Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
File:                     tIvY7E4wHJ57CkO-8PPd06RTFVo.cer (raw, json)
Hash identifier:          zIZRwIv0fdvxXEbEOct3QMC4MFz8tnfXwLBWOrSVL8k=
Subject key identifier:   B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244525FBBF8147674D77F00C0C674074
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213913
                          IP: 46.102.234.0/24
                          IP: 2a0c:2780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:25:fb:bf:81:47:67:4d:77:f0:0c:0c:67:40:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:52:88:8b:89:5c:14:66:c1:c6:00:fd:39:
                    95:21:d9:87:e4:a8:7d:6e:ba:31:93:d5:ae:5f:f7:
                    7c:10:30:11:06:5b:a0:3a:45:7d:5b:3e:64:fa:c4:
                    24:bf:17:3b:c3:ea:b5:ce:c7:2e:f2:34:55:d7:2f:
                    a4:4d:34:d9:33:ca:65:18:f9:5e:2a:9d:df:e0:10:
                    00:a9:e0:eb:43:9b:e8:ca:43:dc:4d:fe:53:43:14:
                    77:32:21:14:11:e4:ad:03:7e:5d:e8:bd:41:3f:53:
                    de:3a:6c:2f:16:ac:11:b4:c7:13:26:73:3b:cb:ee:
                    17:6e:3b:e0:63:e7:37:d7:c4:63:dd:1f:07:8b:f8:
                    03:62:4c:42:e5:98:1b:2b:85:0d:1b:2a:2a:fb:22:
                    3f:73:b5:d9:01:52:4b:28:ac:a5:cb:b8:22:fb:0d:
                    20:59:5d:0f:dd:93:fa:ab:da:d0:59:28:d1:1c:a8:
                    cd:10:8c:59:6d:e9:b0:19:47:0d:a3:14:d2:db:35:
                    4e:16:08:87:3d:c2:db:3b:ad:ad:15:0a:7e:7a:d3:
                    5d:d8:a5:4b:9f:53:7a:83:db:ad:fc:28:4c:6a:13:
                    0a:01:9b:fe:0c:81:82:8c:a7:3d:ab:88:02:d1:21:
                    d2:74:1a:2c:85:d1:35:80:72:6d:ee:89:b0:36:ea:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.234.0/24
                IPv6:
                  2a0c:2780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213913

    Signature Algorithm: sha256WithRSAEncryption
         30:8c:2d:2e:c5:b9:f1:d8:6f:48:73:85:a6:3f:ee:b9:a3:f3:
         45:8e:07:48:41:a9:46:c1:88:fc:9d:0c:98:91:26:c5:ba:48:
         e8:d2:42:65:41:9f:6c:45:9d:ad:33:20:73:6e:33:a0:b7:6f:
         c6:36:d6:ec:4b:dc:f1:97:2e:32:ba:c7:67:66:77:1d:fb:92:
         52:57:16:b5:0b:77:c6:f9:d8:be:fb:a4:67:96:87:84:f4:d7:
         63:71:79:d9:d3:22:f6:cb:26:3c:b6:a1:aa:f2:89:09:ec:33:
         04:f0:1b:07:0f:c4:4b:77:c5:6e:e3:4d:f9:15:5f:3d:15:c2:
         d6:42:da:90:a7:25:6a:e3:d5:3f:c6:d4:8f:5d:fe:fd:e7:b0:
         23:41:7a:e0:5b:25:54:ad:29:13:5b:f7:f9:3f:15:9e:5f:10:
         43:bf:12:27:29:83:a6:cf:1f:0a:14:cb:c1:a9:76:53:7f:68:
         61:63:65:e6:62:e5:0a:37:ba:09:cf:5c:6a:11:b3:8a:a0:50:
         96:dd:73:55:6d:dc:84:d1:19:db:89:77:68:8d:b5:ac:c4:4d:
         61:dc:49:c8:f9:49:9d:f1:25:d6:3c:1b:7d:13:d3:27:99:f0:
         94:cd:40:a9:71:f2:92:ea:7c:63:27:29:a0:55:a8:eb:ab:51:
         e0:01:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----