Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
File:                     w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer (raw, json)
Hash identifier:          Z5ynE3LsuNV3eeMYjwuETp+/79saCSl8Sm6DCDuJusU=
Subject key identifier:   C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521A394CD438C1E7CE5DDE6690FD223
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31043
                          IP: 185.117.112.0/22
                          IP: 195.47.232.0/24
                          IP: 2a0c:3180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:a3:94:cd:43:8c:1e:7c:e5:dd:e6:69:0f:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:61:4e:13:3f:11:4e:e8:77:ae:a5:bc:f8:
                    0f:77:62:84:c7:53:46:e2:65:97:d3:c9:34:3b:dd:
                    89:93:a9:fc:66:7b:50:f0:c1:f8:29:26:dd:d0:02:
                    a1:8e:7e:0f:6e:fe:08:4a:f8:4e:d5:c1:1e:28:94:
                    be:53:e0:2a:b1:a1:ee:c8:4d:d8:92:bb:3a:16:dc:
                    5b:af:09:0c:82:97:15:96:d0:d7:57:9c:32:a8:64:
                    cd:43:bf:9e:ad:3e:76:2d:b0:84:5f:dc:19:3d:44:
                    76:58:c0:57:d3:a4:51:59:14:58:67:dc:ee:5c:d4:
                    92:d3:27:2d:59:7a:8f:3f:72:2f:9e:a5:03:5f:81:
                    b4:fd:a3:7b:6b:ad:6f:21:a1:57:62:72:b3:fb:2c:
                    78:2e:ea:49:fb:ac:9e:ca:cc:76:dd:fd:ec:fc:2f:
                    44:11:d0:d0:e3:03:20:54:2c:12:a9:16:6e:4d:a2:
                    dc:2f:d8:53:b9:e8:e7:87:05:b0:e9:d7:7a:de:52:
                    d2:3b:80:31:5f:13:79:78:56:4a:07:63:4e:50:8e:
                    b6:73:11:2a:79:ab:43:57:8a:2a:c0:f5:90:09:8d:
                    19:97:b9:f3:0f:10:80:11:c6:2e:49:27:6e:8f:e1:
                    21:3e:8a:c2:4b:8f:a2:11:34:6e:7a:4b:28:ec:91:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.112.0/22
                  195.47.232.0/24
                IPv6:
                  2a0c:3180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31043

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:d6:9c:f4:fb:eb:ff:1a:f7:16:4b:ac:66:e0:04:19:4e:
         76:1f:40:99:f3:16:3f:23:4c:f7:d7:94:65:84:a7:09:bf:96:
         e9:3b:d9:51:8b:63:70:2e:6a:ee:5b:41:0b:24:d8:28:b6:1f:
         4d:00:fb:12:93:f0:5f:fc:2b:9c:01:2e:54:dc:3c:69:36:e1:
         c6:b4:82:e0:0e:3e:64:56:8f:9c:ff:c9:90:8b:2e:c8:e2:2e:
         0a:f9:9f:c5:54:87:f4:84:ae:03:fa:7d:66:ec:2f:02:dc:8a:
         a8:13:22:c8:2a:f7:d0:29:f1:6a:73:63:f0:4b:3c:3d:a2:f0:
         84:1e:be:1c:51:69:a8:5a:a3:67:0a:d5:07:3b:bd:3d:f5:46:
         43:94:46:65:3d:ec:8e:4e:4e:71:b7:f5:86:18:85:91:00:d9:
         37:6c:c2:37:9b:68:13:ac:ad:63:9b:0a:34:9f:1e:c3:33:c1:
         6d:62:44:95:a9:94:f2:11:dc:59:81:7e:8a:a3:4b:69:27:b8:
         da:e1:b0:e4:0f:5b:5b:74:d8:d2:49:b2:8a:3f:e5:c2:9e:63:
         25:f8:7e:05:36:08:30:63:6b:80:be:79:f0:e9:83:70:af:9b:
         1e:76:7c:07:53:bf:47:14:72:b5:8c:c3:c2:29:ed:81:24:f9:
         52:2a:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----