Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
File:                     pAoIH7qPsz77RiWe-T9oeNcBUOs.cer (raw, json)
Hash identifier:          DbSk2Lub/GJvC4XcFUfJCq/Qnxwec9DXPvlI1/MZqf0=
Subject key identifier:   A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5D24EC842B2868CF63F13AAB11A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25238
                          IP: 195.234.204.0/22
                          IP: 2001:678:9a4::/48
                          IP: 2001:67c:2620::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5d:24:ec:84:2b:28:68:cf:63:f1:3a:ab:11:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:42:ed:0c:41:c7:5d:6d:01:2e:a3:13:84:
                    17:5d:70:11:86:fc:25:49:f1:f7:f0:32:46:52:3c:
                    fe:0e:73:9c:e6:a0:22:f3:af:ae:19:f0:eb:d1:78:
                    9b:4b:88:e4:ca:43:dc:ea:ee:59:91:80:b7:63:77:
                    5b:a1:72:ff:02:7b:8c:3b:be:63:95:be:d5:96:d7:
                    16:7c:27:f8:00:7b:c9:ae:24:14:91:f8:6c:a5:16:
                    4e:96:6b:70:09:bc:f9:71:8a:80:b1:e4:7a:94:ec:
                    dd:4b:40:2b:9b:23:87:d0:d1:95:85:ab:eb:4f:cc:
                    bb:9c:22:ee:3c:c5:c1:3a:5f:36:a1:17:65:a5:dd:
                    22:91:c3:a5:ee:ec:08:be:53:d0:06:0f:ea:55:37:
                    03:b8:47:ef:bf:85:43:4b:81:fd:c2:58:e6:25:1c:
                    3e:fc:10:4f:88:10:47:48:7d:24:0d:2a:40:a0:ae:
                    71:86:c3:ff:25:5c:fd:ac:26:db:11:b4:83:7e:e6:
                    13:0c:84:9e:2a:fa:95:5f:5c:28:5c:3c:ae:a4:33:
                    bd:cc:d7:93:03:d7:76:96:16:dc:9f:9e:d2:4f:44:
                    60:0a:f7:d0:88:7a:43:18:98:8f:31:c6:25:88:78:
                    a4:b4:c1:08:63:10:09:32:7b:6a:0d:cb:1c:0f:ff:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.204.0/22
                IPv6:
                  2001:678:9a4::/48
                  2001:67c:2620::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25238

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:d3:a7:c5:82:ee:65:8e:eb:2b:f9:4a:5f:99:8b:ba:ec:
         95:4d:96:0e:ff:b7:9e:64:08:ad:56:35:ea:2c:e5:23:94:5d:
         61:dd:ca:f0:2f:3f:18:36:29:87:d0:60:38:97:1f:d9:45:8a:
         94:c7:55:74:06:88:d8:f1:56:61:6f:f8:ef:e9:de:a4:3c:4e:
         09:42:cd:e4:1c:0b:a5:af:61:33:e7:0b:aa:30:7a:84:08:52:
         ab:60:ba:cb:aa:fd:53:c3:e0:86:27:e7:04:5e:53:b3:c0:61:
         40:8d:b8:0c:56:b8:b7:66:90:86:f7:91:6c:1d:ef:30:0b:e1:
         80:ac:af:e6:b6:94:a0:b1:f2:82:84:d8:cd:33:13:8e:5a:54:
         af:00:e5:e1:36:d9:fb:d5:2a:92:a3:49:d5:22:f2:d7:87:9c:
         80:6f:8a:81:e2:2e:90:ff:a6:74:05:ab:77:d0:b7:60:dd:36:
         15:18:d3:66:a8:b3:37:8a:6a:c5:ac:9b:66:90:5f:19:6e:73:
         39:e0:84:a8:4d:2b:54:6b:95:f9:5c:e0:9d:28:83:ce:d4:fc:
         cc:56:11:21:17:2f:93:39:50:e0:fd:22:57:f3:a1:e0:7b:6c:
         9a:ec:08:f2:3b:c1:ea:cb:ca:2b:0a:b2:eb:63:12:95:22:8b:
         b8:a9:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----