Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.cer (raw, json)
Hash identifier:          TfmpkTOmLyOWtmSsKKYKemwSGflw5U6Y+O7QoY2TUFs=
Subject key identifier:   A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443206B4BF9A3F566060B17BF2E344
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203206
                          IP: 185.204.101.0/24
                          IP: 2a10:8400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:32:06:b4:bf:9a:3f:56:60:60:b1:7b:f2:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:f2:36:f2:41:56:81:84:96:df:ff:06:28:
                    50:17:e0:82:f6:6c:3e:c5:3f:5c:c9:c5:8c:04:74:
                    9e:4b:15:34:98:78:99:ec:b3:4f:c6:8c:a7:32:56:
                    e6:20:c3:af:1f:b3:b1:1e:b9:bf:89:2c:bf:1c:8c:
                    aa:50:42:18:a6:ee:a8:0d:f4:b8:40:96:c8:11:2c:
                    c7:1d:c3:b6:6b:e3:51:be:9c:57:a6:a4:2d:99:2d:
                    3c:83:e8:28:63:7b:4c:65:22:d4:a6:9b:47:ba:39:
                    ad:eb:f0:8c:9a:ac:4f:c7:40:eb:a7:69:ce:99:ad:
                    bd:78:14:41:32:03:83:1f:af:06:07:c9:07:e8:e4:
                    ed:fd:62:47:41:26:96:3c:9d:64:6f:36:64:cc:ca:
                    8a:cb:48:f8:13:21:dd:55:3f:5a:5b:d7:55:bc:29:
                    78:b3:2f:24:69:92:35:4f:90:51:28:60:9c:66:ef:
                    1f:29:cf:7a:36:87:7f:74:60:99:32:44:28:c7:d5:
                    5d:43:04:8b:d6:42:e9:76:36:eb:c7:0b:94:f8:57:
                    db:f9:d3:a9:29:1f:0f:0a:8e:c1:44:1c:cd:d9:a9:
                    be:7b:2a:e3:4a:4f:5b:87:4a:45:73:94:f2:97:f2:
                    bd:4d:fe:fc:83:80:d3:6e:7d:56:c3:3e:77:cf:38:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.101.0/24
                IPv6:
                  2a10:8400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203206

    Signature Algorithm: sha256WithRSAEncryption
         6b:a0:d8:2b:8a:3d:5f:be:4b:ec:b7:bd:a2:d0:09:15:11:d2:
         80:ba:c8:6c:c5:9b:ef:4f:cd:96:9f:bd:f8:1e:bf:9d:5c:7a:
         19:06:a6:3c:f2:c2:1a:f3:2a:06:03:ee:69:ad:01:4a:fa:2f:
         07:02:d0:92:7e:74:65:c7:95:71:35:66:69:98:1d:4f:07:ba:
         4f:f5:94:0a:a8:c5:8a:97:e2:f7:dc:db:86:83:16:c5:33:e2:
         b6:57:34:91:99:a5:81:fa:a2:29:7d:ac:35:67:d8:0e:bb:2d:
         83:a4:83:6c:95:36:5b:df:a3:c6:bf:2a:0b:f3:fe:be:46:4e:
         d0:6c:f4:7e:c4:dc:ab:00:5a:84:dd:61:50:20:b9:c2:63:b1:
         29:2d:4a:b8:bd:b8:ad:68:e9:d0:01:19:09:a5:ad:29:ad:83:
         8e:5e:74:b4:f7:2b:c9:56:5f:a9:b5:79:58:69:52:da:75:64:
         ec:fa:c8:43:2a:e1:87:7b:98:b6:aa:dc:be:fe:4e:5f:80:07:
         23:c2:6b:89:d3:72:05:04:bb:8b:22:a9:22:7f:3a:d3:78:42:
         b6:3b:c3:77:21:8f:1f:2f:f1:b3:f1:8e:01:ee:03:76:cf:35:
         24:6d:8b:f9:a0:ee:c4:e6:f5:5a:f0:ca:b2:a3:bc:ea:e2:1a:
         d8:15:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----