Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
File:                     sA09NPYeSEaIv_-cxwN1WCN3WZg.cer (raw, json)
Hash identifier:          hAtQtBbtCH0uHUhf4RmOPpGIbOqjB+rkDQ4a+T2nhz8=
Subject key identifier:   B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6F07AFD3840A37ECA3BCBADE1EB97
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208799
                          IP: 45.84.16.0/22
                          IP: 2a0e:9280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:f0:7a:fd:38:40:a3:7e:ca:3b:cb:ad:e1:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b00d3d34f61e484688bfff9cc703755823775998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:97:30:eb:c8:97:44:a6:dd:10:ef:5c:63:
                    52:cd:5f:09:6e:f7:85:d7:04:ea:f2:0c:9c:be:bf:
                    38:c9:c4:0f:b9:37:21:ae:64:5e:52:7f:82:b9:ef:
                    8e:46:6e:ac:b8:0f:1f:f1:7a:8d:14:09:e2:5f:3b:
                    f4:aa:3e:28:f1:24:20:ad:ae:da:b0:27:91:83:0c:
                    15:6b:07:dc:0a:7d:e3:87:b7:b6:3c:a6:8e:f0:06:
                    26:3d:79:ee:f6:f6:c1:f4:14:03:83:76:4b:4f:21:
                    7d:b1:4b:24:8a:18:6c:a0:77:dd:aa:b6:2a:93:68:
                    44:bc:3a:6b:c0:88:68:ae:66:2d:4c:11:b8:83:45:
                    af:4c:e1:38:3a:fb:37:a3:d5:04:82:bb:6b:77:2f:
                    d9:98:f3:d8:24:4d:b2:7b:e6:1f:f5:e3:8c:43:56:
                    49:92:c1:1d:9f:d1:d4:53:0a:e4:ed:c9:b0:1f:61:
                    e6:0c:20:47:32:71:57:e7:f8:ce:c4:73:21:36:e2:
                    70:02:a0:cf:2f:da:a7:f6:94:df:3e:e0:f7:7e:8d:
                    34:3b:96:8a:a1:d1:5c:72:00:e5:5c:09:aa:7b:2c:
                    5b:a6:a3:eb:60:76:16:55:c3:75:09:70:53:fb:8e:
                    93:97:69:dd:19:d8:d4:9d:c9:b8:33:03:c9:f6:8f:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.16.0/22
                IPv6:
                  2a0e:9280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208799

    Signature Algorithm: sha256WithRSAEncryption
         61:81:14:f9:30:d7:e6:7f:0b:fe:f3:bb:ac:45:f2:e6:d0:36:
         70:79:00:f8:f6:c8:7c:cc:db:f0:79:bd:c9:75:79:21:26:d7:
         a0:3e:aa:cf:f8:bf:56:e3:c2:5d:46:69:96:b8:61:9e:9a:2d:
         32:c4:46:69:b3:a2:9c:d5:ae:18:01:6c:5b:f5:e0:10:07:46:
         be:5a:13:65:e8:09:ea:0b:8b:be:9b:c9:48:34:ce:05:d5:1f:
         8d:0b:28:e4:63:e9:b8:a7:4f:d4:7b:53:8e:0b:4b:99:b4:fe:
         da:8b:fa:62:8b:f4:1f:c1:55:a4:3e:55:b4:55:15:c0:90:68:
         4c:b6:f1:42:cb:f4:04:67:06:86:5f:3e:d0:77:91:98:ad:89:
         87:5e:76:81:98:ce:5a:4f:03:f1:72:2d:91:e1:c5:a9:b8:7a:
         61:31:04:3a:8c:28:8b:48:1f:c3:b3:ef:72:7f:7e:dd:23:34:
         24:89:c8:f4:5f:bf:f6:c8:30:d7:f1:37:2e:c2:28:1c:2f:47:
         8a:b5:5a:e9:99:c7:b4:63:d2:9d:6b:7e:70:ae:58:34:42:04:
         1a:ba:1e:fa:e0:ca:1e:a1:ea:c2:75:7b:0b:1a:1c:11:85:48:
         97:6b:07:e9:f3:00:8c:8d:82:b1:78:62:9e:4b:71:1d:45:ce:
         cb:f3:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----