Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
File:                     vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer (raw, json)
Hash identifier:          C8vaokPmUZe+JAvcK7LXY5v2xGHxRnilBtpLXK+zXPk=
Subject key identifier:   BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5C4CA134C771BCC2E4E03133A3D5B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203203
                          IP: 185.179.84.0/22
                          IP: 2a0a:7e80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c4:ca:13:4c:77:1b:cc:2e:4e:03:13:3a:3d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:01:c9:69:4f:73:ac:2f:b3:40:4f:d3:b1:
                    a4:c4:67:df:2c:fd:e9:dc:89:f2:2e:b2:2a:d2:5b:
                    80:27:17:26:dc:47:22:68:41:61:21:77:07:0e:ae:
                    15:cb:45:13:d9:60:2f:2f:71:27:d2:2a:80:0e:ca:
                    50:6e:34:b4:61:22:10:2d:15:e9:49:6b:2f:84:aa:
                    08:df:bf:57:ef:8a:80:ec:a5:c7:93:03:e1:7f:f5:
                    3c:b9:4a:f4:3b:92:c6:04:ee:4e:ad:f2:dc:eb:b6:
                    83:64:ae:c4:f5:6f:0e:9c:ed:b1:e5:22:8e:51:c3:
                    3a:1a:db:98:86:70:a9:84:44:b3:45:a4:48:22:d1:
                    85:fe:9b:bd:19:53:29:0d:f5:6d:2e:74:09:1a:e3:
                    29:40:16:e7:d9:14:f8:b0:8f:81:83:43:34:5e:72:
                    26:7c:98:6e:3c:93:96:dd:95:3a:60:68:ee:fd:21:
                    29:6e:4b:8e:b8:4a:3e:c6:9b:22:63:4e:05:e2:b5:
                    28:8f:b6:e0:1a:46:e6:01:35:09:3e:b7:01:b5:ff:
                    e7:e9:7f:31:e3:73:a9:ea:de:3b:74:8b:36:a0:0d:
                    7b:61:62:f1:3f:95:77:57:79:7f:40:6d:d7:59:9b:
                    6b:36:e7:41:f0:3b:47:6e:e7:b9:03:90:92:6d:88:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.84.0/22
                IPv6:
                  2a0a:7e80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203203

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:b1:5f:14:88:ef:43:91:4d:79:d8:42:96:b0:21:44:0b:
         5b:06:e2:dd:4c:3f:83:39:65:4b:dc:2f:4b:c1:d0:3d:83:fa:
         cb:6e:a3:44:67:74:4f:42:93:e5:b4:f6:28:df:4c:50:1d:59:
         a5:a4:33:85:b6:0b:09:82:77:6f:83:b1:2e:94:64:c9:bd:b1:
         e5:0f:86:08:ad:6f:6e:05:a7:fd:b5:f7:b2:42:bf:16:d1:5f:
         ae:40:18:cd:83:0b:74:97:2e:e9:f1:56:91:2c:42:eb:5b:ff:
         29:fa:27:36:5c:e0:88:c4:a0:fa:aa:38:be:93:e8:c1:3a:50:
         c0:a5:91:fd:16:b5:cf:cf:74:ae:d3:d8:65:d7:01:16:40:4b:
         19:00:ca:4a:1f:4a:af:d4:cb:69:90:31:48:8a:fd:2f:fe:3d:
         fe:25:a2:f4:45:9e:5e:8a:af:e4:16:b4:1a:f3:7b:5e:b9:58:
         2e:68:9a:a9:1d:47:eb:bf:27:9e:7c:a9:b0:36:7f:c9:a1:cb:
         1d:0d:65:d8:89:7c:45:d6:ef:03:96:5c:36:c7:f6:ee:21:a1:
         2e:75:6e:df:76:1b:f9:df:71:e4:86:c5:8d:67:99:cc:7e:92:
         21:6b:98:8e:c1:5a:e5:98:a1:7d:c2:0e:3e:1d:04:e4:17:36:
         89:d9:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----