Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
File:                     mXpkd92XDJSyoXtSUCmC1Px1skQ.cer (raw, json)
Hash identifier:          HIGsf1sFvrWWGZh6vscOXyDdtkuqYldhzZydzvZH6sw=
Subject key identifier:   99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6C29241C4EC9A8270255372696EE5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215444
                          IP: 193.242.185.0/24
                          IP: 2001:67c:ee0::/48
                          IP: 2001:67c:ee4::/48
                          IP: 2001:67c:ee8::/48
                          IP: 2001:67c:2c30::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:c2:92:41:c4:ec:9a:82:70:25:53:72:69:6e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=997a6477dd970c94b2a17b52502982d4fc75b244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:18:be:f5:10:13:ae:0d:2f:ed:c6:66:ca:
                    80:58:12:92:6e:b7:e7:07:40:50:89:5b:83:20:d5:
                    c5:8e:c2:42:7d:f5:84:c8:7f:4b:06:20:c2:12:9b:
                    c9:fd:21:73:72:a2:56:9a:fd:1a:75:b3:98:81:09:
                    1c:b2:0f:78:4a:12:18:76:60:d1:34:94:fb:dd:c5:
                    0f:a5:1b:e3:13:b9:f4:c9:6c:56:88:29:fd:0a:90:
                    71:ef:4c:97:12:74:8d:ae:47:39:f4:0e:a7:10:78:
                    ec:ca:61:db:3e:e5:9b:dd:44:58:d3:9b:a9:e7:65:
                    6c:71:d5:7a:ed:5f:96:db:e6:df:85:bc:39:37:dd:
                    c6:9d:69:02:19:b3:e5:14:d1:72:37:a3:f0:83:05:
                    1b:af:32:ed:86:b1:0e:07:db:bf:5f:fb:56:36:15:
                    c4:72:ac:2c:4f:7f:bb:d5:d4:30:51:3a:f2:1f:ae:
                    da:c5:9c:10:08:b3:5f:65:c0:57:9d:4a:0a:fc:bf:
                    b3:9a:0e:68:88:17:99:6f:41:df:3c:24:1d:fd:8a:
                    df:d4:55:7a:1a:98:f2:f8:4b:16:4e:da:78:40:41:
                    50:53:9a:4a:ca:c4:cb:fd:93:6e:d6:b8:1b:e2:df:
                    4d:95:12:c1:26:98:5d:70:d8:57:fa:9b:bb:18:a2:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.185.0/24
                IPv6:
                  2001:67c:ee0::/48
                  2001:67c:ee4::/48
                  2001:67c:ee8::/48
                  2001:67c:2c30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215444

    Signature Algorithm: sha256WithRSAEncryption
         52:db:ae:45:09:13:60:8d:47:bd:f2:4c:0a:82:ce:1c:3f:98:
         d7:fa:16:2e:39:61:f7:20:c7:30:67:e3:af:24:46:69:ef:03:
         60:a4:6f:ff:3c:ea:97:ab:17:21:8b:67:5f:f9:0b:aa:51:ad:
         71:a2:62:d5:88:3d:db:43:be:7f:52:db:53:ac:39:b5:cc:d4:
         3e:34:e9:6a:3e:40:f8:68:3c:f0:13:09:8d:ff:42:64:3b:88:
         8d:01:a2:09:8f:52:00:9a:10:1f:a8:12:90:2b:d5:0b:1e:86:
         c7:b7:ad:81:3b:1c:02:7c:45:2e:23:1e:bf:7f:71:76:21:15:
         7c:5e:52:43:9b:7d:af:cb:f7:35:14:db:24:5c:6b:a5:c3:35:
         5b:ad:fa:a1:7f:83:72:97:f2:46:9f:26:6f:49:43:b0:92:f0:
         75:5f:a7:9a:2b:cc:65:14:7d:c8:18:50:8f:65:cc:af:5a:65:
         15:66:65:94:c5:e6:94:85:fe:5c:5c:3f:5e:a7:cf:ff:36:af:
         6e:b6:71:2c:95:fb:59:ab:07:a3:e4:b5:27:0e:41:79:fb:16:
         88:75:68:2f:a0:dd:b3:df:12:b2:d2:ab:c8:cb:45:25:c5:bb:
         e6:22:0d:90:5f:5f:8f:c4:11:b2:31:52:e5:87:5b:cf:5f:19:
         60:c3:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----