00:3b:40:b4:1e:67:c1:94:38:8f:
         54:5c:fc:06:6e:fe:18:79:24:b3:c1:96:54:3b:58:87:5b:42:
         0a:a9:96:fa:9c:a7:78:d1:dd:c2:27:ff:54:ba:bc:4b:85:12:
         6d:64:db:78:2b:7a:75:15:d2:24:83:4b:4d:d5:01:8b:9b:84:
         f3:a8:d2:d0:5c:8a:76:a5:70:bd:28:e5:aa:de:ed:58:e1:33:
         f6:f2:3c:85:16:af:85:4a:10:60:78:97:ea:92:66:b6:f2:2a:
         cf:8c:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----