Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
File:                     pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer (raw, json)
Hash identifier:          tonm4yOFYrHU1d6jDb5Q/19IcYpzqh7QwJb6B0SNNYU=
Subject key identifier:   A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FD1165419423F052772CF0B198AFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209993
                          IP: 45.90.192.0/22
                          IP: 2a0e:240::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:d1:16:54:19:42:3f:05:27:72:cf:0b:19:8a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a57f291818d8719738268d844994a2e10824d4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:12:48:c3:60:54:8e:9e:d3:ec:1e:b8:7b:
                    bb:8c:e7:83:f4:79:7d:93:fc:18:83:68:69:55:94:
                    b4:d1:51:9e:e0:47:eb:9d:e7:ae:61:27:65:8a:82:
                    05:71:fd:78:fc:e8:c8:87:d6:ba:fb:47:70:7f:d0:
                    2d:1f:aa:67:10:b5:b1:b8:3a:4f:3a:6d:fa:84:3c:
                    9b:3d:eb:5e:a3:ca:77:9e:ac:97:5f:d8:f3:7c:d3:
                    3c:52:fc:3f:67:b3:d2:00:d8:c3:ea:fc:60:49:15:
                    01:d0:c4:20:d7:32:d8:2b:d6:57:fd:87:19:63:77:
                    d9:44:3e:3b:59:29:72:c3:83:31:7e:7a:a1:2a:ee:
                    ee:b7:10:4e:27:53:05:2a:2a:6b:06:4b:09:7c:01:
                    51:5c:7d:41:96:9e:92:56:49:9e:34:d7:c4:48:11:
                    cb:ed:71:dc:52:a7:75:f8:1b:3d:1f:44:93:1d:61:
                    fa:a2:bf:7d:2a:c3:5e:9b:6b:0a:42:5f:f3:06:12:
                    6f:04:ae:49:b2:1a:15:50:4b:97:d0:4f:5e:e8:b8:
                    0c:00:ac:98:18:54:97:fa:01:b4:0e:cb:37:c1:e4:
                    91:28:ce:72:b5:8b:7f:75:df:1f:8b:ca:11:5e:22:
                    11:52:30:b8:a5:a2:e9:d9:19:a2:61:b9:1e:f0:72:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.192.0/22
                IPv6:
                  2a0e:240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209993

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:c4:d7:0a:9f:82:e3:49:85:e0:7b:11:cc:71:d2:0f:4a:
         49:4f:9d:eb:e3:98:0a:74:80:b7:37:7e:bd:66:91:17:c3:cf:
         99:3c:6a:b3:70:6c:4e:b4:42:07:eb:14:14:2c:28:f7:57:ca:
         07:8c:63:f6:3d:65:ea:32:af:16:fd:3c:05:ae:eb:b3:36:74:
         ef:3e:ab:6d:d3:fc:f8:07:3b:d1:aa:d9:35:e2:83:0a:cb:ee:
         4c:8b:d8:05:bf:88:a8:56:92:9d:fc:ed:5f:1b:5a:6a:6a:85:
         e7:d1:85:b2:11:f5:e9:06:a0:82:90:aa:e5:37:54:99:58:76:
         1e:ed:76:3a:58:b1:41:22:67:e4:fb:8b:81:2a:da:18:43:f5:
         11:8f:5b:b1:41:5f:a8:4e:55:f3:30:96:9f:83:89:62:12:98:
         80:16:ac:92:aa:0a:98:fc:c1:88:8d:18:26:5e:54:91:86:ae:
         24:21:03:6a:f9:f6:5a:da:d7:db:1c:9f:cf:9e:94:3c:7e:36:
         c8:f7:22:a2:e1:92:9d:9c:13:ed:1a:56:d2:7e:2d:50:0a:58:
         67:98:fb:9e:25:6a:d5:4d:cf:c2:c3:1e:b6:8c:08:7e:04:7b:
         47:35:81:8a:a9:cc:6b:3a:ae:1c:61:cf:46:4c:5b:10:c2:fc:
         49:56:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----