Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.cer (raw, json)
Hash identifier:          MMVVCt/wQfVzPvMo5i23rwRMSXQRUuzX0WUxDbo7yW4=
Subject key identifier:   B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143D5D191F76A62730D90A904E94CF6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206130
                          IP: 185.110.112.0/22
                          IP: 2a06:55c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:d5:d1:91:f7:6a:62:73:0d:90:a9:04:e9:4c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:3c:15:e3:ee:5a:5c:63:97:71:ef:87:9f:
                    79:ef:61:dc:c2:58:92:df:bf:f5:6a:30:4c:40:1a:
                    45:63:61:3a:dd:7b:bc:61:a4:18:9e:5b:8e:c9:e9:
                    02:c8:1f:b4:67:8f:d0:2f:ce:ab:d2:55:50:d9:d1:
                    98:b0:57:1b:4b:39:e1:3b:74:2c:79:b7:c6:06:9c:
                    ce:9c:db:41:45:e1:96:8f:df:e1:4e:8e:29:27:32:
                    a4:6a:61:04:4b:8d:ac:4a:61:66:9e:bd:bd:31:06:
                    c7:7e:ae:57:16:3c:89:a1:51:7a:cd:61:70:52:9f:
                    0e:19:a5:25:34:f3:62:05:17:37:4f:96:3f:f1:b8:
                    e9:40:ca:46:12:74:4e:a0:8c:c5:10:37:d5:4e:94:
                    a6:51:14:ea:49:24:83:95:b1:75:de:f5:98:18:e8:
                    0d:b4:e1:74:1a:d3:a3:03:b5:1d:20:13:7a:52:3f:
                    de:83:bb:33:4c:ff:9c:f3:ea:64:8b:b9:95:3d:b0:
                    b7:5a:3b:52:41:49:1c:a8:58:89:b6:b5:75:0c:5d:
                    5a:d2:35:f3:7e:4f:02:c6:a7:05:ad:04:af:aa:13:
                    55:69:46:e8:8b:18:73:a2:10:60:aa:29:2b:09:31:
                    7a:87:46:49:06:21:09:a1:36:60:42:37:4a:e0:9f:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.112.0/22
                IPv6:
                  2a06:55c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206130

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:5e:f6:5b:c1:3d:c4:e4:22:8e:e6:82:97:32:84:d1:19:
         16:e0:94:89:54:3d:3f:90:13:3c:32:5b:31:e2:76:64:53:1b:
         fc:3f:e8:94:1a:c3:f4:17:3b:de:f3:06:3a:07:d2:dd:d9:ab:
         f5:d8:62:83:f5:18:29:3d:70:d4:27:c2:94:a3:56:b1:7d:af:
         81:60:e7:47:40:8c:89:1d:5c:c8:ba:d3:5b:07:25:a2:24:a0:
         7a:28:ca:d9:d1:01:fd:80:c2:59:e7:b3:32:52:4c:92:0d:2b:
         19:1f:b1:b9:64:64:b1:b1:31:56:a2:c5:b8:57:f6:bf:cf:7e:
         d5:49:49:e6:ba:3e:21:98:50:d9:a4:a7:bc:2f:9d:4e:33:5c:
         8a:57:aa:62:0e:99:89:10:06:4d:f5:40:bd:bf:f8:86:81:9c:
         85:c5:83:0b:ae:f0:b4:47:29:0c:bc:53:d6:6a:5f:f5:2c:77:
         6a:d3:5d:fb:54:89:84:fd:a9:f0:da:74:0b:36:13:d5:ec:58:
         4f:45:e7:d6:37:0b:06:25:4c:fd:fd:79:51:30:d1:d8:1c:99:
         48:54:7b:ec:89:29:79:3b:de:bc:77:af:fc:eb:0d:b0:d2:b6:
         c9:50:f6:50:fc:59:fb:89:88:53:c3:32:5e:a1:0a:e1:ea:28:
         80:e8:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----