Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
File:                     ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer (raw, json)
Hash identifier:          MK4CBMW7BosV7ZxNr9diCjNzZrMPPEUOEeVLpsnqgzA=
Subject key identifier:   C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521F1DC8B359C5A55EFBC2778A77243
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211147
                          IP: 185.120.181.0/24
                          IP: 2a0e:ec0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:f1:dc:8b:35:9c:5a:55:ef:bc:27:78:a7:72:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:27:87:08:00:a9:30:45:d3:09:9b:2e:6d:
                    67:09:7e:f9:89:52:4c:9d:14:84:81:5b:ca:73:5c:
                    60:87:9c:fd:e9:2e:ec:aa:3f:17:61:e2:4e:01:62:
                    f2:2b:15:62:78:f3:b0:5a:c8:34:06:52:81:30:c5:
                    1a:13:0d:66:78:06:35:57:44:48:3d:f0:f3:f1:2c:
                    8f:ee:73:a6:87:cd:6a:d1:66:99:ce:c2:4f:dd:c8:
                    5f:17:38:0e:01:48:3a:cf:ae:ca:98:a9:ee:77:5e:
                    5a:76:ec:11:42:f4:63:13:d4:3d:4a:13:b7:bb:6d:
                    92:4e:da:d5:15:6e:8a:ae:b6:9f:9b:1e:76:3c:e3:
                    3c:71:26:f9:c4:65:b4:b6:69:b1:da:bb:82:d7:3c:
                    5e:22:b2:cd:75:f4:a6:58:9e:a7:0c:b4:68:23:50:
                    fe:35:99:1b:3d:91:7f:bf:85:e1:74:5e:2c:21:42:
                    12:4e:6f:ff:8d:53:6f:14:0f:4f:2c:e7:aa:ff:51:
                    22:b3:a3:da:e2:3a:f9:3c:73:62:42:08:58:c4:9e:
                    d2:3a:38:de:a8:6d:d2:f6:73:5e:30:fa:41:3e:9f:
                    88:f1:17:7b:c0:62:38:0c:65:fc:b9:d8:05:0c:3b:
                    da:20:24:02:b7:42:fd:d1:f1:ff:22:4d:57:19:f1:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.120.181.0/24
                IPv6:
                  2a0e:ec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211147

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:11:4d:74:fa:ee:1e:9e:17:d1:51:b4:e9:a2:b9:00:0a:
         d0:77:2e:7c:ae:f3:7e:13:2a:7d:17:ec:75:29:b6:3f:56:a1:
         bb:12:44:2b:e4:3b:d4:5c:39:ea:32:96:80:76:b9:25:66:d2:
         28:ed:df:d4:94:cc:25:83:6e:a9:8d:28:3b:82:01:1e:04:b3:
         f6:54:74:b5:18:32:43:67:30:66:d4:7f:14:f2:f9:5f:61:39:
         59:38:3c:fc:21:03:f6:90:f1:d4:5c:3e:b7:0d:09:f3:71:5c:
         05:f7:c3:3f:a4:56:0a:4d:11:66:8a:01:c1:63:d2:49:83:56:
         e1:45:6a:63:51:5d:7a:7d:42:be:cb:ec:6c:15:7e:d7:21:d7:
         98:0f:5c:0b:25:bb:0a:e1:f5:a5:f1:4a:80:a3:db:1a:3e:69:
         dd:61:88:72:9f:51:cc:81:48:5c:56:77:e2:c0:ad:ee:68:b1:
         59:7d:32:6f:75:2f:63:1a:07:ef:a3:5a:67:36:d5:a9:f8:5f:
         d9:a3:ff:ad:9a:1a:a4:a4:57:b1:a4:ac:5b:0d:1f:33:10:82:
         bf:4f:6b:0c:98:a7:a2:0c:6e:3e:aa:54:94:3a:b5:54:b7:e1:
         04:7c:c0:ba:4e:ea:ae:92:ee:fe:b4:88:7e:1f:97:f7:92:9f:
         77:96:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----